From 57a873cad188f2cdeef60cd85116d1c146e3b0c2 Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Sat, 9 Aug 2025 14:14:59 +1000 Subject: [PATCH] feat: enable https for vlstorage - attempting to send to http:// fails as vlstorage is using tls - enable tls on vlselect/vlinsert when writing to vlstorage - add retention period to vlstorage --- hieradata/roles/infra/logs/vlinsert.yaml | 1 + hieradata/roles/infra/logs/vlselect.yaml | 1 + hieradata/roles/infra/logs/vlstorage.yaml | 1 + 3 files changed, 3 insertions(+) diff --git a/hieradata/roles/infra/logs/vlinsert.yaml b/hieradata/roles/infra/logs/vlinsert.yaml index 2f5bbc0..a268426 100644 --- a/hieradata/roles/infra/logs/vlinsert.yaml +++ b/hieradata/roles/infra/logs/vlinsert.yaml @@ -13,6 +13,7 @@ victorialogs::node::options: metrics.exposeMetadata: 'true' envflag.enable: 'true' select.disable: 'undef' + storageNode.tls: 'undef' storageNode: - ausyd1nxvm2108.main.unkin.net:9428 - ausyd1nxvm2109.main.unkin.net:9428 diff --git a/hieradata/roles/infra/logs/vlselect.yaml b/hieradata/roles/infra/logs/vlselect.yaml index fe331c4..7caba63 100644 --- a/hieradata/roles/infra/logs/vlselect.yaml +++ b/hieradata/roles/infra/logs/vlselect.yaml @@ -13,6 +13,7 @@ victorialogs::node::options: metrics.exposeMetadata: 'true' envflag.enable: 'true' insert.disable: 'undef' + storageNode.tls: 'undef' storageNode: - ausyd1nxvm2108.main.unkin.net:9428 - ausyd1nxvm2109.main.unkin.net:9428 diff --git a/hieradata/roles/infra/logs/vlstorage.yaml b/hieradata/roles/infra/logs/vlstorage.yaml index fec15e8..f692e7b 100644 --- a/hieradata/roles/infra/logs/vlstorage.yaml +++ b/hieradata/roles/infra/logs/vlstorage.yaml @@ -14,6 +14,7 @@ victorialogs::node::options: memory.allowedBytes: '1GiB' metrics.exposeMetadata: 'true' envflag.enable: 'true' + retentionPeriod: 180d # additional altnames profiles::pki::vault::alt_names: