From c0e65fade3a62ddc6e21d305f4e34cee2acb1254 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sun, 27 Sep 2026 10:01:49 +1000 Subject: [PATCH] Ship estate journald logs to the k8s log ingest endpoint (#531) The estate ships journald to the VM VictoriaLogs cluster, which is being left to age out rather than grow. New log capacity lands in k8s, so clients need to point there while the VM cluster keeps serving historical queries until its retention lapses. - repoint victorialogs::client::journald::inserturl at https://logs-ingest.k8s.syd1.au.unkin.net/insert/journald VMs already trust the issuing CA via the system bundle, so journal-upload needs no TLS change. Requires the k8s VLCluster deployed and serving /insert/journald first. Reviewed-on: https://git.unkin.net/unkin/puppet-prod/pulls/531 Co-authored-by: unkin-agent Co-committed-by: unkin-agent --- hieradata/common.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hieradata/common.yaml b/hieradata/common.yaml index b23fc87..8ac63f9 100644 --- a/hieradata/common.yaml +++ b/hieradata/common.yaml @@ -401,7 +401,7 @@ networking::route_defaults: # logging: victorialogs::client::journald::enable: true -victorialogs::client::journald::inserturl: https://vlinsert.service.consul:9428/insert/journald +victorialogs::client::journald::inserturl: https://logs-ingest.k8s.syd1.au.unkin.net/insert/journald # FIXME these are for the proxmox ceph cluster profiles::ceph::client::fsid: 7f7f00cb-95de-498c-8dcc-14b54e4e9ca8