puppet-prod/hieradata/roles/infra/logs/vlstorage.yaml
Ben Vincent 57a873cad1
All checks were successful
Build / precommit (pull_request) Successful in 4m47s
feat: enable https for vlstorage
- attempting to send to http:// fails as vlstorage is using tls
- enable tls on vlselect/vlinsert when writing to vlstorage
- add retention period to vlstorage
2025-08-09 14:25:22 +10:00

47 lines
1.2 KiB
YAML

---
hiera_include:
- victorialogs::node
victorialogs::node::enable: true
victorialogs::node::data_path: /data/vlstorage
victorialogs::node::options:
storageDataPath: "%{hiera('victorialogs::node::data_path')}"
httpListenAddr: ':9428'
tls: 'true'
tlsCertFile: '/etc/pki/tls/vault/certificate.crt'
tlsKeyFile: '/etc/pki/tls/vault/private.key'
tlsMinVersion: 'TLS12'
memory.allowedBytes: '1GiB'
metrics.exposeMetadata: 'true'
envflag.enable: 'true'
retentionPeriod: 180d
# additional altnames
profiles::pki::vault::alt_names:
- vlstorage.main.unkin.net
- vlstorage.service.consul
- vlstorage.query.consul
- "vlstorage.service.%{facts.country}-%{facts.region}.consul"
consul::services:
vlstorage:
service_name: 'vlstorage'
tags:
- 'metrics'
- 'metrics_scheme=https'
- 'metrics_job=vlstorage'
address: "%{facts.networking.ip}"
port: 9428
checks:
- id: 'vlstorage_http_check'
name: 'vlstorage HTTP Check'
http: "https://%{facts.networking.fqdn}:9428/health"
method: 'GET'
tls_skip_verify: true
interval: '10s'
timeout: '1s'
profiles::consul::client::node_rules:
- resource: service
segment: vlstorage
disposition: write