puppet-prod/hieradata/roles/infra/logs/vlinsert.yaml
Ben Vincent b0eed9c516
All checks were successful
Build / precommit (pull_request) Successful in 5m11s
feat: add syslog listener for vlinsert
- enable syslog capture via vlinsert
- add syslog.service.consul service
2025-11-20 21:39:41 +11:00

67 lines
1.8 KiB
YAML

---
hiera_include:
- victorialogs::node
victorialogs::node::enable: true
victorialogs::node::options:
httpListenAddr: ':9428'
tls: 'true'
tlsCertFile: '/etc/pki/tls/vault/certificate.crt'
tlsKeyFile: '/etc/pki/tls/vault/private.key'
tlsMinVersion: 'TLS12'
memory.allowedBytes: '1GiB'
metrics.exposeMetadata: 'true'
envflag.enable: 'true'
select.disable: 'undef'
storageNode.tls: 'undef'
syslog.listenAddr.tcp: ':21514'
syslog.timezone: 'Australia/Sydney'
storageNode:
- ausyd1nxvm2108.main.unkin.net:9428
- ausyd1nxvm2109.main.unkin.net:9428
- ausyd1nxvm2110.main.unkin.net:9428
- ausyd1nxvm2111.main.unkin.net:9428
- ausyd1nxvm2112.main.unkin.net:9428
# additional altnames
profiles::pki::vault::alt_names:
- vlinsert.main.unkin.net
- vlinsert.service.consul
- vlinsert.query.consul
- "vlinsert.service.%{facts.country}-%{facts.region}.consul"
consul::services:
vlinsert:
service_name: 'vlinsert'
tags:
- 'metrics'
- 'metrics_scheme=https'
- 'metrics_job=vlinsert'
address: "%{facts.networking.ip}"
port: 9428
checks:
- id: 'vlinsert_http_check'
name: 'vlinsert HTTP Check'
http: "https://%{facts.networking.fqdn}:9428/health"
method: 'GET'
tls_skip_verify: true
interval: '10s'
timeout: '1s'
syslog:
service_name: 'syslog'
address: "%{facts.networking.ip}"
port: 21514
checks:
- id: 'vlinsert_syslog_tcp_check'
name: 'VictoriaLogs Syslog TCP Check'
tcp: "%{facts.networking.fqdn}:21514"
interval: '30s'
timeout: '5s'
profiles::consul::client::node_rules:
- resource: service
segment: vlinsert
disposition: write
- resource: service
segment: syslog
disposition: write