fluent-operator
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
1
# Default values for fluent-operator.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
5
# -- Container runtime used by your Kubernetes cluster. Supported values: containerd, crio, docker
6
containerRuntime: containerd
7
# -- Deploy default Fluent Bit pipeline to collect Kubernetes logs. See https://github.com/fluent/fluent-operator/tree/master/manifests/logging-stack
8
Kubernetes: true
9
# -- Fluent Operator configuration
10
operator:
11
image:
12
# -- Fluent Operator image registry
13
registry: cgr.dev
14
# -- Fluent Operator image repository
15
repository: chainguard-private/fluent-operator-fips
16
# -- Fluent Operator image tag (immutable tags are recommended). Overrides the image tag whose default is the chart appVersion
17
# @default -- Chart appVersion
18
tag: latest@sha256:ef1a6af37ab83d61bc3283deb5858ef261ed2e68d19e40a6c9b302453cb02354
19
# -- Enable Fluent Operator deployment. Set to false to disable creation of ClusterRole, ClusterRoleBinding, Deployment, and ServiceAccount
20
enable: true
21
# -- Node selector for Fluent Operator pods
22
# Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector
23
nodeSelector: {}
24
# -- Affinity for Fluent Operator pods
25
# Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity
26
affinity: {}
27
# -- Tolerations for Fluent Operator pods
28
# Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
29
tolerations: []
30
# -- Priority class name for Fluent Operator pods
31
# Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass
32
priorityClassName: ""
33
# -- Pod security context for Fluent Operator
34
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
35
podSecurityContext:
36
runAsNonRoot: true
37
runAsUser: 65532
38
runAsGroup: 65532
39
fsGroup: 65532
40
seccompProfile:
41
type: RuntimeDefault
42
rbac:
43
# -- Specifies whether to create the ClusterRole and ClusterRoleBinding
44
create: true
45
clusterRole:
46
# -- ClusterRole name
47
name: fluent-operator
48
clusterRoleBinding:
49
# -- ClusterRoleBinding name
50
name: fluent-operator
51
# -- Additional RBAC rules for Fluent Operator ClusterRole. Operator cannot give permissions it does not have
52
additionalRules: []
53
# -- Container security context for Fluent Operator container
54
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
55
securityContext:
56
runAsNonRoot: true
57
runAsUser: 65532
58
runAsGroup: 65532
59
allowPrivilegeEscalation: false
60
readOnlyRootFilesystem: true
61
capabilities:
62
drop:
63
- ALL
64
seccompProfile:
65
type: RuntimeDefault
66
# -- Liveness probe for Fluent Operator
67
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
68
livenessProbe:
69
httpGet:
70
path: /healthz
71
port: 8081
72
initialDelaySeconds: 15
73
periodSeconds: 20
74
timeoutSeconds: 5
75
failureThreshold: 3
76
# -- Readiness probe for Fluent Operator
77
readinessProbe:
78
httpGet:
79
path: /readyz
80
port: 8081
81
initialDelaySeconds: 5
82
periodSeconds: 10
83
timeoutSeconds: 5
84
failureThreshold: 3
85
# -- Fluent Operator resource requests and limits
86
resources:
87
limits:
88
cpu: 100m
89
memory: 60Mi
90
requests:
91
cpu: 100m
92
memory: 20Mi
93
# -- Annotations to add to Fluent Operator pods
94
annotations: {}
95
# -- Image pull secrets for Fluent Operator
96
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
97
imagePullSecrets: []
98
# - name: "image-pull-secret"
99
# -- Labels to add to Fluent Operator pods
100
labels: {}
101
# myExampleLabel: someValue
102
# -- Disable specific component controllers. Value can be "fluent-bit" or "fluentd" to disable that controller
103
disableComponentControllers: ""
104
# -- Extra arguments for the Fluent Operator controller
105
extraArgs: []
106
# - --watch-namespaces=logging
107
108
service:
109
# -- Enable Fluent Operator service
110
enable: true
111
# -- Service type
112
type: ClusterIP
113
# -- Service port name
114
portName: metrics
115
# -- Service port
116
port: 8080
117
# -- Annotations for Fluent Operator service
118
annotations: {}
119
# -- Labels for Fluent Operator service
120
labels: {}
121
serviceMonitor:
122
# -- Enable Prometheus ServiceMonitor for Fluent Operator
123
enable: false
124
# -- Scrape interval
125
interval: 30s
126
# -- Metrics path
127
path: /metrics
128
# -- Scrape timeout
129
scrapeTimeout: 10s
130
# -- Use HTTPS for scraping
131
secure: false
132
# -- TLS configuration for ServiceMonitor
133
tlsConfig: {}
134
# -- Relabeling configs for ServiceMonitor
135
relabelings: []
136
# -- Metric relabeling configs for ServiceMonitor
137
metricRelabelings: []
138
serviceAccount:
139
# -- ServiceAccount name for Fluent Operator
140
name: fluent-operator
141
# -- Fluent Bit configuration
142
fluentbit:
143
# -- Enable Fluent Bit deployment
144
enable: true
145
# -- Override the namespace for FluentBit resources; defaults to .Release.Namespace
146
namespaceOverride: ""
147
metadata:
148
# -- Allow adding custom annotations to the FluentBit resource's metadata
149
annotations: {}
150
serviceMonitor:
151
# -- Enable Prometheus ServiceMonitor for Fluent Bit
152
enable: false
153
# -- Scrape interval
154
interval: 30s
155
# -- Metrics path
156
path: /api/v2/metrics/prometheus
157
# -- Scrape timeout
158
scrapeTimeout: 10s
159
# -- Use HTTPS for scraping
160
secure: false
161
# -- TLS configuration for ServiceMonitor
162
tlsConfig: {}
163
# -- Relabeling configs for ServiceMonitor
164
relabelings: []
165
# -- Metric relabeling configs for ServiceMonitor
166
metricRelabelings: []
167
livenessProbe:
168
# -- Enable liveness probe
169
enabled: true
170
httpGet:
171
port: 2020
172
path: /
173
# -- Initial delay before liveness probe starts
174
initialDelaySeconds: 10
175
# -- Period between liveness probes
176
periodSeconds: 10
177
# -- Timeout for liveness probe
178
timeoutSeconds: 15
179
# -- Success threshold for liveness probe
180
successThreshold: 1
181
# -- Failure threshold for liveness probe
182
failureThreshold: 8
183
image:
184
# -- Fluent Bit image registry
185
registry: cgr.dev
186
# -- Fluent Bit image repository
187
repository: chainguard-private/fluent-bit-fips
188
# -- Fluent Bit image tag
189
# renovate: datasource=docker depName=ghcr.io/fluent/fluent-operator/fluent-bit
190
tag: latest@sha256:8da42352973a4dd866146f8ce9acb17da266152f0d4c6a152f9f7f776b2f9736
191
# -- Fluent Bit resource requests and limits. You can adjust it based on the log volume.
192
# If you do want to specify resources, adjust them as necessary
193
resources:
194
limits:
195
cpu: 500m
196
memory: 200Mi
197
requests:
198
cpu: 10m
199
memory: 25Mi
200
# -- Annotations to add to each Fluent Bit pod
201
# Request to Fluent Bit to exclude or not the logs generated by the Pod: `fluentbit.io/exclude: "true"`
202
# Prometheus can use this tag to automatically discover the Pod and collect monitoring data: `prometheus.io/scrape: "true"`
203
annotations: {}
204
## Request to Fluent Bit to exclude or not the logs generated by the Pod.
205
# fluentbit.io/exclude: "true"
206
## Prometheus can use this tag to automatically discover the Pod and collect monitoring data
207
# prometheus.io/scrape: "true"
208
# -- Additional custom labels for Fluent Bit pods
209
labels: {}
210
# -- Additional custom annotations for Fluent Bit ServiceAccount
211
serviceAccountAnnotations: {}
212
# -- Specify storage for position db. You will use it if tail input is enabled.
213
# Ref: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#volumesource-v1-core
214
positionDB:
215
hostPath:
216
path: /var/lib/fluent-bit/
217
# -- Image pull secrets for Fluent Bit
218
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
219
imagePullSecrets: []
220
# - name: "image-pull-secret"
221
# -- Log level for Fluent Bit
222
logLevel: ""
223
# -- Secrets to mount in Fluent Bit pods
224
secrets: []
225
# -- Use host network for Fluent Bit DaemonSet
226
hostNetwork: false
227
# -- Additional ports for Fluent Bit
228
ports: []
229
# - containerPort: 514
230
# name: syslog-tcp
231
# protocol: TCP
232
# -- Pod security context for Fluent Bit pods
233
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
234
podSecurityContext: {}
235
# -- Security context for Fluent Bit container
236
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
237
securityContext: {}
238
# -- Additional volumes that can be mounted by containers belonging to the pod
239
additionalVolumes: []
240
# -- Additional RBAC rules which will be applied to the Fluent Bit ClusterRole
241
# NOTE: As fluent-bit is managed by the fluent-operator, fluent-bit can only be granted permissions the operator also has
242
# Ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#rolebinding-and-clusterrolebinding
243
rbacRules: {}
244
# -- Additional volume mounts to mount into the container's filesystem
245
additionalVolumesMounts: []
246
# -- Affinity configuration for Fluent Bit pods
247
# Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity
248
affinity:
249
nodeAffinity:
250
requiredDuringSchedulingIgnoredDuringExecution:
251
nodeSelectorTerms:
252
- matchExpressions:
253
- key: node-role.kubernetes.io/edge
254
operator: DoesNotExist
255
# -- Init containers for Fluent Bit pods
256
# Ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
257
initContainers: []
258
# -- Node selector for Fluent Bit pods
259
# Ref: https://kubernetes.io/docs/user-guide/node-selection/
260
nodeSelector: {}
261
# -- Node tolerations for Fluent Bit pods
262
# Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
263
tolerations:
264
- operator: Exists
265
# -- Priority class for Fluent Bit pods
266
# Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass
267
priorityClassName: ""
268
# -- Custom command for Fluent Bit containers
269
command: []
270
# -- Custom command line arguments for Fluent Bit containers
271
args: []
272
# -- Environment variables that can be passed to Fluent Bit pods
273
envVars: []
274
# - name: FOO
275
# value: "bar"
276
# -- Scheduler name for Fluent Bit pods
277
schedulerName: ""
278
# Remove the above empty volumes and volumesMounts, and then set additionalVolumes and additionalVolumesMounts as below if you want to collect node exporter metrics
279
# additionalVolumes:
280
# - name: hostProc
281
# hostPath:
282
# path: /proc/
283
# - name: hostSys
284
# hostPath:
285
# path: /sys/
286
# Uncomment the code if you intend to create the volume for buffer storage in case the storage type "filesystem" is being used in the configuration of the fluentbit service.
287
# - name: hostBuffer
288
# hostPath:
289
# path: /tmp/fluent-bit-buffer
290
# additionalVolumesMounts:
291
# - mountPath: /host/sys
292
# mountPropagation: HostToContainer
293
# name: hostSys
294
# readOnly: true
295
# - mountPath: /host/proc
296
# mountPropagation: HostToContainer
297
# name: hostProc
298
# readOnly: true
299
# Uncomment the code if you intend to mount the volume for buffer storage in case the storage type "filesystem" is being used in the configuration of the fluentbit service.
300
# - mountPath: /host/fluent-bit-buffer
301
# mountPropagation: HostToContainer
302
# name: hostBuffer
303
304
# -- Namespace selector for Fluent Bit configuration
305
namespaceFluentBitCfgSelector: {}
306
# -- Configure the format of the config file to either classic or yaml. Default to classic when this value is not set
307
# configFileFormat: yaml
308
309
# Set a limit of memory that Tail plugin can use when appending data to the Engine.
310
# You can find more details here: https://docs.fluentbit.io/manual/pipeline/inputs/tail#config
311
# If the limit is reach, it will be paused; when the data is flushed it resumes.
312
# if the inbound traffic is less than 2.4Mbps, setting memBufLimit to 5MB is enough
313
# if the inbound traffic is less than 4.0Mbps, setting memBufLimit to 10MB is enough
314
# if the inbound traffic is less than 13.64Mbps, setting memBufLimit to 50MB is enough
315
input:
316
tail:
317
# -- Enable tail input
318
enable: true
319
# -- Refresh interval for tail input in seconds
320
refreshIntervalSeconds: 10
321
# -- Memory buffer limit for tail input
322
memBufLimit: 100MB
323
# -- Buffer max size for tail input
324
bufferMaxSize: ""
325
# -- Buffer chunk size for tail input
326
bufferChunkSize: ""
327
# -- Path to container logs
328
path: "/var/log/containers/*.log"
329
# -- Skip long lines in logs
330
skipLongLines: true
331
# -- Skip empty lines in logs
332
skipEmptyLines: true
333
# -- Read from head of log file
334
readFromHead: false
335
# -- Storage type for tail input buffering. Use "filesystem" for persistent buffering.
336
storageType: memory
337
# -- Pause input when chunks overlimit
338
pauseOnChunksOverlimit: "off"
339
# -- Multiline parser for tail input
340
# multilineParser: "docker, cri"
341
systemd:
342
# -- Enable systemd input
343
enable: true
344
systemdFilter:
345
# -- Enable systemd filter
346
enable: true
347
# -- Systemd unit filters
348
filters: []
349
# -- Path to systemd journal
350
path: "/var/log/journal"
351
# -- Include kubelet logs from systemd
352
includeKubelet: true
353
# -- Strip underscores from systemd field names
354
stripUnderscores: "off"
355
# -- Storage type for systemd input buffering. Use "filesystem" for persistent buffering.
356
storageType: memory
357
# -- Pause input when chunks overlimit
358
pauseOnChunksOverlimit: "off"
359
# -- Node exporter metrics input configuration
360
nodeExporterMetrics: {}
361
# uncomment below nodeExporterMetrics section if you want to collect node exporter metrics
362
# nodeExporterMetrics:
363
# tag: node_metrics
364
# scrapeInterval: 15s
365
# path:
366
# procfs: /host/proc
367
# sysfs: /host/sys
368
# -- Fluent Bit metrics input configuration
369
fluentBitMetrics: {}
370
# uncomment below fluentBitMetrics section if you want to collect fluentBit metrics
371
# fluentBitMetrics:
372
# scrapeInterval: "2"
373
# scrapeOnStart: true
374
# tag: "fb.metrics"
375
376
# Configure the output plugin parameter in FluentBit.
377
# You can set enable to true to output logs to the specified location.
378
output:
379
# You can find more supported output plugins here: https://github.com/fluent/fluent-operator/tree/master/docs/plugins/fluentbit/output
380
es:
381
# -- Enable Elasticsearch output
382
enable: false
383
# -- Elasticsearch host
384
host: "<Elasticsearch url like elasticsearch-logging-data.kubesphere-logging-system.svc>"
385
# -- Elasticsearch port
386
port: 9200
387
# -- Logstash prefix for Elasticsearch indices
388
logstashPrefix: ks-logstash-log
389
# -- Buffer size for Elasticsearch output
390
bufferSize: 20MB
391
# -- Trace errors in Elasticsearch output
392
traceError: true
393
# logstashPrefixKey: ks-logstash-log
394
# suppressTypeName: "On"
395
# path: ""
396
# index: "fluent-bit"
397
# httpUser:
398
# valueFrom:
399
# secretKeyRef:
400
# key: value
401
# name: husersecret
402
# httpPassword:
403
# valueFrom:
404
# secretKeyRef:
405
# key: value
406
# name: hpasssecret
407
# logstashFormat: true
408
# replaceDots: false
409
# writeOperation: upsert
410
# tls:
411
# enable: false
412
# verify: On
413
# debug: 1
414
# caFile: "<Absolute path to CA certificate file>"
415
# caPath: "<Absolute path to scan for certificate files>"
416
# crtFile: "<Absolute path to private Key file>"
417
# keyFile: "<Absolute path to private Key file>"
418
# keyPassword:
419
# vhost: "<Hostname to be used for TLS SNI extension>"
420
kafka:
421
# -- Enable Kafka output
422
enable: false
423
# -- Log level for Kafka output
424
logLevel: info
425
# -- Kafka broker list
426
brokers: "<kafka broker list like xxx.xxx.xxx.xxx:9092,yyy.yyy.yyy.yyy:9092>"
427
# -- Kafka topics
428
topics: ks-log
429
# -- OpenTelemetry output configuration
430
opentelemetry: {}
431
# You can configure the opentelemetry-related configuration here
432
# -- OpenSearch output configuration
433
opensearch: {}
434
# You can configure the opensearch-related configuration here
435
stdout:
436
# -- Enable stdout output
437
enable: false
438
# -- Prometheus metrics exporter configuration
439
# Uncomment the following section to enable Prometheus metrics exporter.
440
prometheusMetricsExporter: {}
441
# prometheusMetricsExporter:
442
# match: "fb.metrics"
443
# metricsExporter:
444
# host: "0.0.0.0"
445
# port: 2020
446
# addLabels:
447
# app: "fluentbit"
448
449
# Loki fluentbit ClusterOutput, to be encapsulated in fluentbit config
450
# See https://github.com/fluent/fluent-operator/blob/master/docs/plugins/fluentbit/output/loki.md
451
# See https://docs.fluentbit.io/manual/pipeline/outputs/loki
452
loki:
453
# -- Enable Loki output
454
enable: false
455
# -- Retry limit for Loki output
456
retryLimit: "no_limits"
457
# -- Log level for Loki output
458
logLevel: "info"
459
# -- Loki host
460
host: 127.0.0.1
461
# -- Loki port
462
port: 3100
463
# Either, give http{User,Password},tenantID string values specifying them directly
464
# -- HTTP basic auth username for Loki
465
httpUser: myuser
466
# -- HTTP basic auth password for Loki
467
httpPassword: mypass
468
# -- Tenant ID for Loki
469
tenantID: ""
470
# Or give {http{User,Password},tenantID} as reference to secrets that you have manually installed into your kubernetes cluster
471
# httpUser:
472
# valueFrom:
473
# secretKeyRef:
474
# key: value
475
# name: husersecret
476
# optional: true
477
# httpPassword:
478
# valueFrom:
479
# secretKeyRef:
480
# key: value
481
# name: hpasssecret
482
# optional: true
483
# tenantID:
484
# valueFrom:
485
# secretKeyRef:
486
# key: value
487
# name: tenantsecret
488
# optional: true
489
#
490
# To use bearer token auth instead of http basic auth
491
# bearerToken: ey....
492
# or with existing secret
493
# bearerToken:
494
# valueFrom:
495
# secretKeyRef:
496
# key: value
497
# name: bearerTokenSecret
498
# optional: true
499
# labels: [] # String list of <name>=<value>
500
# labelKeys: [] # String list of <key>
501
# removeKeys: [] # String list of <key>
502
# labelMapPath: '' # String, path to file, ex /here/it/is
503
# dropSingleKey: off
504
# lineFormat: '' # String
505
# autoKubernetesLabels: on
506
# tenantIDKey: # String
507
# tls: {} # *plugins.TLS fluentbit docs
508
# -- Stackdriver output configuration
509
stackdriver: {}
510
# You can configure the stackdriver configuration here
511
service:
512
# Scheduler configuration for retry wait times (supported in Fluent Bit >= 1.8.7)
513
# -- Scheduler base for exponential backoff (seconds)
514
# schedulerBase: 5
515
# -- Scheduler cap for maximum retry time (seconds)
516
# schedulerCap: 2000
517
# -- Storage configuration for Fluent Bit buffering
518
storage: {}
519
# Remove the above storage section and uncomment below section if you want to configure file-system as storage for buffer
520
# storage:
521
# path: "/host/fluent-bit-buffer/"
522
# backlogMemLimit: "50MB"
523
# checksum: "off"
524
# deleteIrrecoverableChunks: "on"
525
# maxChunksUp: 128
526
# metrics: "on"
527
# sync: normal
528
529
# Configure the default filters in FluentBit.
530
# The `filter` will filter and parse the collected log information and output the logs into a uniform format. You can choose whether to turn this on or not.
531
filter:
532
multiline:
533
# -- Enable multiline filter
534
enable: false
535
# -- Key content field for multiline filter
536
keyContent: log
537
# -- Buffer for multiline filter
538
buffer: false
539
# -- Emitter memory buffer limit in MB
540
emitterMemBufLimit: 120
541
# -- Emitter type for multiline filter
542
emitterType: memory
543
# -- Flush interval in milliseconds
544
flushMs: 2000
545
# -- Mode can be either "parser" or "partial_message"
546
# mode: parser
547
# -- Name for the emitter input instance which re-emits the completed records at the beginning of the pipeline
548
# emitterName: my-emitter
549
# -- Multiline parsers to use
550
parsers:
551
- go
552
- python
553
- java
554
# use custom multiline parser need set .Values.parsers.javaMultiline.enable = true
555
# - java-multiline
556
kubernetes:
557
# -- Enable Kubernetes metadata filter
558
enable: true
559
# -- Include Kubernetes labels in logs
560
labels: false
561
# -- Include Kubernetes annotations in logs
562
annotations: false
563
containerd:
564
# This is customized lua containerd log format converter, you can refer here:
565
# https://github.com/fluent/fluent-operator/blob/master/charts/fluent-operator/templates/fluentbit-clusterfilter-containerd.yaml
566
# https://github.com/fluent/fluent-operator/blob/master/charts/fluent-operator/templates/fluentbit-containerd-config.yaml
567
# -- Enable containerd log format converter filter
568
enable: true
569
systemd:
570
# -- Enable systemd filter
571
enable: true
572
kubeedge:
573
# -- Enable KubeEdge integration for Fluent Bit
574
enable: false
575
prometheusRemoteWrite:
576
# -- Host of a cloud-side Prometheus-compatible server that can receive Prometheus remote write data
577
host: "<cloud-prometheus-service-host>"
578
# -- Port of a cloud-side Prometheus-compatible server that can receive Prometheus remote write data
579
port: "<cloud-prometheus-service-port>"
580
# -- Removes the hostPath mounts for varlibcontainers, varlogs and systemd
581
disableLogVolumes: false
582
parsers:
583
javaMultiline:
584
# -- Enable Java multiline parser for generic springboot multiline log format
585
enable: false
586
# -- Using namespaceClusterFbCfg, deploy fluent-bit configmap and secret in this namespace.
587
# If it is not defined, it is in the namespace of the fluent-operator.
588
namespaceClusterFbCfg: ""
589
# -- Fluentd configuration
590
fluentd:
591
# -- Enable Fluentd deployment
592
enable: false
593
# -- Fluentd name
594
name: fluentd
595
# -- Fluentd deployment mode. Valid values: "collector" (StatefulSet) or "agent" (DaemonSet)
596
mode: "collector"
597
# -- Fluentd port
598
port: 24224
599
image:
600
# -- Fluentd image registry
601
registry: cgr.dev
602
# -- Fluentd image repository
603
repository: chainguard-private/fluent-operator-fluentd-fips
604
# renovate: datasource=docker depName=ghcr.io/fluent/fluent-operator/fluentd
605
# -- Fluentd image tag
606
tag: latest@sha256:7d07ff0da26711b44f16decf2e591021688602b6f16b13af0e108924f64ccfd4
607
# -- Number of Fluentd replicas
608
# Applicable when the mode is "collector", and will be ignored when the mode is "agent"
609
replicas: 1
610
forward:
611
# -- Forward input port
612
port: 24224
613
# -- Retain metadata when forwarding in forward mode.
614
# Set to false for Fluentd compatibility with Fluent Bit v5.0.5+.
615
retainMetadataInForwardMode: ~
616
# -- Namespaces to watch for Fluentd resources
617
watchedNamespaces:
618
- kube-system
619
- default
620
# -- Fluentd resource requests and limits
621
resources:
622
limits:
623
cpu: 500m
624
memory: 500Mi
625
requests:
626
cpu: 100m
627
memory: 128Mi
628
# -- Scheduler name for Fluentd pods
629
schedulerName: ""
630
# -- Environment variables that can be passed to Fluentd pods
631
envVars: []
632
# - name: FOO
633
# value: "bar"
634
# -- Image pull secrets for Fluentd
635
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
636
# -- Pod security context for Fluentd pod
637
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
638
podSecurityContext: {}
639
# -- Container security context for Fluentd container
640
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
641
securityContext: {}
642
# -- Image pull secrets for Fluentd
643
imagePullSecrets: []
644
# - name: "image-pull-secret"
645
# -- Log level for Fluentd
646
logLevel: ""
647
# -- Priority class name for Fluentd pods
648
priorityClassName: ""
649
# -- Extra configuration for Fluentd
650
extras: {}
651
# Configure the output plugin parameter in Fluentd.
652
# Fluentd is disabled by default, if you enable it make sure to also set up an output to use.
653
output:
654
es:
655
# -- Enable Elasticsearch output for Fluentd
656
enable: false
657
# -- Elasticsearch host
658
host: elasticsearch-logging-data.kubesphere-logging-system.svc
659
# -- Elasticsearch port
660
port: 9200
661
# -- Logstash prefix for Elasticsearch indices
662
logstashPrefix: ks-logstash-log
663
buffer:
664
# -- Enable buffer for Elasticsearch output
665
enable: false
666
# -- Buffer type
667
type: file
668
# -- Buffer path
669
path: /buffers/es
670
kafka:
671
# -- Enable Kafka output for Fluentd
672
enable: false
673
# -- Kafka broker list
674
brokers: "my-cluster-kafka-bootstrap.default.svc:9091,my-cluster-kafka-bootstrap.default.svc:9092,my-cluster-kafka-bootstrap.default.svc:9093"
675
# -- Kafka topic key
676
topicKey: kubernetes_ns
677
buffer:
678
# -- Enable buffer for Kafka output
679
enable: false
680
# -- Buffer type
681
type: file
682
# -- Buffer path
683
path: /buffers/kafka
684
# -- OpenSearch output configuration for Fluentd
685
opensearch: {}
686
# -- Override name of the chart
687
nameOverride: ""
688
# -- Override full name of the chart
689
fullnameOverride: ""
690
# -- Override namespace where resources are deployed
691
namespaceOverride: ""
692
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.