fluentd-s3/values.yaml at master · kobeBigs/fluentd-s3 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
# clusterName is the name of your cluster
clusterName: clustername

# fluentdawss3 is a nested values which includes the fluentd daemonset docker image, tag, AWS region and toleration key
fluentdawss3:
  image: fluent/fluentd-kubernetes-daemonset # Official fluentd kubernetes docker image
  tag: v1.17.1-debian-s3-1.2
  region: eu-west-2 # AWS region
  tolerations:
    key: somevalue

# Root provider configuration block
provider:
  # AWS-specific configuration section
  aws:
    # External Secrets configuration for AWS secrets management
    externalSecrets:
      # List of applications that need access to external secrets
      apps:
      # First application configuration block
      - name: fluentd-s3            # Application name for Fluentd S3 integration
        enabled: true               # Flag to enable/disable this secret configuration
        remoteSecretBucket: "secret name/path"  # S3 bucket path where secrets are stored

        # List of key mappings between remote and local secrets
        keySets:
        # AWS Secret Access Key mapping
        - remoteKey: "AWS_SECRET_ACCESS_KEY"           # Key name in remote storage
          isRemoteValueB64Encoded: false               # Indicates if the remote value is base64 encoded
          templateKey: "AWS_SECRET_ACCESS_KEY"         # Template key for secret mapping
          localSecretKey: "AWS_SECRET_ACCESS_KEY"      # Key name to use locally in the application
        # AWS Access Key ID mapping
        - remoteKey: "AWS_ACCESS_KEY_ID"              # Remote key for AWS access key ID
          isRemoteValueB64Encoded: false               # Base64 encoding flag
          templateKey: "AWS_ACCESS_KEY_ID"             # Template key for mapping
          localSecretKey: "AWS_ACCESS_KEY_ID"          # Local key name
        # S3 Bucket Name mapping
        - remoteKey: "S3_LOG_BUCKET_NAME"             # Remote key for S3 bucket name
          isRemoteValueB64Encoded: false               # Base64 encoding flag
          templateKey: "S3_LOG_BUCKET_NAME"            # Template key for mapping
          localSecretKey: "S3_LOG_BUCKET_NAME"         # Local key name
        # S3 Bucket Region mapping
        - remoteKey: "S3_LOG_BUCKET_REGION"           # Remote key for S3 bucket region
          isRemoteValueB64Encoded: false               # Base64 encoding flag
          templateKey: "S3_LOG_BUCKET_REGION"          # Template key for mapping
          localSecretKey: "S3_LOG_BUCKET_REGION"       # Local key name