DirectorySecurity AdvisoriesPricing
Sign in
Directory
fluent-operator logoHELM

fluent-operator

Helm chart
Last changed
Request a free trial

Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.

Overview
Chart tags
Default values
Chart metadata
Images

Tag:
Compare:

1
# Default values for fluent-operator.
2
# This is a YAML-formatted file.
3
# Declare variables to be passed into your templates.
4
5
# -- Container runtime used by your Kubernetes cluster. Supported values: containerd, crio, docker
6
containerRuntime: containerd
7
# -- Deploy default Fluent Bit pipeline to collect Kubernetes logs. See https://github.com/fluent/fluent-operator/tree/master/manifests/logging-stack
8
Kubernetes: true
9
# -- Fluent Operator configuration
10
operator:
11
image:
12
# -- Fluent Operator image registry
13
registry: cgr.dev
14
# -- Fluent Operator image repository
15
repository: chainguard-private/fluent-operator
16
# -- Fluent Operator image tag (immutable tags are recommended). Overrides the image tag whose default is the chart appVersion
17
# @default -- Chart appVersion
18
tag: 3.11.0-r0@sha256:fb36e7a978514e0c74aa3cdd06e2e314d708fec788e6754ff8323c9b7dd3bcf6
19
# -- Enable Fluent Operator deployment. Set to false to disable creation of ClusterRole, ClusterRoleBinding, Deployment, and ServiceAccount
20
enable: true
21
# -- Node selector for Fluent Operator pods
22
# Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector
23
nodeSelector: {}
24
# -- Affinity for Fluent Operator pods
25
# Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity
26
affinity: {}
27
# -- Tolerations for Fluent Operator pods
28
# Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
29
tolerations: []
30
# -- Priority class name for Fluent Operator pods
31
# Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass
32
priorityClassName: ""
33
# -- Pod security context for Fluent Operator
34
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
35
podSecurityContext:
36
runAsNonRoot: true
37
runAsUser: 65532
38
runAsGroup: 65532
39
fsGroup: 65532
40
seccompProfile:
41
type: RuntimeDefault
42
rbac:
43
# -- Specifies whether to create the ClusterRole and ClusterRoleBinding
44
create: true
45
clusterRole:
46
# -- ClusterRole name
47
name: fluent-operator
48
clusterRoleBinding:
49
# -- ClusterRoleBinding name
50
name: fluent-operator
51
# -- Additional RBAC rules for Fluent Operator ClusterRole. Operator cannot give permissions it does not have
52
additionalRules: []
53
# -- Container security context for Fluent Operator container
54
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
55
securityContext:
56
runAsNonRoot: true
57
runAsUser: 65532
58
runAsGroup: 65532
59
allowPrivilegeEscalation: false
60
readOnlyRootFilesystem: true
61
capabilities:
62
drop:
63
- ALL
64
seccompProfile:
65
type: RuntimeDefault
66
# -- Liveness probe for Fluent Operator
67
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/
68
livenessProbe:
69
httpGet:
70
path: /healthz
71
port: 8081
72
initialDelaySeconds: 15
73
periodSeconds: 20
74
timeoutSeconds: 5
75
failureThreshold: 3
76
# -- Readiness probe for Fluent Operator
77
readinessProbe:
78
httpGet:
79
path: /readyz
80
port: 8081
81
initialDelaySeconds: 5
82
periodSeconds: 10
83
timeoutSeconds: 5
84
failureThreshold: 3
85
# -- Fluent Operator resource requests and limits
86
resources:
87
limits:
88
cpu: 100m
89
memory: 128Mi
90
requests:
91
cpu: 100m
92
memory: 20Mi
93
# -- Annotations to add to Fluent Operator pods
94
annotations: {}
95
# -- Image pull secrets for Fluent Operator
96
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
97
imagePullSecrets: []
98
# - name: "image-pull-secret"
99
# -- Labels to add to Fluent Operator pods
100
labels: {}
101
# myExampleLabel: someValue
102
# -- Disable specific component controllers. Value can be "fluent-bit" or "fluentd" to disable that controller
103
disableComponentControllers: ""
104
# -- Extra arguments for the Fluent Operator controller
105
extraArgs: []
106
# - --watch-namespaces=logging
107
108
service:
109
# -- Enable Fluent Operator service
110
enable: true
111
# -- Service type
112
type: ClusterIP
113
# -- Service port name
114
portName: metrics
115
# -- Service port
116
port: 8080
117
# -- Annotations for Fluent Operator service
118
annotations: {}
119
# -- Labels for Fluent Operator service
120
labels: {}
121
serviceMonitor:
122
# -- Enable Prometheus ServiceMonitor for Fluent Operator
123
enable: false
124
# -- Scrape interval
125
interval: 30s
126
# -- Metrics path
127
path: /metrics
128
# -- Scrape timeout
129
scrapeTimeout: 10s
130
# -- Use HTTPS for scraping
131
secure: false
132
# -- TLS configuration for ServiceMonitor
133
tlsConfig: {}
134
# -- Relabeling configs for ServiceMonitor
135
relabelings: []
136
# -- Metric relabeling configs for ServiceMonitor
137
metricRelabelings: []
138
serviceAccount:
139
# -- ServiceAccount name for Fluent Operator
140
name: fluent-operator
141
# -- Fluent Bit configuration
142
fluentbit:
143
# -- Enable Fluent Bit deployment
144
enable: true
145
# -- Override the namespace for FluentBit resources; defaults to .Release.Namespace
146
namespaceOverride: ""
147
metadata:
148
# -- Allow adding custom annotations to the FluentBit resource's metadata
149
annotations: {}
150
serviceMonitor:
151
# -- Enable Prometheus ServiceMonitor for Fluent Bit
152
enable: false
153
# -- Scrape interval
154
interval: 30s
155
# -- Metrics path
156
path: /api/v2/metrics/prometheus
157
# -- Scrape timeout
158
scrapeTimeout: 10s
159
# -- Use HTTPS for scraping
160
secure: false
161
# -- TLS configuration for ServiceMonitor
162
tlsConfig: {}
163
# -- Relabeling configs for ServiceMonitor
164
relabelings: []
165
# -- Metric relabeling configs for ServiceMonitor
166
metricRelabelings: []
167
livenessProbe:
168
# -- Enable liveness probe
169
enabled: true
170
httpGet:
171
port: 2020
172
path: /
173
# -- Initial delay before liveness probe starts
174
initialDelaySeconds: 10
175
# -- Period between liveness probes
176
periodSeconds: 10
177
# -- Timeout for liveness probe
178
timeoutSeconds: 15
179
# -- Success threshold for liveness probe
180
successThreshold: 1
181
# -- Failure threshold for liveness probe
182
failureThreshold: 8
183
image:
184
# -- Fluent Bit image registry
185
registry: cgr.dev
186
# -- Fluent Bit image repository
187
repository: chainguard-private/fluent-bit
188
# -- Fluent Bit image tag
189
# renovate: datasource=docker depName=ghcr.io/fluent/fluent-operator/fluent-bit
190
tag: 5.1.5-r0@sha256:62aba747d3304031350a87af9f38f21dd01abfc0203e3b4d5635ff4d59c089f2
191
# -- Fluent Bit resource requests and limits. You can adjust it based on the log volume.
192
# If you do want to specify resources, adjust them as necessary
193
resources:
194
limits:
195
cpu: 500m
196
memory: 200Mi
197
requests:
198
cpu: 10m
199
memory: 25Mi
200
# -- Annotations to add to each Fluent Bit pod
201
# Request to Fluent Bit to exclude or not the logs generated by the Pod: `fluentbit.io/exclude: "true"`
202
# Prometheus can use this tag to automatically discover the Pod and collect monitoring data: `prometheus.io/scrape: "true"`
203
annotations: {}
204
## Request to Fluent Bit to exclude or not the logs generated by the Pod.
205
# fluentbit.io/exclude: "true"
206
## Prometheus can use this tag to automatically discover the Pod and collect monitoring data
207
# prometheus.io/scrape: "true"
208
# -- Additional custom labels for Fluent Bit pods
209
labels: {}
210
# -- Additional custom annotations for Fluent Bit ServiceAccount
211
serviceAccountAnnotations: {}
212
# -- Specify storage for position db. You will use it if tail input is enabled.
213
# Ref: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#volumesource-v1-core
214
positionDB:
215
hostPath:
216
path: /var/lib/fluent-bit/
217
# -- Image pull secrets for Fluent Bit
218
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
219
imagePullSecrets: []
220
# - name: "image-pull-secret"
221
# -- Log level for Fluent Bit
222
logLevel: ""
223
# -- Secrets to mount in Fluent Bit pods
224
secrets: []
225
# -- Use host network for Fluent Bit DaemonSet
226
hostNetwork: false
227
# -- Additional ports for Fluent Bit
228
ports: []
229
# - containerPort: 514
230
# name: syslog-tcp
231
# protocol: TCP
232
# -- Pod security context for Fluent Bit pods
233
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
234
podSecurityContext: {}
235
# -- Security context for Fluent Bit container
236
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
237
securityContext: {}
238
# -- Additional volumes that can be mounted by containers belonging to the pod
239
additionalVolumes: []
240
# -- Additional RBAC rules which will be applied to the Fluent Bit ClusterRole
241
# NOTE: As fluent-bit is managed by the fluent-operator, fluent-bit can only be granted permissions the operator also has
242
# Ref: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#rolebinding-and-clusterrolebinding
243
rbacRules: {}
244
# -- Additional volume mounts to mount into the container's filesystem
245
additionalVolumesMounts: []
246
# -- Affinity configuration for Fluent Bit pods
247
# Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity
248
affinity:
249
nodeAffinity:
250
requiredDuringSchedulingIgnoredDuringExecution:
251
nodeSelectorTerms:
252
- matchExpressions:
253
- key: node-role.kubernetes.io/edge
254
operator: DoesNotExist
255
# -- Init containers for Fluent Bit pods
256
# Ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
257
initContainers: []
258
# -- Node selector for Fluent Bit pods
259
# Ref: https://kubernetes.io/docs/user-guide/node-selection/
260
nodeSelector: {}
261
# -- Node tolerations for Fluent Bit pods
262
# Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
263
tolerations:
264
- operator: Exists
265
# -- Priority class for Fluent Bit pods
266
# Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/#priorityclass
267
priorityClassName: ""
268
# -- Custom command for Fluent Bit containers
269
command: []
270
# -- Custom command line arguments for Fluent Bit containers
271
args: []
272
# -- Environment variables that can be passed to Fluent Bit pods
273
envVars: []
274
# - name: FOO
275
# value: "bar"
276
# -- Scheduler name for Fluent Bit pods
277
schedulerName: ""
278
# Remove the above empty volumes and volumesMounts, and then set additionalVolumes and additionalVolumesMounts as below if you want to collect node exporter metrics
279
# additionalVolumes:
280
# - name: hostProc
281
# hostPath:
282
# path: /proc/
283
# - name: hostSys
284
# hostPath:
285
# path: /sys/
286
# Uncomment the code if you intend to create the volume for buffer storage in case the storage type "filesystem" is being used in the configuration of the fluentbit service.
287
# - name: hostBuffer
288
# hostPath:
289
# path: /tmp/fluent-bit-buffer
290
# additionalVolumesMounts:
291
# - mountPath: /host/sys
292
# mountPropagation: HostToContainer
293
# name: hostSys
294
# readOnly: true
295
# - mountPath: /host/proc
296
# mountPropagation: HostToContainer
297
# name: hostProc
298
# readOnly: true
299
# Uncomment the code if you intend to mount the volume for buffer storage in case the storage type "filesystem" is being used in the configuration of the fluentbit service.
300
# - mountPath: /host/fluent-bit-buffer
301
# mountPropagation: HostToContainer
302
# name: hostBuffer
303
304
# -- Namespace selector for Fluent Bit configuration
305
namespaceFluentBitCfgSelector: {}
306
# -- Configure the format of the config file to either classic or yaml. Default to classic when this value is not set
307
# configFileFormat: yaml
308
309
# Set a limit of memory that Tail plugin can use when appending data to the Engine.
310
# You can find more details here: https://docs.fluentbit.io/manual/pipeline/inputs/tail#config
311
# If the limit is reach, it will be paused; when the data is flushed it resumes.
312
# if the inbound traffic is less than 2.4Mbps, setting memBufLimit to 5MB is enough
313
# if the inbound traffic is less than 4.0Mbps, setting memBufLimit to 10MB is enough
314
# if the inbound traffic is less than 13.64Mbps, setting memBufLimit to 50MB is enough
315
input:
316
tail:
317
# -- Enable tail input
318
enable: true
319
# -- Refresh interval for tail input in seconds
320
refreshIntervalSeconds: 10
321
# -- Memory buffer limit for tail input
322
memBufLimit: 100MB
323
# -- Buffer max size for tail input
324
bufferMaxSize: ""
325
# -- Buffer chunk size for tail input
326
bufferChunkSize: ""
327
# -- Path to container logs
328
path: "/var/log/containers/*.log"
329
# -- Commas separated, paths to exclude,
330
# ie "/var/log/containers/fluent*,*.zip"
331
# excludePath: ""
332
# -- Skip long lines in logs
333
skipLongLines: true
334
# -- Skip empty lines in logs
335
skipEmptyLines: true
336
# -- Read from head of log file
337
readFromHead: false
338
# -- Storage type for tail input buffering. Use "filesystem" for persistent buffering.
339
storageType: memory
340
# -- Pause input when chunks overlimit
341
pauseOnChunksOverlimit: "off"
342
# -- Multiline parser for tail input
343
# multilineParser: "docker, cri"
344
systemd:
345
# -- Enable systemd input
346
enable: true
347
systemdFilter:
348
# -- Enable systemd filter
349
enable: true
350
# -- Systemd unit filters
351
filters: []
352
# -- Path to systemd journal
353
path: "/var/log/journal"
354
# -- Include kubelet logs from systemd
355
includeKubelet: true
356
# -- Strip underscores from systemd field names
357
stripUnderscores: "off"
358
# -- Storage type for systemd input buffering. Use "filesystem" for persistent buffering.
359
storageType: memory
360
# -- Pause input when chunks overlimit
361
pauseOnChunksOverlimit: "off"
362
# -- Node exporter metrics input configuration
363
nodeExporterMetrics: {}
364
# uncomment below nodeExporterMetrics section if you want to collect node exporter metrics
365
# nodeExporterMetrics:
366
# tag: node_metrics
367
# scrapeInterval: 15s
368
# path:
369
# procfs: /host/proc
370
# sysfs: /host/sys
371
# -- Fluent Bit metrics input configuration
372
fluentBitMetrics: {}
373
# uncomment below fluentBitMetrics section if you want to collect fluentBit metrics
374
# fluentBitMetrics:
375
# scrapeInterval: "2"
376
# scrapeOnStart: true
377
# tag: "fb.metrics"
378
379
# Configure the output plugin parameter in FluentBit.
380
# You can set enable to true to output logs to the specified location.
381
output:
382
# You can find more supported output plugins here: https://github.com/fluent/fluent-operator/tree/master/docs/plugins/fluentbit/output
383
es:
384
# -- Enable Elasticsearch output
385
enable: false
386
# -- Elasticsearch host
387
host: "<Elasticsearch url like elasticsearch-logging-data.kubesphere-logging-system.svc>"
388
# -- Elasticsearch port
389
port: 9200
390
# -- Logstash prefix for Elasticsearch indices
391
logstashPrefix: ks-logstash-log
392
# -- Buffer size for Elasticsearch output
393
bufferSize: 20MB
394
# -- Trace errors in Elasticsearch output
395
traceError: true
396
# logstashPrefixKey: ks-logstash-log
397
# suppressTypeName: "On"
398
# path: ""
399
# index: "fluent-bit"
400
# httpUser:
401
# valueFrom:
402
# secretKeyRef:
403
# key: value
404
# name: husersecret
405
# httpPassword:
406
# valueFrom:
407
# secretKeyRef:
408
# key: value
409
# name: hpasssecret
410
# logstashFormat: true
411
# replaceDots: false
412
# writeOperation: upsert
413
# tls:
414
# enable: false
415
# verify: On
416
# debug: 1
417
# caFile: "<Absolute path to CA certificate file>"
418
# caPath: "<Absolute path to scan for certificate files>"
419
# crtFile: "<Absolute path to private Key file>"
420
# keyFile: "<Absolute path to private Key file>"
421
# keyPassword:
422
# vhost: "<Hostname to be used for TLS SNI extension>"
423
kafka:
424
# -- Enable Kafka output
425
enable: false
426
# -- Log level for Kafka output
427
logLevel: info
428
# -- Kafka broker list
429
brokers: "<kafka broker list like xxx.xxx.xxx.xxx:9092,yyy.yyy.yyy.yyy:9092>"
430
# -- Kafka topics
431
topics: ks-log
432
# -- OpenTelemetry output configuration
433
opentelemetry: {}
434
# You can configure the opentelemetry-related configuration here
435
# -- OpenSearch output configuration
436
opensearch: {}
437
# You can configure the opensearch-related configuration here
438
stdout:
439
# -- Enable stdout output
440
enable: false
441
# -- Prometheus metrics exporter configuration
442
# Uncomment the following section to enable Prometheus metrics exporter.
443
prometheusMetricsExporter: {}
444
# prometheusMetricsExporter:
445
# match: "fb.metrics"
446
# metricsExporter:
447
# host: "0.0.0.0"
448
# port: 2020
449
# addLabels:
450
# app: "fluentbit"
451
452
# Loki fluentbit ClusterOutput, to be encapsulated in fluentbit config
453
# See https://github.com/fluent/fluent-operator/blob/master/docs/plugins/fluentbit/output/loki.md
454
# See https://docs.fluentbit.io/manual/pipeline/outputs/loki
455
loki:
456
# -- Enable Loki output
457
enable: false
458
# -- Retry limit for Loki output
459
retryLimit: "no_limits"
460
# -- Log level for Loki output
461
logLevel: "info"
462
# -- Loki host
463
host: 127.0.0.1
464
# -- Loki port
465
port: 3100
466
# Either, give http{User,Password},tenantID string values specifying them directly
467
# -- HTTP basic auth username for Loki
468
httpUser: myuser
469
# -- HTTP basic auth password for Loki
470
httpPassword: mypass
471
# -- Tenant ID for Loki
472
tenantID: ""
473
# Or give {http{User,Password},tenantID} as reference to secrets that you have manually installed into your kubernetes cluster
474
# httpUser:
475
# valueFrom:
476
# secretKeyRef:
477
# key: value
478
# name: husersecret
479
# optional: true
480
# httpPassword:
481
# valueFrom:
482
# secretKeyRef:
483
# key: value
484
# name: hpasssecret
485
# optional: true
486
# tenantID:
487
# valueFrom:
488
# secretKeyRef:
489
# key: value
490
# name: tenantsecret
491
# optional: true
492
#
493
# To use bearer token auth instead of http basic auth
494
# bearerToken: ey....
495
# or with existing secret
496
# bearerToken:
497
# valueFrom:
498
# secretKeyRef:
499
# key: value
500
# name: bearerTokenSecret
501
# optional: true
502
# labels: [] # String list of <name>=<value>
503
# labelKeys: [] # String list of <key>
504
# removeKeys: [] # String list of <key>
505
# labelMapPath: '' # String, path to file, ex /here/it/is
506
# dropSingleKey: off
507
# lineFormat: '' # String
508
# autoKubernetesLabels: on
509
# tenantIDKey: # String
510
# tls: {} # *plugins.TLS fluentbit docs
511
# -- Stackdriver output configuration
512
stackdriver: {}
513
# You can configure the stackdriver configuration here
514
service:
515
# -- Any valid Fluent Bit `[service]` field can be set here. Values are
516
# merged over the chart defaults (`parsersFile`, `httpServer`, and
517
# `logLevel` when `fluentbit.logLevel` is set), with the values below
518
# taking precedence on conflicts. The keys shown below are only common
519
# examples, not an exhaustive list. Note: overriding `parsersFile` or
520
# `httpServer` may break parser loading or the metrics/HTTP endpoint.
521
# Scheduler configuration for retry wait times (supported in Fluent Bit >= 1.8.7)
522
# -- Scheduler base for exponential backoff (seconds)
523
# schedulerBase: 5
524
# -- Scheduler cap for maximum retry time (seconds)
525
# schedulerCap: 2000
526
# -- Storage configuration for Fluent Bit buffering
527
# storage:
528
# path: "/host/fluent-bit-buffer/"
529
# backlogMemLimit: "50MB"
530
# checksum: "off"
531
# deleteIrrecoverableChunks: "on"
532
# maxChunksUp: 128
533
# metrics: "on"
534
# sync: normal
535
536
# Configure the default filters in FluentBit.
537
# The `filter` will filter and parse the collected log information and output the logs into a uniform format. You can choose whether to turn this on or not.
538
filter:
539
multiline:
540
# -- Enable multiline filter
541
enable: false
542
# -- Key content field for multiline filter
543
keyContent: log
544
# -- Buffer for multiline filter
545
buffer: false
546
# -- Emitter memory buffer limit in MB
547
emitterMemBufLimit: 120
548
# -- Emitter type for multiline filter
549
emitterType: memory
550
# -- Flush interval in milliseconds
551
flushMs: 2000
552
# -- Mode can be either "parser" or "partial_message"
553
# mode: parser
554
# -- Name for the emitter input instance which re-emits the completed records at the beginning of the pipeline
555
# emitterName: my-emitter
556
# -- Multiline parsers to use
557
parsers:
558
- go
559
- python
560
- java
561
# use custom multiline parser need set .Values.parsers.javaMultiline.enable = true
562
# - java-multiline
563
kubernetes:
564
# -- Enable Kubernetes metadata filter
565
enable: true
566
# -- Include Kubernetes labels in logs
567
labels: false
568
# -- Include Kubernetes annotations in logs
569
annotations: false
570
containerd:
571
# This is customized lua containerd log format converter, you can refer here:
572
# https://github.com/fluent/fluent-operator/blob/master/charts/fluent-operator/templates/fluentbit-clusterfilter-containerd.yaml
573
# https://github.com/fluent/fluent-operator/blob/master/charts/fluent-operator/templates/fluentbit-containerd-config.yaml
574
# -- Enable containerd log format converter filter
575
enable: true
576
systemd:
577
# -- Enable systemd filter
578
enable: true
579
kubeedge:
580
# -- Enable KubeEdge integration for Fluent Bit
581
enable: false
582
prometheusRemoteWrite:
583
# -- Host of a cloud-side Prometheus-compatible server that can receive Prometheus remote write data
584
host: "<cloud-prometheus-service-host>"
585
# -- Port of a cloud-side Prometheus-compatible server that can receive Prometheus remote write data
586
port: "<cloud-prometheus-service-port>"
587
# -- Removes the hostPath mounts for varlibcontainers, varlogs and systemd
588
disableLogVolumes: false
589
parsers:
590
javaMultiline:
591
# -- Enable Java multiline parser for generic springboot multiline log format
592
enable: false
593
# -- Using namespaceClusterFbCfg, deploy fluent-bit configmap and secret in this namespace.
594
# If it is not defined, it is in the namespace of the fluent-operator.
595
namespaceClusterFbCfg: ""
596
# -- Fluentd configuration
597
fluentd:
598
# -- Enable Fluentd deployment
599
enable: false
600
# -- Fluentd name
601
name: fluentd
602
# -- Fluentd deployment mode. Valid values: "collector" (StatefulSet) or "agent" (DaemonSet)
603
mode: "collector"
604
# -- Fluentd port
605
port: 24224
606
image:
607
# -- Fluentd image registry
608
registry: cgr.dev
609
# -- Fluentd image repository
610
repository: chainguard-private/fluent-operator-fluentd
611
# renovate: datasource=docker depName=ghcr.io/fluent/fluent-operator/fluentd
612
# -- Fluentd image tag
613
tag: 1.19.4-r0@sha256:7426763af0a1f4ad0b06c90441505573090efe3636f8b5b30f05851483e9d14f
614
# -- Number of Fluentd replicas
615
# Applicable when the mode is "collector", and will be ignored when the mode is "agent"
616
replicas: 1
617
forward:
618
# -- Forward input port
619
port: 24224
620
# -- Retain metadata when forwarding in forward mode.
621
# Set to false for Fluentd compatibility with Fluent Bit v5.0.5+.
622
retainMetadataInForwardMode: ~
623
# -- Namespaces to watch for Fluentd resources
624
watchedNamespaces:
625
- kube-system
626
- default
627
# -- Fluentd resource requests and limits
628
resources:
629
limits:
630
cpu: 500m
631
memory: 500Mi
632
requests:
633
cpu: 100m
634
memory: 128Mi
635
# -- Scheduler name for Fluentd pods
636
schedulerName: ""
637
# -- Environment variables that can be passed to Fluentd pods
638
envVars: []
639
# - name: FOO
640
# value: "bar"
641
# -- Image pull secrets for Fluentd
642
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
643
# -- Pod security context for Fluentd pod
644
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
645
podSecurityContext: {}
646
# -- Container security context for Fluentd container
647
# Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
648
securityContext: {}
649
# -- Image pull secrets for Fluentd
650
imagePullSecrets: []
651
# - name: "image-pull-secret"
652
# -- Log level for Fluentd
653
logLevel: ""
654
# -- Priority class name for Fluentd pods
655
priorityClassName: ""
656
# -- Extra configuration for Fluentd
657
extras: {}
658
# Configure the output plugin parameter in Fluentd.
659
# Fluentd is disabled by default, if you enable it make sure to also set up an output to use.
660
output:
661
es:
662
# -- Enable Elasticsearch output for Fluentd
663
enable: false
664
# -- Elasticsearch host
665
host: elasticsearch-logging-data.kubesphere-logging-system.svc
666
# -- Elasticsearch port
667
port: 9200
668
# -- Logstash prefix for Elasticsearch indices
669
logstashPrefix: ks-logstash-log
670
buffer:
671
# -- Enable buffer for Elasticsearch output
672
enable: false
673
# -- Buffer type
674
type: file
675
# -- Buffer path
676
path: /buffers/es
677
kafka:
678
# -- Enable Kafka output for Fluentd
679
enable: false
680
# -- Kafka broker list
681
brokers: "my-cluster-kafka-bootstrap.default.svc:9091,my-cluster-kafka-bootstrap.default.svc:9092,my-cluster-kafka-bootstrap.default.svc:9093"
682
# -- Kafka topic key
683
topicKey: kubernetes_ns
684
buffer:
685
# -- Enable buffer for Kafka output
686
enable: false
687
# -- Buffer type
688
type: file
689
# -- Buffer path
690
path: /buffers/kafka
691
# -- OpenSearch output configuration for Fluentd
692
opensearch: {}
693
# -- Override name of the chart
694
nameOverride: ""
695
# -- Override full name of the chart
696
fullnameOverride: ""
697
# -- Override namespace where resources are deployed
698
namespaceOverride: ""
699

The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.