[bitnami/logstash] Adding service account config for workload identity integration (#9317)

* [bitnami/logstash] Adding service account config for workload identity integration

Signed-off-by: Luiz Ferreira <luiz.ferreira@idwall.co>

* [bitnami/logstash] fixing README metadata

Signed-off-by: Luiz Ferreira <luiz.ferreira@idwall.co>

* [bitnami/logstash] fix readme-generator-for-helm error

Signed-off-by: Luiz Ferreira <luiz.ferreira@idwall.co>

* [bitnami/logstash] Update bitnami/logstash/templates/serviceaccount.yaml

Co-authored-by: Carlos Rodríguez Hernández <carrodher1179@gmail.com>
Signed-off-by: Luiz Ferreira <luiz.ferreira@idwall.co>

* [bitnami/logstash] Update bitnami/logstash/values.yaml

Co-authored-by: Carlos Rodríguez Hernández <carrodher1179@gmail.com>
Signed-off-by: Luiz Ferreira <luiz.ferreira@idwall.co>

* [bitnami/logstash] solving indentation problem

Signed-off-by: Luiz Ferreira <luiz.ferreira@idwall.co>

* [bitnami/logstash] Update components versions

Signed-off-by: Bitnami Containers <containers@bitnami.com>

Co-authored-by: Luiz Ferreira <luiz.ferreira@idwall.co>
Co-authored-by: Carlos Rodríguez Hernández <carrodher1179@gmail.com>
Co-authored-by: Bitnami Containers <containers@bitnami.com>
This commit is contained in:
Luiz Ferreira
2022-03-08 19:33:22 -03:00
committed by GitHub
parent 8fb4fcd7f8
commit 4b1240eed3
5 changed files with 60 additions and 8 deletions

View File

@@ -1,6 +1,6 @@
dependencies:
- name: common
repository: https://charts.bitnami.com/bitnami
version: 1.11.2
digest: sha256:eda6c82c39104cba0d9522be8ed6316d0bedae75d36deb778ed7f97ff2217aca
generated: "2022-02-28T18:53:45.037144588Z"
version: 1.11.3
digest: sha256:d5f850d857edd58b32c0e10652f6ec3ce5018def5542f2bcef38fd7fa0079d6b
generated: "2022-03-08T21:27:00.950997969Z"

View File

@@ -23,4 +23,4 @@ name: logstash
sources:
- https://github.com/bitnami/bitnami-docker-logstash
- https://www.elastic.co/products/logstash
version: 3.7.8
version: 3.8.0

View File

@@ -32,6 +32,17 @@ Return the Logstash configuration configmap.
{{- end -}}
{{- end -}}
{{/*
Create the name of the service account to use
*/}}
{{- define "logstash.serviceAccountName" -}}
{{- if .Values.serviceAccount.create -}}
{{ default (include "common.names.fullname" .) .Values.serviceAccount.name }}
{{- else -}}
{{ default "default" .Values.serviceAccount.name }}
{{- end -}}
{{- end -}}
{{/*
Check if there are rolling tags in the images
*/}}

View File

@@ -0,0 +1,21 @@
{{- if .Values.serviceAccount.create -}}
apiVersion: v1
kind: ServiceAccount
metadata:
name: {{ template "logstash.serviceAccountName" . }}
namespace: {{ .Release.Namespace | quote }}
labels: {{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.commonLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }}
{{- end }}
{{- if or .Values.commonAnnotations .Values.serviceAccount.annotations }}
annotations:
{{- if .Values.serviceAccount.annotations }}
{{- include "common.tplvalues.render" ( dict "value" .Values.serviceAccount.annotations "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.commonAnnotations }}
{{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
{{- end }}
{{- end }}
automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
{{- end -}}

View File

@@ -61,7 +61,7 @@ diagnosticMode:
image:
registry: docker.io
repository: bitnami/logstash
tag: 7.17.1-debian-10-r0
tag: 7.17.1-debian-10-r9
## Specify a imagePullPolicy. Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
##
@@ -162,6 +162,26 @@ extraVolumes: []
## readOnly: true
##
extraVolumeMounts: []
## ServiceAccount for Logstash
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
##
serviceAccount:
## @param serviceAccount.create Enable creation of ServiceAccount for Logstash pods
##
create: true
## @param serviceAccount.name The name of the service account to use. If not set and `create` is `true`, a name is generated
## If not set and create is true, a name is generated using the logstash.serviceAccountName template
##
name: ""
## @param serviceAccount.automountServiceAccountToken Allows automount of ServiceAccountToken on the serviceAccount created
## Can be set to false if pods using this serviceAccount do not need to use K8s API
##
automountServiceAccountToken: true
## @param serviceAccount.annotations Additional custom annotations for the ServiceAccount
##
annotations: {}
## @param containerPorts [array] Array containing the ports to open in the Logstash container
##
containerPorts:
@@ -414,7 +434,7 @@ volumePermissions:
image:
registry: docker.io
repository: bitnami/bitnami-shell
tag: 10-debian-10-r351
tag: 10-debian-10-r359
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -544,7 +564,7 @@ metrics:
image:
registry: docker.io
repository: bitnami/logstash-exporter
tag: 7.3.0-debian-10-r454
tag: 7.3.0-debian-10-r461
## Specify a imagePullPolicy. Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
##
@@ -690,4 +710,4 @@ podDisruptionBudget:
## @param initContainers Extra containers to run before logstash for initialization purposes like custom plugin install.
## ref: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
##
initContainers: []
initContainers: []