mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-01 05:27:24 +08:00
Cam HutchisonandTim Ross
57cc95f230
* build: Update master for v19 Update the version in `master` to v19 now that the v18 branch has been cut. This will cause all dev builds to be built with v19.0.0-dev version prefix and use a teleport19 buildbox. The buildbox has been manually built prior to this commit being merged to master. Run `make update-version` to propagate the new version to required files. Remove no-longer-necessary steps in the preflight.md docs. * fix: allow tests to use old client versions --------- Co-authored-by: Tim Ross <tim.ross@goteleport.com>
Teleport Event Handler Plugin
This chart sets up and configures a Deployment for the Event Handler plugin.
Installation
See the Export Events with FluentD Guide.
Settings
The following values can be set for the Helm chart:
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
teleport.address |
hostname and HTTPS port of your Teleport Proxy Service or Teleport Enterprise Cloud account (e.g., `teleport.example.com:443` or `mytenant.teleport.sh:443`) | string | "" |
yes |
teleport.identitySecretName |
Name of the Kubernetes secret that contains the credentials for the connection | string | "" |
yes |
teleport.identitySecretPath |
Key of the field in the secret specified by teleport.identitySecretName |
string | "auth_id" |
no |
eventHandler.storagePath |
Path to the directory where event-handler's state is stored |
string | "/var/lib/teleport/plugins/event-handler/storage" |
no |
eventHandler.timeout |
Maximum time to wait for incoming events before sending them to fluentd. | string | "10s" |
no |
eventHandler.batch |
Maximum number of events fetched from Teleport in one request | string | 20 |
no |
fluentd.url |
URL of fluentd where the event logs will be sent to. | string | "" |
yes |
fluentd.sessionUrl |
URL of fluentd where the session logs will be sent to. | string | "" |
yes |
fluentd.secretName |
Name of the secret where credentials for the connection is stored. It must contain the client's private key, certificate and fluentd's CA certificate. See the default paths below. | string | "" |
yes |
fluentd.caPath |
Path of the CA certificate in the secret described by fluentd.secretName. |
string | "ca.crt" |
|
fluentd.certPath |
Path of the client's certificate in the secret described by fluentd.secretName. |
string | "client.crt" |
no |
fluentd.keyPath |
Path of the client private key in the secret described by fluentd.secretName. |
string | "client.key" |
no |
persistentVolumeClaim.enabled |
Instructs the Helm chart to include a PersistentVolumeClaim for the storage. This storage
will be mounted to the path specified by eventHandler.storagePath.
|
boolean | false |
no |
persistentVolumeClaim.size |
Sets the size of the created PersistentVolumeClaim. Don't forget to append the proper suffix! | string | "1Gi" |
no |
persistentVolumeClaim.storageClassName |
Sets the storage class name of the created PersistentVolumeClaim. Kubernetes will use the default one when omitted. | string | "" |
no |
persistentVolumeClaim.existingClaim |
Specifies an already existing PersistentVolumeClaim which should be mounted to the path specified
by eventHandler.storagePath. persistentVolumeClaim.enabled must be set to false for this
option to take precedence. Ignored when persistentVolumeClaim.enabled is true.
|
string | "" |
no |