Like Prometheus, but for logs.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
loki/operator/hack/addons_kind_certs.yaml

379 lines
8.6 KiB

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: kind-cluster-issuer
spec:
selfSigned: {}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-signing-ca
spec:
isCA: true
commonName: lokistack-dev-gateway-http.default.svc
dnsNames:
- "*.default.svc"
- "*.default.svc.cluster.local"
secretName: lokistack-dev-signing-ca
privateKey:
algorithm: ECDSA
size: 256
issuerRef:
name: kind-cluster-issuer
kind: ClusterIssuer
group: cert-manager.io
---
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
name: kind-issuer
spec:
ca:
secretName: lokistack-dev-signing-ca
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-gateway-http
namespace: default
spec:
secretName: lokistack-dev-gateway-http
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-gateway-http.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-gateway-http.default.svc"
- "lokistack-dev-gateway-http.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-gateway-client-http
namespace: default
spec:
secretName: lokistack-dev-gateway-client-http
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-gateway-http.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-distributor-grpc
namespace: default
spec:
secretName: lokistack-dev-distributor-grpc
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-distributor-grpc.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-distributor-grpc.default.svc"
- "lokistack-dev-distributor-grpc.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-distributor-http
namespace: default
spec:
secretName: lokistack-dev-distributor-http
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-distributor-http.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-distributor-http.default.svc"
- "lokistack-dev-distributor-http.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-ingester-grpc
namespace: default
spec:
secretName: lokistack-dev-ingester-grpc
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-ingester-grpc.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-ingester-grpc.default.svc"
- "lokistack-dev-ingester-grpc.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-ingester-http
namespace: default
spec:
secretName: lokistack-dev-ingester-http
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-ingester-http.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-ingester-http.default.svc"
- "lokistack-dev-ingester-http.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-query-frontend-grpc
namespace: default
spec:
secretName: lokistack-dev-query-frontend-grpc
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-query-frontend-grpc.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-query-frontend-grpc.default.svc"
- "lokistack-dev-query-frontend-grpc.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-query-frontend-http
namespace: default
spec:
secretName: lokistack-dev-query-frontend-http
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-query-frontend-http.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-query-frontend-http.default.svc"
- "lokistack-dev-query-frontend-http.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-querier-grpc
namespace: default
spec:
secretName: lokistack-dev-querier-grpc
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-querier-grpc.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-querier-grpc.default.svc"
- "lokistack-dev-querier-grpc.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-querier-http
namespace: default
spec:
secretName: lokistack-dev-querier-http
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-querier-http.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-querier-http.default.svc"
- "lokistack-dev-querier-http.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-index-gateway-grpc
namespace: default
spec:
secretName: lokistack-dev-index-gateway-grpc
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-index-gateway-grpc.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-index-gateway-grpc.default.svc"
- "lokistack-dev-index-gateway-grpc.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-index-gateway-http
namespace: default
spec:
secretName: lokistack-dev-index-gateway-http
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-index-gateway-http.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-index-gateway-http.default.svc"
- "lokistack-dev-index-gateway-http.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-compactor-grpc
namespace: default
spec:
secretName: lokistack-dev-compactor-grpc
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-compactor-grpc.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-compactor-grpc.default.svc"
- "lokistack-dev-compactor-grpc.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: lokistack-dev-compactor-http
namespace: default
spec:
secretName: lokistack-dev-compactor-http
duration: 2160h # 90d
renewBefore: 360h # 15d
commonName: lokistack-dev-compactor-http.default.svc
privateKey:
rotationPolicy: Never
algorithm: ECDSA
encoding: PKCS8
size: 256
usages:
- client auth
- server auth
dnsNames:
- "lokistack-dev-compactor-http.default.svc"
- "lokistack-dev-compactor-http.default.svc.cluster.local"
issuerRef:
name: kind-issuer
kind: Issuer