dnf_automatic_reboot_command: touch /run/reboot-needed

samba_interfaces:
- '{{ ansible_default_ipv4.interface }}'
host_uses_firewalld: false
collectd_processes_kubelet:
- name: crio
- name: kubelet
collectd_processes_controller:
- name: etcd
- name: kube-apiserver
- name: kube-controller
collectd_df_ignore_mountpoint:
- /etc/cni/net.d
- /opt/cni
- /usr/libexec/kubernetes/kubelet-plugins

container_registries:
- location: docker-hub.proxy.pyrocufflink.blue
  prefix: docker.io

container_registry_certs:
  docker-hub.proxy.pyrocufflink.blue:
    ca: >-
      {{ lookup('file', 'dch-root-ca-r2.crt') }}

fluent_bit_parsers:
- name: kube-tag
  format: regex
  regex: >-
    (?<namespace_name>[^_]+)\.(?<pod_name>[^_]+)\.(?<pod_id>[^_]+)\.(?<container_name>[^_]+)$

fluent_bit_input_kube:
  name: tail
  tag: kube.<namespace>.<pod>.<pod_id>.<container>
  tag_regex: >-
    ^/var/log/pods/(?<namespace>[^_]+)_(?<pod>[^_]+)_(?<pod_id>[^_]+)/(?<container>[^/]+)/[0-9]+\.log$
  path: /var/log/pods/*/*/*.log
  path_key: filename
  multiline.parser: docker, cri
  db: /var/lib/fluent-bit/kube.db
  read_from_head: true

fluent_bit_inputs: '{{ fluent_bit_default_inputs + [fluent_bit_input_kube] }}'

fluent_bit_kube_filters:
- name: kubernetes
  match: kube.*
  merge_log: true
  kube_tag_prefix: kube.
  regex_parser: kube-tag
# Avoid log amplification from logging the result of sending logs!
- name: grep
  match: kube.*
  exclude: log \[output:http:.+\] .+, HTTP status=200$

fluent_bit_filters: '{{ fluent_bit_default_filters + fluent_bit_kube_filters }}'

_fluent_bit_output_kube:
  name: http
  alias: kube
  match: kube.*
  uri: /insert/jsonline?_stream_fields=kubernetes.namespace_name,kubernetes.pod_name,kubernetes.container_name&_msg_field=log&_time_field=time

fluent_bit_output_kube: >-
  {{ _fluent_bit_output_kube | combine(fluent_bit_output_template_victorialogs) }}

fluent_bit_outputs:
- '{{ fluent_bit_output_systemd }}'
- '{{ fluent_bit_output_kube }}'