debian-mirror-gitlab/app/models/clusters/applications/fluentd.rb

# frozen_string_literal: true

module Clusters
  module Applications
    class Fluentd < ApplicationRecord
      VERSION = '2.4.0'
      CILIUM_CONTAINER_NAME = 'cilium-monitor'

      self.table_name = 'clusters_applications_fluentd'

      include ::Clusters::Concerns::ApplicationCore
      include ::Clusters::Concerns::ApplicationStatus
      include ::Clusters::Concerns::ApplicationVersion
      include ::Clusters::Concerns::ApplicationData

      default_value_for :version, VERSION
      default_value_for :port, 514
      default_value_for :protocol, :tcp

      enum protocol: { tcp: 0, udp: 1 }

      validate :has_at_least_one_log_enabled?

      def chart
        'stable/fluentd'
      end

      def install_command
        Gitlab::Kubernetes::Helm::InstallCommand.new(
          name: 'fluentd',
          repository: repository,
          version: VERSION,
          rbac: cluster.platform_kubernetes_rbac?,
          chart: chart,
          files: files,
          local_tiller_enabled: cluster.local_tiller_enabled?
        )
      end

      def values
        content_values.to_yaml
      end

      private

      def has_at_least_one_log_enabled?
        if !waf_log_enabled && !cilium_log_enabled
          errors.add(:base, _("At least one logging option is required to be enabled"))
        end
      end

      def content_values
        YAML.load_file(chart_values_file).deep_merge!(specification)
      end

      def specification
        {
          "configMaps" => {
            "output.conf" => output_configuration_content,
            "general.conf" => general_configuration_content
          }
        }
      end

      def output_configuration_content
        <<~EOF
        <match kubernetes.**>
          @type remote_syslog
          @id out_kube_remote_syslog
          host #{host}
          port #{port}
          program fluentd
          hostname ${kubernetes_host}
          protocol #{protocol}
          packet_size 131072
          <buffer kubernetes_host>
          </buffer>
          <format>
            @type ltsv
          </format>
        </match>
        EOF
      end

      def general_configuration_content
        <<~EOF
        <match fluent.**>
          @type null
        </match>
        <source>
          @type http
          port 9880
          bind 0.0.0.0
        </source>
        <source>
          @type tail
          @id in_tail_container_logs
          path #{path_to_logs}
          pos_file /var/log/fluentd-containers.log.pos
          tag kubernetes.*
          read_from_head true
          <parse>
            @type json
            time_format %Y-%m-%dT%H:%M:%S.%NZ
          </parse>
        </source>
        EOF
      end

      def path_to_logs
        path = []
        path << "/var/log/containers/*#{Ingress::MODSECURITY_LOG_CONTAINER_NAME}*.log" if waf_log_enabled
        path << "/var/log/containers/*#{CILIUM_CONTAINER_NAME}*.log" if cilium_log_enabled
        path.join(',')
      end
    end
  end
end