apiVersion: apps/v1
kind: DaemonSet
metadata:
  annotations:
    deprecated.daemonset.template.generation: "1"
  creationTimestamp: "2022-11-04T13:53:33Z"
  generation: 1
  labels:
    component: collector
    logging-infra: collector
    provider: openshift
  name: collector
  namespace: openshift-logging
  ownerReferences:
  - apiVersion: logging.openshift.io/v1
    controller: true
    kind: ClusterLogging
    name: instance
    uid: 1b2ff535-706a-4eea-807b-6b9de75d02d8
  resourceVersion: "226799102"
  uid: 57f5f8d0-9fac-4bf8-926e-56a886cfd743
spec:
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      component: collector
      logging-infra: collector
      provider: openshift
  template:
    metadata:
      annotations:
        scheduler.alpha.kubernetes.io/critical-pod: ""
        target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
      creationTimestamp: null
      labels:
        component: collector
        logging-infra: collector
        provider: openshift
      name: collector
    spec:
      containers:
      - env:
        - name: COLLECTOR_CONF_HASH
          value: 35f059dbce65323a6a416c18a0678a31
        - name: TRUSTED_CA_HASH
          value: 68a93442499b614f7648c13fb14f0e32
        - name: K8S_NODE_NAME
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: spec.nodeName
        - name: NODE_IPV4
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: status.hostIP
        - name: POD_IP
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: status.podIP
        - name: NODE_NAME
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: spec.nodeName
        - name: RUBY_GC_HEAP_OLDOBJECT_LIMIT_FACTOR
          value: "0.9"
        image: registry.redhat.io/openshift-logging/fluentd-rhel8@sha256:1a23efeefb92bd089c13a24fb8d91e60d4ee4426c2d894de9dd8f34e6cbffbbd
        imagePullPolicy: IfNotPresent
        name: collector
        ports:
        - containerPort: 24231
          name: metrics
          protocol: TCP
        resources:
          limits:
            memory: 736Mi
          requests:
            cpu: 100m
            memory: 736Mi
        securityContext:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
          seLinuxOptions:
            type: spc_t
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /var/log/containers
          name: varlogcontainers
          readOnly: true
        - mountPath: /var/log/pods
          name: varlogpods
          readOnly: true
        - mountPath: /var/log/journal
          name: varlogjournal
          readOnly: true
        - mountPath: /var/log/audit
          name: varlogaudit
          readOnly: true
        - mountPath: /var/log/ovn
          name: varlogovn
          readOnly: true
        - mountPath: /var/log/oauth-apiserver
          name: varlogoauthapiserver
          readOnly: true
        - mountPath: /var/log/openshift-apiserver
          name: varlogopenshiftapiserver
          readOnly: true
        - mountPath: /var/log/kube-apiserver
          name: varlogkubeapiserver
          readOnly: true
        - mountPath: /etc/localtime
          name: localtime
          readOnly: true
        - mountPath: /etc/collector/metrics
          name: collector-metrics
          readOnly: true
        - mountPath: /tmp
          name: tmp
        - mountPath: /var/run/ocp-collector/secrets/cloudwatch-credentials
          name: cloudwatch-credentials
          readOnly: true
        - mountPath: /etc/pki/ca-trust/extracted/pem/
          name: collector-trusted-ca-bundle
          readOnly: true
        - mountPath: /etc/fluent/keys
          name: certs
          readOnly: true
        - mountPath: /etc/fluent/configs.d/user
          name: config
          readOnly: true
        - mountPath: /var/lib/fluentd
          name: datadir
        - mountPath: /opt/app-root/src/run.sh
          name: entrypoint
          readOnly: true
          subPath: run.sh
        - mountPath: /var/run/secrets/openshift/serviceaccount
          name: collector-sts-token
          readOnly: true
      - args:
        - -c
        - /usr/local/bin/log-file-metric-exporter -verbosity=2 -dir=/var/log/pods
          -http=:2112 -keyFile=/etc/collector/metrics/tls.key -crtFile=/etc/collector/metrics/tls.crt
        command:
        - /bin/bash
        image: registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8@sha256:dda796dc8209bf5028412d40f34d3c3da39ec77c6a5749c7aaeb0473bb42b7b2
        imagePullPolicy: IfNotPresent
        name: logfilesmetricexporter
        ports:
        - containerPort: 2112
          name: logfile-metrics
          protocol: TCP
        resources: {}
        securityContext:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
          seLinuxOptions:
            type: spc_t
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /var/log/containers
          name: varlogcontainers
          readOnly: true
        - mountPath: /var/log/pods
          name: varlogpods
          readOnly: true
        - mountPath: /etc/collector/metrics
          name: collector-metrics
          readOnly: true
      dnsPolicy: ClusterFirst
      nodeSelector:
        kubernetes.io/os: linux
      priorityClassName: cluster-logging
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: logcollector
      serviceAccountName: logcollector
      terminationGracePeriodSeconds: 10
      tolerations:
      - effect: NoSchedule
        key: node-role.kubernetes.io/master
        operator: Exists
      - effect: NoSchedule
        key: node.kubernetes.io/disk-pressure
        operator: Exists
      volumes:
      - hostPath:
          path: /var/log/containers
          type: ""
        name: varlogcontainers
      - hostPath:
          path: /var/log/pods
          type: ""
        name: varlogpods
      - hostPath:
          path: /var/log/journal
          type: ""
        name: varlogjournal
      - hostPath:
          path: /var/log/audit
          type: ""
        name: varlogaudit
      - hostPath:
          path: /var/log/ovn
          type: ""
        name: varlogovn
      - hostPath:
          path: /var/log/oauth-apiserver
          type: ""
        name: varlogoauthapiserver
      - hostPath:
          path: /var/log/openshift-apiserver
          type: ""
        name: varlogopenshiftapiserver
      - hostPath:
          path: /var/log/kube-apiserver
          type: ""
        name: varlogkubeapiserver
      - hostPath:
          path: /etc/localtime
          type: ""
        name: localtime
      - name: collector-metrics
        secret:
          defaultMode: 420
          secretName: collector-metrics
      - emptyDir:
          medium: Memory
        name: tmp
      - name: cloudwatch-credentials
        secret:
          defaultMode: 420
          secretName: cloudwatch-credentials
      - configMap:
          defaultMode: 420
          items:
          - key: ca-bundle.crt
            path: tls-ca-bundle.pem
          name: collector-trusted-ca-bundle
        name: collector-trusted-ca-bundle
      - name: certs
        secret:
          defaultMode: 420
          optional: true
          secretName: collector
      - configMap:
          defaultMode: 420
          name: collector
        name: config
      - hostPath:
          path: /var/lib/fluentd
          type: ""
        name: datadir
      - configMap:
          defaultMode: 420
          name: collector
        name: entrypoint
      - name: collector-sts-token
        projected:
          defaultMode: 420
          sources:
          - serviceAccountToken:
              audience: openshift
              expirationSeconds: 3600
              path: token
  updateStrategy:
    rollingUpdate:
      maxSurge: 0
      maxUnavailable: 100%
    type: RollingUpdate
status:
  currentNumberScheduled: 6
  desiredNumberScheduled: 6
  numberAvailable: 6
  numberMisscheduled: 0
  numberReady: 6
  observedGeneration: 1
  updatedNumberScheduled: 6
