feat(loki): 新增loki日志搜集

apps/monitor/crowdsec/helmchart.yaml

@@ -23,15 +23,8 @@ spec:
           password: nyrHzh9WWlDZzvVw7bDFo74gKb9zsls0Sy7OwRTDWiRTNPQQQkW85taUFAoX2AIC
           sslmode: require
     agent:
-      affinity:
+      nodeSelector:
-        nodeAffinity:
+        svccontroller.k3s.cattle.io/enablelb: "true"
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: svccontroller.k3s.cattle.io/enablelb
-                    operator: In
-                    values:
-                      - "true"
       acquisition:
         - namespace: infra-net
           podName: ingress-nginx-controller-*
@@ -46,10 +39,10 @@ spec:
           preferredDuringSchedulingIgnoredDuringExecution:
             - preference:
                 matchExpressions:
-                  - key: kubernetes.io/hostname
+                  - key: topology.kubernetes.io/region
                     operator: In
                     values:
-                      - alihka
+                      - cn-hk
               weight: 1
       resources:
         limits:

apps/monitor/loki/helmchart.yaml

@@ -0,0 +1,58 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChart
+metadata:
+  name: loki
+  namespace: infra-monitor
+spec:
+  repo: https://grafana.github.io/helm-charts
+  chart: loki
+  targetNamespace: infra-monitor
+  version: 6.7.1
+  valuesContent: |-
+    deploymentMode: SingleBinary
+    gateway:
+      enabled: false
+    lokiCanary:
+      nodeSelector:
+        svccontroller.k3s.cattle.io/enablelb: "true"
+      labelname: name
+      extraArgs:
+        # 降低测试日志生成条数
+        - -interval=30s
+    adminApi:
+      nodeSelector:
+        kubernetes.io/hostname: alihka
+    resultsCache:
+      nodeSelector:
+        kubernetes.io/hostname: alihka
+      allocatedMemory: 1024
+    chunksCache:
+      nodeSelector:
+        kubernetes.io/hostname: alihka
+      allocatedMemory: 1024
+    loki:
+      auth_enabled: false
+      commonConfig:
+        replication_factor: 1
+      limits_config:
+        
+      storage:
+        type: 'filesystem'
+      schemaConfig:
+        configs:
+        - from: "2024-01-01"
+          store: tsdb
+          index:
+            prefix: loki_index_
+            period: 24h
+          object_store: filesystem
+          schema: v13
+    singleBinary:
+      replicas: 1
+    read:
+      replicas: 0
+    backend:
+      replicas: 0
+    write:
+      replicas: 0
+

apps/net/nginx/helmchart.yaml

@@ -11,15 +11,8 @@ spec:
   valuesContent: |-
     fullnameOverride: ingress-nginx
     controller:
-      affinity:
+      nodeSelector:
-        nodeAffinity:
+        svccontroller.k3s.cattle.io/enablelb: "true"
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: svccontroller.k3s.cattle.io/enablelb
-                    operator: In
-                    values:
-                      - "true"
       tolerations:
         - key: "node-role.kubernetes.io/master"
           operator: "Exists"

apps/net/xray/xray.yaml

@@ -0,0 +1,69 @@
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: xray
+  namespace: infra-net
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: xray
+  template:
+    metadata:
+      labels:
+        app: xray
+    spec:
+      volumes:
+        - name: config
+          secret:
+            secretName: config-secret
+      containers:
+        - name: xray
+          image: ghcr.io/xtls/xray-core:latest
+          ports:
+            - name: port
+              containerPort: 443
+              protocol: TCP
+          resources: {}
+          volumeMounts:
+            - name: config
+              readOnly: true
+              mountPath: /etc/xray/config.json
+              subPath: config.json
+
+----------------------------
+kind: Service
+apiVersion: v1
+metadata:
+  name: xray
+  namespace: vpn
+spec:
+  ports:
+    - protocol: TCP
+      port: 443
+      targetPort: 443
+  selector:
+    app: xray
+
+----------------------------
+kind: Ingress
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: xray
+  namespace: infra-net
+  annotations:
+    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
+    nginx.ingress.kubernetes.io/ssl-passthrough: 'true'
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: *.node.dev.cm
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: xray
+                port:
+                  number: 443