From c2f7189c28eb29e84f99d62269f50329238eb5db Mon Sep 17 00:00:00 2001 From: Chris Blumentritt Date: Thu, 7 Mar 2024 16:51:39 -0600 Subject: [PATCH] Using Secret instead of ConfigMap to store loki config By default loki helm chart stores the config in a ConfigMap. For backends that require credentials this is unsafe. Setting the `configStorageType` to secret will store the entire loki config in a Secret. Signed-off-by: Chris Blumentritt --- helm-configs/loki/loki-helm-minio-overrides-example.yaml | 1 + helm-configs/loki/loki-helm-s3-overrides-example.yaml | 1 + helm-configs/loki/loki-helm-swift-overrides-example.yaml | 1 + 3 files changed, 3 insertions(+) diff --git a/helm-configs/loki/loki-helm-minio-overrides-example.yaml b/helm-configs/loki/loki-helm-minio-overrides-example.yaml index 2a77a6ab..c77ada3a 100644 --- a/helm-configs/loki/loki-helm-minio-overrides-example.yaml +++ b/helm-configs/loki/loki-helm-minio-overrides-example.yaml @@ -4,3 +4,4 @@ minio: enabled: true loki: auth_enabled: false + configStorageType: Secret diff --git a/helm-configs/loki/loki-helm-s3-overrides-example.yaml b/helm-configs/loki/loki-helm-s3-overrides-example.yaml index 0595acc3..09730acf 100644 --- a/helm-configs/loki/loki-helm-s3-overrides-example.yaml +++ b/helm-configs/loki/loki-helm-s3-overrides-example.yaml @@ -4,6 +4,7 @@ minio: enabled: false loki: auth_enabled: false + configStorageType: Secret storage: bucketNames: chunks: < CHUNKS BUCKET NAME > # TODO: Update with relevant bucket name for chunks diff --git a/helm-configs/loki/loki-helm-swift-overrides-example.yaml b/helm-configs/loki/loki-helm-swift-overrides-example.yaml index 7f5f060b..5e4155be 100644 --- a/helm-configs/loki/loki-helm-swift-overrides-example.yaml +++ b/helm-configs/loki/loki-helm-swift-overrides-example.yaml @@ -4,6 +4,7 @@ minio: enabled: false loki: auth_enabled: false + configStorageType: Secret storage: bucketNames: chunks: chunks