Skip to content

Commit

Permalink
Cleanup
Browse files Browse the repository at this point in the history
  • Loading branch information
gsmith-sas committed Dec 18, 2024
1 parent 4f0e718 commit b4191ac
Show file tree
Hide file tree
Showing 3 changed files with 2 additions and 7 deletions.
4 changes: 2 additions & 2 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,12 +3,12 @@
## Unreleased
* **Logging**
* [SECURITY] Fluent Bit log collecting pods no longer run as `root` user. In addition, the database used to
maintain state information for the log collector has moved to a hostPath volume and renamed. A new initContainer
maintain state information for the log collector has moved to a hostPath volume and been renamed. A new initContainer
has been added to handle migrating any existing state information and make adjustments to file ownership/permissions.
NOTE: This initContainer runs under as `root` user but only runs briefly during the initial deployment process.
* [SECURITY] Runtime security controls for all Fluent Bit pods (inc. both log collecting and Kubernetes event
collecting) have been tightened. Changes include: adding seecompProfile; and disallowing privileged containers,
privilege escalation and write access to root filesystem.
privilege escalation and write access to the root filesystem.
* [SECURITY] On OpenShift, all Fluent Bit pods now use custom SCC objects to support changes described above.
* [CHANGE] Improved handling of long log messages and those from some Crunchy Data pods

Expand Down
1 change: 0 additions & 1 deletion logging/fb/fluent-bit_config.configmap_opensearch.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -1056,7 +1056,6 @@ data:
HTTP_Server On
HTTP_Listen 0.0.0.0
HTTP_Port 2020
###storage.path /tmp/fb_buffer/
storage.path /var/log/v4m-fb-storage
storage.checksum off
storage.sync normal
Expand Down
4 changes: 0 additions & 4 deletions logging/fb/fluent-bit_helm_values_opensearch.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -28,10 +28,6 @@ extraVolumeMounts:
name: v4m-fb-storage
readOnly: false
extraVolumes:
###- hostPath:
### path: /var/log
### #type: DirectoryOrCreate
### name: var-log
- hostPath:
path: /var/log/v4m-fb-storage
type: DirectoryOrCreate
Expand Down

0 comments on commit b4191ac

Please sign in to comment.