12.3.

12.3.1.
링크 복사

중요

```
$ oc adm groups new cluster-admin
```

$ oc adm groups add-users cluster-admin <username>

$ oc adm policy add-cluster-role-to-group cluster-admin cluster-admin

12.3.2.
링크 복사

12.3.3.
링크 복사

apiVersion: loki.grafana.com/v1
kind: LokiStack
metadata:
  name: logging-loki
  namespace: openshift-logging
spec:
# ...
  template:
    ingester:
      podAntiAffinity:
      # ...
        requiredDuringSchedulingIgnoredDuringExecution:

1


        - labelSelector:
            matchLabels:

2


              app.kubernetes.io/component: ingester
          topologyKey: kubernetes.io/hostname
# ...

1
2

12.3.4.
링크 복사

apiVersion: loki.grafana.com/v1
kind: LokiStack
metadata:
 name: logging-loki
 namespace: openshift-logging
spec:
 replicationFactor: 2

1


 replication:
   factor: 2

2


   zones:
   -  maxSkew: 1

3


      topologyKey: topology.kubernetes.io/zone

4

1
2
3
4

12.3.4.1.
링크 복사

주의

oc get pods --field-selector status.phase==Pending -n openshift-logging

NAME                           READY   STATUS    RESTARTS   AGE

1


logging-loki-index-gateway-1   0/1     Pending   0          17m
logging-loki-ingester-1        0/1     Pending   0          16m
logging-loki-ruler-1           0/1     Pending   0          16m

1

oc get pvc -o=json -n openshift-logging | jq '.items[] | select(.status.phase == "Pending") | .metadata.name' -r

storage-logging-loki-index-gateway-1
storage-logging-loki-ingester-1
wal-logging-loki-ingester-1
storage-logging-loki-ruler-1
wal-logging-loki-ruler-1

oc delete pvc __<pvc_name>__  -n openshift-logging

oc delete pod __<pod_name>__  -n openshift-logging

12.3.4.1.1.
링크 복사

oc patch pvc __<pvc_name>__ -p '{"metadata":{"finalizers":null}}' -n openshift-logging

12.3.5.
링크 복사

참고

12.3.5.1.
링크 복사

kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: logging-all-application-logs-reader
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-logging-application-view

1


subjects:

2


- kind: Group
  name: system:authenticated
  apiGroup: rbac.authorization.k8s.io

1
2

12.3.5.2.
링크 복사

kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: allow-read-logs
  namespace: log-test-0

1


roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-logging-application-view
subjects:
- kind: User
  apiGroup: rbac.authorization.k8s.io
  name: testuser-0

1

12.3.5.3.
링크 복사

apiVersion: loki.grafana.com/v1
kind: LokiStack
metadata:
  name: logging-loki
  namespace: openshift-logging
spec:
  tenants:
    mode: openshift-logging

1


    openshift:
      adminGroups:

2


      - cluster-admin
      - custom-admin-group

3

1
2
3

12.3.6.
링크 복사

중요

참고

apiVersion: loki.grafana.com/v1
kind: LokiStack
metadata:
  name: logging-loki
  namespace: openshift-logging
spec:
  limits:
   global:

1


      retention:

2


        days: 20
        streams:
        - days: 4
          priority: 1
          selector: '{kubernetes_namespace_name=~"test.+"}'

3


        - days: 1
          priority: 1
          selector: '{log_type="infrastructure"}'
  managementState: Managed
  replicationFactor: 1
  size: 1x.small
  storage:
    schemas:
    - effectiveDate: "2020-10-11"
      version: v11
    secret:
      name: logging-loki-s3
      type: aws
  storageClassName: gp3-csi
  tenants:
    mode: openshift-logging

1
2
3

apiVersion: loki.grafana.com/v1
kind: LokiStack
metadata:
  name: logging-loki
  namespace: openshift-logging
spec:
  limits:
    global:
      retention:
        days: 20
    tenants:

1


      application:
        retention:
          days: 1
          streams:
            - days: 4
              selector: '{kubernetes_namespace_name=~"test.+"}'

2


      infrastructure:
        retention:
          days: 5
          streams:
            - days: 1
              selector: '{kubernetes_namespace_name=~"openshift-cluster.+"}'
  managementState: Managed
  replicationFactor: 1
  size: 1x.small
  storage:
    schemas:
    - effectiveDate: "2020-10-11"
      version: v11
    secret:
      name: logging-loki-s3
      type: aws
  storageClassName: gp3-csi
  tenants:
    mode: openshift-logging

1
2

$ oc apply -f <filename>.yaml

12.3.7.
링크 복사

중요

"values":[["1630410392689800468","{\"kind\":\"Event\",\"apiVersion\":\
.......
......
......
......
\"received_at\":\"2021-08-31T11:46:32.800278+00:00\",\"version\":\"1.7.4 1.6.0\"}},\"@timestamp\":\"2021-08-31T11:46:32.799692+00:00\",\"viaq_index_name\":\"audit-write\",\"viaq_msg_id\":\"MzFjYjJkZjItNjY0MC00YWU4LWIwMTEtNGNmM2E5ZmViMGU4\",\"log_type\":\"audit\"}"]]}]}

429 Too Many Requests Ingestion rate limit exceeded

2023-08-25T16:08:49.301780Z  WARN sink{component_kind="sink" component_id=default_loki_infra component_type=loki component_name=default_loki_infra}: vector::sinks::util::retries: Retrying after error. error=Server responded with an error: 429 Too Many Requests internal_log_rate_limit=true

2023-08-30 14:52:15 +0000 [warn]: [default_loki_infra] failed to flush the buffer. retry_times=2 next_retry_time=2023-08-30 14:52:19 +0000 chunk="604251225bf5378ed1567231a1c03b8b" error_class=Fluent::Plugin::LokiOutput::LogPostError error="429 Too Many Requests Ingestion rate limit exceeded for user infrastructure (limit: 4194304 bytes/sec) while attempting to ingest '4082' lines totaling '7820025' bytes, reduce log volume or contact your Loki administrator to see if the limit can be increased\n"

level=warn ts=2023-08-30T14:57:34.155592243Z caller=grpc_logging.go:43 duration=1.434942ms method=/logproto.Pusher/Push err="rpc error: code = Code(429) desc = entry with timestamp 2023-08-30 14:57:32.012778399 +0000 UTC ignored, reason: 'Per stream rate limit exceeded (limit: 3MB/sec) while attempting to ingest for stream

apiVersion: loki.grafana.com/v1
kind: LokiStack
metadata:
  name: logging-loki
  namespace: openshift-logging
spec:
  limits:
    global:
      ingestion:
        ingestionBurstSize: 16

1


        ingestionRate: 8

2


# ...

1
2

12.3.8.
링크 복사

$ oc patch LokiStack logging-loki -n openshift-logging  --type=merge -p '{"spec": {"hashRing":{"memberlist":{"instanceAddrType":"podIP","type": "memberlist"}}}}'

apiVersion: loki.grafana.com/v1
kind: LokiStack
metadata:
  name: logging-loki
  namespace: openshift-logging
spec:
# ...
  hashRing:
    type: memberlist
    memberlist:
      instanceAddrType: podIP
# ...

12.3.1.
링크 복사

12.3.2.
링크 복사

12.3.3.
링크 복사

12.3.4.
링크 복사

12.3.4.1.
링크 복사

12.3.4.1.1.
링크 복사

12.3.5.
링크 복사

12.3.5.1.
링크 복사

12.3.5.2.
링크 복사

12.3.5.3.
링크 복사

12.3.6.
링크 복사

12.3.7.
링크 복사

12.3.8.
링크 복사

자세한 정보

평가판, 구매 및 판매

커뮤니티

Red Hat 문서 정보

보다 포괄적 수용을 위한 오픈 소스 용어 교체

Red Hat 소개

Theme

Red Hat legal and privacy links

Red Hat legal and privacy links

12.3.

12.3.1. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.2. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.3. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.4. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.4.1. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.4.1.1. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.5. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.5.1. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.5.2. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.5.3. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.6. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.7. 링크 복사링크가 클립보드에 복사되었습니다!

12.3.8. 링크 복사링크가 클립보드에 복사되었습니다!

자세한 정보

평가판, 구매 및 판매

커뮤니티

Red Hat 문서 정보

보다 포괄적 수용을 위한 오픈 소스 용어 교체

Red Hat 소개

Theme

Red Hat legal and privacy links

Red Hat legal and privacy links

12.3.1.
링크 복사

12.3.2.
링크 복사

12.3.3.
링크 복사

12.3.4.
링크 복사

12.3.4.1.
링크 복사

12.3.4.1.1.
링크 복사

12.3.5.
링크 복사

12.3.5.1.
링크 복사

12.3.5.2.
링크 복사

12.3.5.3.
링크 복사

12.3.6.
링크 복사

12.3.7.
링크 복사

12.3.8.
링크 복사