BuildAlertManagerCAConfigMap returns a k8s configmap for the LokiStack alertmanager serviceCA configmap.

BuildGatewayCAConfigMap returns a k8s configmap for the LokiStack serviceCA configmap.

BuildGatewayClusterRole returns a k8s ClusterRole object for the lokistack gateway serviceaccount to allow creating: - TokenReviews to authenticate the user by bearer token.

BuildGatewayClusterRoleBinding returns a k8s ClusterRoleBinding object for the lokistack gateway serviceaccount to grant access to: - rbac.authentication.k8s.io/TokenReviews - rbac.authorization.k8s.io/SubjectAccessReviews.

BuildGatewayObjects returns a list of auxiliary openshift/k8s objects for lokistack gateway deployments on OpenShift.

BuildGatewayTenantModeObjects returns a list of auxiliary openshift/k8s objects for lokistack gateway deployments on OpenShift for tenant modes: - openshift-logging - openshift-network.

BuildMonitoringRole returns a Role resource that defines list and watch access on pods, services and endpoints.

BuildMonitoringRoleBinding returns a RoleBinding resource that binds the OpenShift Cluster Monitoring Prometheus service account `prometheus-k8s` to the LokiStack namespace to allow discovering LokiStack owned pods, services and endpoints.

BuildRoute builds an OpenShift route object for the LokiStack Gateway.

BuildRulerClusterRole returns a k8s ClusterRole object for the lokistack ruler serviceaccount to allow patching sending alerts to alertmanagers.

BuildRulerClusterRoleBinding returns a k8s ClusterRoleBinding object for the lokistack ruler serviceaccount to grant access to alertmanagers.

BuildRulerObjects returns a list of auxiliary openshift/k8s objects for lokistack ruler deployments on OpenShift.

BuildRulerServiceAccount returns a k8s object for the LokiStack Ruler serviceaccount.

ConfigureGatewayDeployment merges an OpenPolicyAgent sidecar into the deployment spec.

ConfigureGatewayDeploymentRulesAPI merges CLI argument to the gateway container that allow only Rules API access with a valid namespace input for the tenant application.

ConfigureGatewayService merges the OpenPolicyAgent sidecar metrics port into the service spec.

ConfigureGatewayServiceMonitor merges the OpenPolicyAgent sidecar endpoint into the service monitor.

ConfigureOptions applies default configuration for the use of the cluster monitoring alertmanager.

ConfigureRulerStatefulSet configures the ruler to use the cluster monitoring alertmanager.

DefaultOTLPAttributes provides the required/recommended set of OTLP attributes for OpenShift Logging.

GetTenants return the slice of all supported tenants for a specified mode.

NewOptions returns an openshift options struct.

ServiceAccountAnnotations returns a map of OpenShift specific routes for ServiceAccounts.

GatewayOPAHTTPPort is the HTTP port of the OpenPolicyAgent sidecar.

GatewayOPAHTTPPortName is the HTTP container port name of the OpenPolicyAgent sidecar.

GatewayOPAInternalPort is the HTTP metrics port of the OpenPolicyAgent sidecar.

GatewayOPAInternalPortName is the HTTP container metrics port name of the OpenPolicyAgent sidecar.

InjectCABundleKey is the annotation key for configmaps used by the cert-signing service to inject the service CA into the annotated configmap.

MonitoringNS is the namespace containing cluster monitoring objects such as alertmanager.

MonitoringSVCMain is the name of the alertmanager main service used for alerts.

MonitoringSVCOperated is the name of the alertmanager operator service used for alerts.

ServingCertKey is the annotation key for services used the cert-signing service to create a new key/cert pair signed by the service CA stored in a secret with the same name as the annotated service.

AuthenticationSpec describes the authentication specification for a single tenant to authenticate it's subjects through OpenShift Auth.

AuthorizationSpec describes the authorization specification for all tenants to authorize access for it's subjects through the opa-openshift sidecar.

BuildOptions represents the set of options required to build extra lokistack gateway k8s objects (e.g.

Options is the set of internal template options for rendering the lokistack-gateway tenants configuration file when mode openshift-logging or openshift-network.

TenantData defines the existing cookieSecret for lokistack reconcile.