loggr-forwarder-agent job from loggregator-agent/3.1
Github source:
7899611
or
master branch
Properties¶
api
¶
batch_size
¶The batch size the forwarder will request the Cloud Controller for bindings.
- Default
1000
polling_interval
¶The interval at which the forwarder will poll the Cloud Controller for bindings.
- Default
15s
tls
¶
ca_cert
¶When the forwarder communicates with the Cloud Controller it must validate the Cloud Controller’s certificate was signed by a trusted CA. This is the CA trusted by the forwarder for that communication.
cert
¶This certificate is sent to the Cloud Controller when initiating a connection. It must be signed by a CA that is trusted by the Cloud Controller.
cn
¶When the forwarder communicates with the Cloud Controller it must validate the Cloud Controller’s common name (CN) or subject alternative names (SANs) against the hostname or IP address used to initiate the connection. Most of the time this should be the hostname defined in api.url.
key
¶This is the private key for the certificate sent to the Cloud Controller when initiating a connection.
downstream_ingress_ports
¶
Each port will be bound to (via 127.0.0.1:{port}) with the provided mTLS configuration. The forwarder assumes the downstream server is serving Loggregator’s V2 IngressService. See code.cloudfoundry.org/loggregator-api.
- Default
- 3459
drain_skip_cert_verify
¶
If set to true the SSL hostname validation will be disabled.
- Default
false
port
¶
Port the agent is serving gRPC via mTLS
- Default
3458
tls
¶
ca_cert
¶TLS loggregator root CA certificate. It is required for key/cert verification.
cert
¶TLS certificate for forwarder signed by the loggregator CA
cipher_suites
¶An ordered list of supported SSL cipher suites. Allowed cipher suites are TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384.
- Default
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256:TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
key
¶TLS private key for forwarder signed by the loggregator CA
Templates¶
Templates are rendered and placed onto corresponding
instances during the deployment process. This job's templates
will be placed into /var/vcap/jobs/loggr-forwarder-agent/
directory
(learn more).
config/bpm.yml
(frombpm.yml.erb
)config/certs/api_ca.crt
(fromapi_ca.crt.erb
)config/certs/api_client.crt
(fromapi_client.crt.erb
)config/certs/api_client.key
(fromapi_client.key.erb
)config/certs/forwarder.crt
(fromforwarder.crt.erb
)config/certs/forwarder.key
(fromforwarder.key.erb
)config/certs/loggregator_ca.crt
(fromloggregator_ca.crt.erb
)
Packages¶
Packages are compiled and placed onto corresponding
instances during the deployment process. Packages will be
placed into /var/vcap/packages/
directory.