Configuring auditing with timescaledb. (#217)

metal-stack · Feb 25, 2025 · 9ff7864 · 9ff7864
1 parent 007c82a
commit 9ff7864
Show file tree

Hide file tree

Showing 4 changed files with 20 additions and 4 deletions.
diff --git a/deploy_control_plane.yaml b/deploy_control_plane.yaml
@@ -18,7 +18,11 @@
       tags: ipam-db
     - name: metal-roles/control-plane/roles/masterdata-db
       tags: masterdata-db
+    - name: metal-roles/control-plane/roles/auditing-timescaledb
+      when: metal_auditing_timescaledb_enabled
+      tags: auditing
     - name: metal-roles/control-plane/roles/auditing-meili
+      when: metal_auditing_meili_enabled
       tags: auditing
     - name: metal-roles/control-plane/roles/metal
       tags: metal

diff --git a/inventories/group_vars/all/images.yaml b/inventories/group_vars/all/images.yaml
@@ -18,11 +18,10 @@ setup_yaml:
 # metal_masterdata_api_image_tag:
 # metal_console_image_name:
 # metal_console_image_tag:
+# metal_core_image_name:
 # metal_core_image_tag:
 # ...
 #
-# further overrides can be looked up in the metal-role projects where the mapping is defined:
-# https://github.com/metal-stack/metal-roles/blob/master/defaults/main.yaml
 
 ##
 ## for ansible roles
@@ -31,3 +30,13 @@ setup_yaml:
 # ansible_common_version:
 # metal_roles_version:
 # metal_ansible_modules_version:
+
+##
+## helm charts
+##
+
+# metal_helm_chart_version:
+# metal_helm_chart_repo:
+
+# further overrides can be looked up in the metal-role projects where the mapping is defined:
+# https://github.com/metal-stack/metal-roles/blob/master/defaults/main.yaml
diff --git a/inventories/group_vars/control-plane/auditing.yaml b/inventories/group_vars/control-plane/auditing.yaml
@@ -1,3 +1,6 @@
 ---
+auditing_timescaledb_storage_size: 10Gi
+auditing_timescaledb_resources: {}
+
 auditing_meili_storage_size: 10Gi
 auditing_meili_resources: {}
diff --git a/inventories/group_vars/control-plane/metal.yml b/inventories/group_vars/control-plane/metal.yml
@@ -150,5 +150,5 @@ metal_api_grpc_certs_client_cert: "{{  lookup('file', 'certs/grpc/client.pem') }
 metal_api_grpc_certs_ca_cert: "{{ lookup('file', 'certs/ca.pem') }}"
 
 # auditing
-metal_auditing_enabled: true
-metal_auditing_index_prefix: metal
+metal_auditing_timescaledb_enabled: true
+metal_auditing_meili_enabled: false