flows_v1beta2_flowcollector.yaml

apiVersion: flows.netobserv.io/v1beta2
kind: FlowCollector
metadata:
  name: cluster
spec:
  namespace: netobserv
  deploymentModel: Direct
  agent:
    type: eBPF
    ebpf:
      imagePullPolicy: IfNotPresent
      logLevel: info
      sampling: 50
      cacheActiveTimeout: 5s
      cacheMaxFlows: 100000
      # Change privileged to "true" on old kernel version not knowing CAP_BPF or when using "PacketDrop" feature
      privileged: false
      # features:
      # - "PacketDrop"
      # - "DNSTracking"
      # - "FlowRTT"
      interfaces: []
      excludeInterfaces: ["lo"]
      kafkaBatchSize: 1048576
      #flowFilter:
      #  action: Accept
      #  cidr: 0.0.0.0/0
      #  protocol: UDP
      #  sourcePorts: 53
      #  enable: true
      metrics:
        enable: false
        server:
          port: 9090
      # Custom optionnal resources configuration
      resources:
        requests:
          memory: 50Mi
          cpu: 100m
        limits:
          memory: 800Mi
  kafka:
    address: "kafka-cluster-kafka-bootstrap.netobserv"
    topic: network-flows
    tls:
      enable: false
      caCert:
        type: secret
        name: kafka-cluster-cluster-ca-cert
        certFile: ca.crt
      userCert:
        type: secret
        name: flp-kafka
        certFile: user.crt
        certKey: user.key
  processor:
    imagePullPolicy: IfNotPresent
    logLevel: info
    # Change logTypes to "CONVERSATIONS" or "ALL" to enable conversation tracking
    logTypes: Flows
    # Append a unique cluster name to each record
    # clusterName: <CLUSTER NAME>
    # addZone: true
    # subnetLabels:
    #   openShiftAutoDetect: true
    #   customLabels:
    #   - cidrs: []
    #     name: ""
    metrics:
      server:
        port: 9102
      disableAlerts: []
      # includeList:
      #   - "node_ingress_bytes_total"
      #   - "workload_ingress_bytes_total"
      #   - "namespace_flows_total"
      #   - "namespace_drop_packets_total"
      #   - "namespace_rtt_seconds"
    # Kafka consumer stage configuration
    kafkaConsumerReplicas: 3
    kafkaConsumerAutoscaler: null
    kafkaConsumerQueueCapacity: 1000
    kafkaConsumerBatchSize: 10485760
    # Custom optionnal resources configuration
    resources:
      requests:
        memory: 100Mi
        cpu: 100m
      limits:
        memory: 800Mi
  loki:
    enable: true
    # Change mode to "LokiStack" to use with the loki operator
    mode: Monolithic
    monolithic:
      url: 'http://loki.netobserv.svc:3100/'
      tenantID: netobserv
      tls:
        enable: false
        caCert:
          type: configmap
          name: loki-gateway-ca-bundle
          certFile: service-ca.crt
    lokiStack:
      name: loki
      # Change loki operator instance namespace
      # namespace: loki-operator
    # Console plugin read timeout
    readTimeout: 30s
    # Write stage configuration
    writeTimeout: 10s
    writeBatchWait: 1s
    writeBatchSize: 10485760
  consolePlugin:
    enable: true
    imagePullPolicy: IfNotPresent
    logLevel: info
    # Scaling configuration
    replicas: 1
    autoscaler:
      status: Disabled
      minReplicas: 1
      maxReplicas: 3
      metrics:
      - type: Resource
        resource:
          name: cpu
          target:
            type: Utilization
            averageUtilization: 50
    # Custom optionnal port-to-service name translation
    portNaming:
      enable: true
      portNames:
        "3100": loki
    # Custom optionnal filter presets
    quickFilters:
    - name: Applications
      filter:
        flow_layer: 'app'
      default: true
    - name: Infrastructure
      filter:
        flow_layer: 'infra'
    - name: Pods network
      filter:
        src_kind: 'Pod'
        dst_kind: 'Pod'
      default: true
    - name: Services network
      filter:
        dst_kind: 'Service'
    # Custom optionnal resources configuration
    resources:
      requests:
        memory: 50Mi
        cpu: 100m
      limits:
        memory: 100Mi
  exporters: []
    # - type: Kafka
    #   kafka:
    #     address: "kafka-cluster-kafka-bootstrap.netobserv"
    #     topic: netobserv-flows-export
    # or
    # - type: IPFIX
    #   ipfix:
    #     targetHost: "ipfix-collector.ipfix.svc.cluster.local"
    #     targetPort: 4739
    #     transport: TCP or UDP (optional - defaults to TCP)