teleport-plugin-event-handler Chart Reference

The teleport-plugin-event-handler Helm chart is used to configure the Event Handler Teleport plugin which allows users to send events and session logs to a Fluentd instance for further processing or storage.

You can browse the source on GitHub.

This reference details available values for the teleport-plugin-event-handler chart.

teleport.address

This parameter contains the host/port combination of the Teleport Auth Service.

values.yaml example:

teleport:
  address: "teleport.example.com:3025"

teleport.identitySecretName

Name of the Kubernetes secret that contains the credentials for the connection.

The secret should be in the following format:

apiVersion: v1
kind: Secret
type: Opaque
metadata:
  name: teleport-plugin-event-handler-identity
data:
  auth_id: ...

values.yaml example:

teleport:
  identitySecretName: "teleport-plugin-event-handler-identity"

teleport.identitySecretPath

Name of the key in the Kubernetes secret that holds the credentials for the connection. If the secret follows the format above, it can be omitted.

values.yaml example:

teleport:
  identitySecretPath: "auth_id"

fluentd.url

Fluentd URL where the events will be sent.

values.yaml example:

fluentd:
  url: "https://fluentd:24224/events.log"

fluentd.sessionUrl

Fluentd URL where the session logs will be sent.

values.yaml example:

fluentd:
  sessionUrl: "https://fluentd:24224/session.log"

fluentd.certificate.secretName

Secret containing the credentials to connect to Fluentd. It must to contain the CA certificate, the client key and the client certificate.

values.yaml example:

fluentd:
  secretName: "teleport-plugin-event-handler-fluentd"

fluentd.certificate.caPath

Name of the key which contains the CA certificate inside the secret.

values.yaml example:

fluentd:
  caPath: "ca.crt"

fluentd.certificate.keyPath

Name of the key which contains the client's private key inside the secret.

values.yaml example:

fluentd:
  keyPath: "client.key"

fluentd.certificate.certPath

Name of the key which contains the client's certificate inside the secret.

values.yaml example:

fluentd:
  certPath: "client.crt"

log.output

Logger output. Can be stdout, stderr or a file name, eg. /var/log/teleport/fluentd.log.

values.yaml example:

log:
  output: /var/log/teleport/fluentd.log

log.severity

Logger severity. Possible values are INFO, ERROR, DEBUG or WARN.

values.yaml example:

log:
  severity: DEBUG