Splunk Connector setup with Flux and Helm

Demo repo showing how to use Flux v2 and install the Splunk Connector Helm Chart.

Setup

There are some secrets and setup needed to get this repo going.

1. Clone/Fork this repo
2. Create an RG in Azure and note down the name
3. Create a GitHub secret holding an Azure Service Principal following this guide: https://github.com/Azure/actions-workflow-samples/blob/master/assets/create-secrets-for-GitHub-workflows.md giving it access to the RG in step 2.
4. Make sure you have a Splunk instance ready for the logs. You can create a Spunk instance using the free trial at https://www.splunk.com/en_us/products/splunk-cloud-platform.html.
5. Create a Splunk HTTP token that has access to write to the main index. Add the token to a GitHub secret called: SPLUNK_TOKEN.
6. Update the URL in the file:

   flux-helm-k8s-setup/yaml/syncfolder/splunk-connector-release.yaml

   Line 20 in bc2488b

   host: prd-p-mssza.splunkcloud.com

Lessons Learned

• If you are running in a K8s cluster that is not using Docker, i.e., a type of CRI container runtime, then you need to set the container log format type to cri.
• If you are connecting to the Splunk Cloud trial_, then you need the insecure setting:

  flux-helm-k8s-setup/yaml/syncfolder/splunk-connector-release.yaml

  Line 23 in bc2488b

  insecureSSL: true

  Splunk Cloud Trial uses self-signed certificates.

Workflows

License