mi
65 lines
2.1 KiB
YAML
65 lines
2.1 KiB
YAML
services:
|
|
otel-queue-init:
|
|
image: alpine:3.21.2
|
|
command: ["sh", "-c", "chown 10001:10001 /queue && chmod 0700 /queue"]
|
|
volumes:
|
|
- otel-queue:/queue
|
|
networks: [observability]
|
|
restart: "no"
|
|
read_only: true
|
|
cap_drop: ["ALL"]
|
|
cap_add: ["CHOWN", "FOWNER"]
|
|
security_opt: ["no-new-privileges:true"]
|
|
|
|
otel-collector:
|
|
image: otel/opentelemetry-collector-contrib:0.117.0
|
|
command: ["--config=/etc/otelcol/config.yaml"]
|
|
environment:
|
|
APP_ENV: ${APP_ENV:-production-like}
|
|
RELEASE_VERSION: ${RELEASE_VERSION:-unknown}
|
|
OTEL_REMOTE_ENDPOINT: ${OTEL_REMOTE_ENDPOINT}
|
|
OTEL_REMOTE_AUTH_HEADER: ${OTEL_REMOTE_AUTH_HEADER:-}
|
|
OTEL_REMOTE_TLS_INSECURE: ${OTEL_REMOTE_TLS_INSECURE:-false}
|
|
expose: ["4317", "4318", "13133", "8888"]
|
|
volumes:
|
|
- ./otel-collector.yaml:/etc/otelcol/config.yaml:ro
|
|
- otel-queue:/var/lib/otelcol/queue
|
|
networks: [observability, egress]
|
|
depends_on:
|
|
otel-queue-init: {condition: service_completed_successfully}
|
|
healthcheck:
|
|
test: ["CMD", "/otelcol-contrib", "validate", "--config=/etc/otelcol/config.yaml"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
restart: unless-stopped
|
|
read_only: true
|
|
tmpfs: ["/tmp:size=32m,mode=1777"]
|
|
user: "10001:10001"
|
|
cap_drop: ["ALL"]
|
|
security_opt: ["no-new-privileges:true"]
|
|
mem_limit: 512m
|
|
cpus: 0.5
|
|
logging:
|
|
driver: json-file
|
|
options: {max-size: "50m", max-file: "5"}
|
|
|
|
otel-collector-local:
|
|
image: otel/opentelemetry-collector-contrib:0.117.0
|
|
profiles: ["observability-local"]
|
|
command: ["--config=/etc/otelcol/config.yaml"]
|
|
expose: ["4317", "4318", "13133"]
|
|
volumes:
|
|
- ./otel-collector.local.yaml:/etc/otelcol/config.yaml:ro
|
|
networks: [observability]
|
|
healthcheck:
|
|
test: ["CMD", "/otelcol-contrib", "validate", "--config=/etc/otelcol/config.yaml"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
read_only: true
|
|
tmpfs: ["/tmp:size=16m,mode=1777"]
|
|
user: "10001:10001"
|
|
cap_drop: ["ALL"]
|
|
security_opt: ["no-new-privileges:true"]
|