Skip to content

loggr-forwarder-agent job from loggregator-agent/3.0

Github source: 74609b1 or master branch

Properties

api

batch_size

The batch size the forwarder will request the Cloud Controller for bindings.

Default
1000

polling_interval

The interval at which the forwarder will poll the Cloud Controller for bindings.

Default
15s

tls

ca_cert

When the forwarder communicates with the Cloud Controller it must validate the Cloud Controller’s certificate was signed by a trusted CA. This is the CA trusted by the forwarder for that communication.

cert

This certificate is sent to the Cloud Controller when initiating a connection. It must be signed by a CA that is trusted by the Cloud Controller.

cn

When the forwarder communicates with the Cloud Controller it must validate the Cloud Controller’s common name (CN) or subject alternative names (SANs) against the hostname or IP address used to initiate the connection. Most of the time this should be the hostname defined in api.url.

key

This is the private key for the certificate sent to the Cloud Controller when initiating a connection.

downstream_ingress_ports

Each port will be bound to (via 127.0.0.1:{port}) with the provided mTLS configuration. The forwarder assumes the downstream server is serving Loggregator’s V2 IngressService. See code.cloudfoundry.org/loggregator-api.

Default
- 3459

drain_skip_cert_verify

If set to true the SSL hostname validation will be disabled.

Default
false

port

Port the agent is serving gRPC via mTLS

Default
3458

tls

ca_cert

TLS loggregator root CA certificate. It is required for key/cert verification.

cert

TLS certificate for forwarder signed by the loggregator CA

cipher_suites

An ordered list of supported SSL cipher suites. Allowed cipher suites are TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384.

Default
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256:TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

key

TLS private key for forwarder signed by the loggregator CA

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/loggr-forwarder-agent/ directory (learn more).

  • config/bpm.yml (from bpm.yml.erb)
  • config/certs/api_ca.crt (from api_ca.crt.erb)
  • config/certs/api_client.crt (from api_client.crt.erb)
  • config/certs/api_client.key (from api_client.key.erb)
  • config/certs/forwarder.crt (from forwarder.crt.erb)
  • config/certs/forwarder.key (from forwarder.key.erb)
  • config/certs/loggregator_ca.crt (from loggregator_ca.crt.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.