Deploy Dozzle (https://dozzle.dev/) for real-time container log viewing in the k8s cluster. Configuration: - Namespace: dozzle - Domain: dozzle.basicstack.de - Storage: 1Gi PVC with hcloud-volumes-encrypted storage class - Authentication: Pocket ID OIDC integration - RBAC: Cluster-wide pod log access via service account - Strategy: Recreate with ReadWriteOnce PVC for persistent settings Created Pocket ID OIDC client: - Client ID: 179c13f2-d251-4e1e-b1a0-c070df350c4e - Callback URL: https://dozzle.basicstack.de/oauth/callback ArgoCD application configured with automated sync and self-heal. Co-Authored-By: Paperclip <noreply@paperclip.ing> |
||
|---|---|---|
| .. | ||
| deployment.yaml | ||
| dozzle-oidc-sealed.yaml | ||
| ingress.yaml | ||
| namespace.yaml | ||
| pvc.yaml | ||
| README.md | ||
| service-account.yaml | ||
| service.yaml | ||
Dozzle Deployment
Dozzle is a real-time log viewer for Docker containers running in the Kubernetes cluster.
Components
- Namespace:
dozzle - Domain:
dozzle.basicstack.de - Storage: 1Gi PVC using
hcloud-volumes-encryptedstorage class - Authentication: Pocket ID OIDC integration
Files
namespace.yaml: Dozzle namespaceservice-account.yaml: Service account with RBAC for accessing pod logs cluster-widepvc.yaml: Persistent volume claim for Dozzle settings (1Gi, ReadWriteOnce with Recreate strategy)deployment.yaml: Dozzle deployment with OIDC authenticationservice.yaml: Kubernetes serviceingress.yaml: Traefik ingress with TLSdozzle-oidc-sealed.yaml: Sealed secret with OIDC credentials
Pocket ID OIDC Client
- Client ID:
179c13f2-d251-4e1e-b1a0-c070df350c4e - Client Name: Dozzle
- Callback URL:
https://dozzle.basicstack.de/oauth/callback - Scopes:
openid profile email
Access
After deployment, access Dozzle at https://dozzle.basicstack.de and authenticate with Pocket ID credentials.
ArgoCD
The application is managed by ArgoCD via app-dozzle.yaml in the parent apps directory.