d78f89fb99
Deploy Dozzle (https://dozzle.dev/) for real-time container log viewing in the k8s cluster. Configuration: - Namespace: dozzle - Domain: dozzle.basicstack.de - Storage: 1Gi PVC with hcloud-volumes-encrypted storage class - Authentication: Pocket ID OIDC integration - RBAC: Cluster-wide pod log access via service account - Strategy: Recreate with ReadWriteOnce PVC for persistent settings Created Pocket ID OIDC client: - Client ID: 179c13f2-d251-4e1e-b1a0-c070df350c4e - Callback URL: https://dozzle.basicstack.de/oauth/callback ArgoCD application configured with automated sync and self-heal. Co-Authored-By: Paperclip <noreply@paperclip.ing>
35 lines
1.2 KiB
Markdown
35 lines
1.2 KiB
Markdown
# Dozzle Deployment
|
|
|
|
Dozzle is a real-time log viewer for Docker containers running in the Kubernetes cluster.
|
|
|
|
## Components
|
|
|
|
- **Namespace**: `dozzle`
|
|
- **Domain**: `dozzle.basicstack.de`
|
|
- **Storage**: 1Gi PVC using `hcloud-volumes-encrypted` storage class
|
|
- **Authentication**: Pocket ID OIDC integration
|
|
|
|
## Files
|
|
|
|
- `namespace.yaml`: Dozzle namespace
|
|
- `service-account.yaml`: Service account with RBAC for accessing pod logs cluster-wide
|
|
- `pvc.yaml`: Persistent volume claim for Dozzle settings (1Gi, ReadWriteOnce with Recreate strategy)
|
|
- `deployment.yaml`: Dozzle deployment with OIDC authentication
|
|
- `service.yaml`: Kubernetes service
|
|
- `ingress.yaml`: Traefik ingress with TLS
|
|
- `dozzle-oidc-sealed.yaml`: Sealed secret with OIDC credentials
|
|
|
|
## Pocket ID OIDC Client
|
|
|
|
- **Client ID**: `179c13f2-d251-4e1e-b1a0-c070df350c4e`
|
|
- **Client Name**: Dozzle
|
|
- **Callback URL**: `https://dozzle.basicstack.de/oauth/callback`
|
|
- **Scopes**: `openid profile email`
|
|
|
|
## Access
|
|
|
|
After deployment, access Dozzle at https://dozzle.basicstack.de and authenticate with Pocket ID credentials.
|
|
|
|
## ArgoCD
|
|
|
|
The application is managed by ArgoCD via `app-dozzle.yaml` in the parent apps directory.
|