{{- $containers := printf "%s/containers/" (default "/var/lib/docker" .Values.global.dockerRootDirectory) }}
apiVersion: logging.banzaicloud.io/v1beta1
kind: Logging
metadata:
  name: {{ .Release.Name }}
  namespace: {{ .Release.Namespace }}
  labels:
{{ include "logging-operator.labels" . | indent 4 }}
spec:
  controlNamespace: {{ .Release.Namespace }}
  {{- if (include "windowsEnabled" .) }}
  nodeAgents:
    - name: win-agent
      profile: windows
      nodeAgentFluentbit:
        daemonSet:
          spec:
            template:
              spec:
                containers:
                - image: "{{ template "system_default_registry" . }}{{ .Values.images.nodeagent_fluentbit.repository }}:{{ .Values.images.nodeagent_fluentbit.tag }}"
                  name: fluent-bit
        tls:
          enabled: {{ .Values.nodeAgents.tls.enabled | default false }}
    {{- if .Values.additionalLoggingSources.rke.enabled }}
    - name: win-agent-rke
      profile: windows
      nodeAgentFluentbit:
        filterKubernetes:
          Kube_Tag_Prefix: "kuberentes.C.var.lib.rancher.rke.log."
        inputTail:
          Path: "C:\\var\\lib\\rancher\\rke\\log"
        extraVolumeMounts:
        - source: "/var/lib/rancher/rke/log"
          destination: "/var/lib/rancher/rke/log"
          readOnly: true
        daemonSet:
          spec:
            template:
              spec:
                containers:
                - image: "{{ template "system_default_registry" . }}{{ .Values.images.nodeagent_fluentbit.repository }}:{{ .Values.images.nodeagent_fluentbit.tag }}"
                  name: fluent-bit
        tls:
          enabled: {{ .Values.nodeAgents.tls.enabled | default false }}
    {{- end }}
  {{- end }}
  fluentbit:
    image:
      repository: {{ template "system_default_registry" . }}{{ .Values.images.fluentbit.repository }}
      tag: {{ .Values.images.fluentbit.tag }}
    {{- if or .Values.global.psp.enabled .Values.global.seLinux.enabled }}
    security:
    {{- end }}
    {{- if .Values.global.psp.enabled }}
      podSecurityPolicyCreate: true
      roleBasedAccessControlCreate: true
    {{- end }}
    {{- if .Values.global.seLinux.enabled }}
      securityContext:
        seLinuxOptions:
          type: rke_logreader_t
    {{- end }}
  {{- if .Values.global.dockerRootDirectory }}
    mountPath: {{ $containers }}
    extraVolumeMounts:
      - source: {{ $containers }}
        destination: {{ $containers }}
        readOnly: true
  {{- end }}
  {{- $total_tolerations := concat (.Values.tolerations) (.Values.fluentbit.tolerations) }}
  {{- with $total_tolerations }}
    tolerations:
      {{- toYaml . | nindent 6 }}
  {{- end }}
  {{- with .Values.nodeSelector }}
    nodeSelector:
      {{- toYaml . | nindent 6 }}
  {{- end }}
  {{- with .Values.fluentbit.resources }}
    resources:
      {{- toYaml . | nindent 6 }}
  {{- end }}
  fluentd:
    image:
      repository: {{ template "system_default_registry" . }}{{ .Values.images.fluentd.repository }}
      tag: {{ .Values.images.fluentd.tag }}
    configReloaderImage:
      repository: {{ template "system_default_registry" . }}{{ .Values.images.config_reloader.repository }}
      tag: {{ .Values.images.config_reloader.tag }}
    disablePvc: {{ .Values.disablePvc }}
    {{- if .Values.global.psp.enabled }}
    security:
      podSecurityPolicyCreate: true
      roleBasedAccessControlCreate: true
    {{- end }}
    {{- with .Values.tolerations }}
    tolerations:
      {{- toYaml . | nindent 6 }}
    {{- end }}
    {{- with .Values.nodeSelector }}
    nodeSelector:
      {{- toYaml . | nindent 6 }}
    {{- end }}
    {{- with .Values.fluentd.resources }}
    resources:
      {{- toYaml . | nindent 6 }}
    {{- end }}
    {{- with .Values.fluentd.livenessProbe }}
    livenessProbe: {{- toYaml . | nindent 6 }}
    {{- end }}