Kubernetes-Logs an UptimeEye senden

kubectl create namespace logging
kubectl -n logging create secret generic uptimeeye-logs \
  --from-literal=key=ue_ingest_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

role: Agent
# Mount the Secret as files; Vector reads the key via its secret backend
# (it does not expand ${ENV} placeholders in the config).
extraVolumes:
  - name: uptimeeye-logs
    secret: { secretName: uptimeeye-logs }
extraVolumeMounts:
  - name: uptimeeye-logs
    mountPath: /etc/vector/secrets
    readOnly: true
customConfig:
  data_dir: /vector-data-dir
  secret:
    k8s:
      type: directory
      path: /etc/vector/secrets
  sources:
    k8s_logs:
      type: kubernetes_logs
  transforms:
    enrich:
      type: remap
      inputs: [k8s_logs]
      source: |
        .service   = .kubernetes.container_name
        .namespace = .kubernetes.pod_namespace
        .pod       = .kubernetes.pod_name
        .host      = .kubernetes.pod_node_name
        .env       = "prod"
        # Applications that log JSON: lift their fields to the top level.
        parsed, err = parse_json(string!(.message))
        if err == null { . = merge(., parsed) }
        del(.kubernetes); del(.file); del(.source_type)
  sinks:
    uptimeeye:
      type: elasticsearch
      inputs: [enrich]
      endpoints: ["https://logs.uptimeeye.com/v1/ingest/elasticsearch/"]
      api_version: v8
      compression: gzip
      healthcheck: { enabled: false }
      request:
        headers:
          Authorization: "Bearer SECRET[k8s.key]"
      query:
        _msg_field: message
        _time_field: timestamp
        _stream_fields: namespace,service,env
      buffer: { type: disk, max_size: 268435488 }

helm repo add vector https://helm.vector.dev
helm upgrade --install vector vector/vector -n logging -f values.yaml
kubectl -n logging logs ds/vector --tail=20   # look for "Healthcheck disabled" and no 4xx