github.com/muhammadn/cortex@v1.9.1-0.20220510110439-46bb7000d03d/docs/configuration/single-process-config-blocks-tls.yaml (about)

     1  
     2  # Configuration for running Cortex in single-process mode.
     3  # This should not be used in production.  It is only for getting started
     4  # and development.
     5  
     6  # Disable the requirement that every request to Cortex has a
     7  # X-Scope-OrgID header. `fake` will be substituted in instead.
     8  auth_enabled: false
     9  
    10  server:
    11    http_listen_port: 9009
    12  
    13    # Configure the server to allow messages up to 100MB.
    14    grpc_server_max_recv_msg_size: 104857600
    15    grpc_server_max_send_msg_size: 104857600
    16    grpc_server_max_concurrent_streams: 1000
    17    grpc_tls_config:
    18      cert_file: "server.crt"
    19      key_file: "server.key"
    20      client_auth_type: "RequireAndVerifyClientCert"
    21      client_ca_file: "root.crt"
    22  
    23  
    24  distributor:
    25    shard_by_all_labels: true
    26    pool:
    27      health_check_ingesters: true
    28  
    29  ingester_client:
    30    grpc_client_config:
    31      # Configure the client to allow messages up to 100MB.
    32      max_recv_msg_size: 104857600
    33      max_send_msg_size: 104857600
    34      grpc_compression: gzip
    35      tls_cert_path: "client.crt"
    36      tls_key_path: "client.key"
    37      tls_ca_path: "root.crt"
    38  
    39  ingester:
    40    lifecycler:
    41      # The address to advertise for this ingester.  Will be autodiscovered by
    42      # looking up address on eth0 or en0; can be specified if this fails.
    43      # address: 127.0.0.1
    44  
    45      # We want to start immediately and flush on shutdown.
    46      join_after: 0
    47      min_ready_duration: 0s
    48      final_sleep: 0s
    49      num_tokens: 512
    50  
    51      # Use an in memory ring store, so we don't need to launch a Consul.
    52      ring:
    53        kvstore:
    54          store: inmemory
    55        replication_factor: 1
    56  
    57  storage:
    58    engine: blocks
    59  
    60  blocks_storage:
    61    tsdb:
    62      dir: /tmp/cortex/tsdb
    63  
    64    bucket_store:
    65      sync_dir: /tmp/cortex/tsdb-sync
    66  
    67    # You can choose between local storage and Amazon S3, Google GCS, Azure  and OpenStack Swift storage. Each option requires additional configuration
    68    # as shown below. All options can be configured via flags as well which might be handy for secret inputs.
    69    backend: s3 # s3, gcs, azure, swift or filesystem are valid options
    70    s3:
    71      bucket_name: cortex
    72      endpoint: s3.dualstack.us-east-1.amazonaws.com
    73      # Configure your S3 credentials below.
    74      # secret_access_key: "TODO"
    75      # access_key_id:     "TODO"
    76  #  gcs:
    77  #    bucket_name: cortex
    78  #    service_account: # if empty or omitted Cortex will use your default service account as per Google's fallback logic
    79  #  azure:
    80  #    account_name:
    81  #    account_key:
    82  #    container_name:
    83  #    endpoint_suffix:
    84  #    max_retries: # Number of retries for recoverable errors (defaults to 20)
    85  
    86  # filesystem:
    87  #   dir: ./data/tsdb
    88  
    89  compactor:
    90    data_dir: /tmp/cortex/compactor
    91    sharding_ring:
    92      kvstore:
    93        store: inmemory
    94  
    95  frontend_worker:
    96    match_max_concurrent: true
    97    grpc_client_config:
    98      tls_cert_path: "client.crt"
    99      tls_key_path: "client.key"
   100      tls_ca_path: "root.crt"
   101  
   102  ruler:
   103    enable_api: true
   104    enable_sharding: false
   105  
   106  ruler_storage:
   107    backend: local
   108    local:
   109      directory: /tmp/cortex/rules