ROX-16735: Add vector.dev Helm chart

[parametalol]

Description

Checklist (Definition of Done)

• Unit and integration tests added
• Added test description under Test manual
• Documentation added if necessary (i.e. changes to dev setup, test execution, ...)
• CI and all relevant tests are passing
• Add the ticket number to the PR title if available, i.e. ROX-12345: ...
• Discussed security and business related topics privately. Will move any security and business related topics that arise to private communication channel.
• Add secret to app-interface Vault or Secrets Manager if necessary

Test manual

$ helm dependencies list 
NAME         	VERSION	REPOSITORY             	STATUS  
cloudwatch   	0.1.0  	                      	unpacked
observability	0.1.0  	                      	unpacked
logging      	0.1.0  	                      	unpacked
vector       	0.21.1 	https://helm.vector.dev	ok      

$ helm template --name-template test ... | yq 'select(.metadata.name | contains "rhacs-vector") | .kind'
ServiceAccount
---
Secret
---
ConfigMap
---
Service
---
Service
---
StatefulSet

Persistent volumes:

$ oc get pvc
NAME                  STATUS   VOLUME                                     CAPACITY   ACCESS MODES   STORAGECLASS   AGE
data-rhacs-vector-0   Bound    pvc-0c019b18-9a02-449b-a11c-552b252a4983   10Gi       RWO            gp3            5h49m
data-rhacs-vector-1   Bound    pvc-607a44d8-6c75-4888-9407-0a06c7be9306   10Gi       RWO            gp3            5h37m
data-rhacs-vector-2   Bound    pvc-969469d6-a2ad-4b83-8ff3-f0f993e2b75a   10Gi       RWO            gp3            5h37m

Vector deployment container:

      containers:
        - name: vector
          image: "timberio/vector:0.29.1-distroless-libc"
          imagePullPolicy: IfNotPresent
          args:
            - --config-dir
            - /etc/vector/
          env:
            - name: AWS_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  key: aws_access_key_id
                  name: cloudwatch
            - name: AWS_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  key: aws_secret_access_key
                  name: cloudwatch
...

HTTPS config:

$ curl -v ...
...
* Server certificate:
*  subject: CN=rhacs-vector.default.svc
*  start date: May 22 08:06:58 2023 GMT
*  expire date: May 21 08:06:59 2025 GMT
*  issuer: CN=openshift-service-serving-signer@1684507557
...

Test logs: https://s3.console.aws.amazon.com/s3/buckets/acs-audit-logs--us-east-1--acs-dev-dp-01?prefix=test-tenant-id/2023-05-22/&region=us-east-1

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[parametalol]

Current dependencies on/for this PR:

• main
  • PR ROX-16735: Add vector.dev Helm chart #1038 👈

This comment was auto-generated by Graphite.

[mtodor]

We should adjust a few configurations for the vector aggregator.

[mtodor]

Nice progress! I've added a few additional suggestions related to the configuration of Vector. Please look at it by yourself if something can be even more improved.

Maybe there are some good suggestions here: https://vector.dev/docs/setup/going-to-prod/arch/aggregator/

[mtodor]

I think we still need a minor tweak for matchExpressions.

[parametalol]

/retest

[mtodor]

We can go forward and merge this. The next step will be to adjust some settings and enable vector.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: 0x656b694d, mtodor

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [mtodor]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment