amazon-vpc-cni-k8s icon indicating copy to clipboard operation
amazon-vpc-cni-k8s copied to clipboard

Configurable log output for the aws-eks-nodeagent in the daemonset

Open OcamsRazor opened this issue 1 year ago • 1 comments
trafficstars

What would you like to be added:

Hi, I'm wondering if it would be possible to add support for the --log-file argument on the aws-eks-nodeagent container to set /dev/stdout as the log output. I have found following comment https://github.com/aws/aws-network-policy-agent/issues/50#issuecomment-1710541162 but seems this is not yet possible.

I'm deploying the VPC CNI using TF (aws_eks_addon). Is the JSON schema that is used for configuration generated based on the values.yaml file of this chart ?

Why is this needed:

Agent logs and policy decision logs are by default stored in /var/log/aws-routed-eni/network-policy-agent.log. For log scraping with e.g. fluent-bit, pods need to be privileged to gain access to the log file. Writing logs to stdout would enable standard log tooling to be used

Thanks

OcamsRazor avatar Mar 12 '24 15:03 OcamsRazor