amazon-vpc-cni-k8s
amazon-vpc-cni-k8s copied to clipboard
Configurable log output for the aws-eks-nodeagent in the daemonset
What would you like to be added:
Hi, I'm wondering if it would be possible to add support for the --log-file argument on the aws-eks-nodeagent container to set /dev/stdout as the log output.
I have found following comment https://github.com/aws/aws-network-policy-agent/issues/50#issuecomment-1710541162 but seems this is not yet possible.
I'm deploying the VPC CNI using TF (aws_eks_addon). Is the JSON schema that is used for configuration generated based on the values.yaml file of this chart ?
Why is this needed:
Agent logs and policy decision logs are by default stored in /var/log/aws-routed-eni/network-policy-agent.log. For log scraping with e.g. fluent-bit, pods need to be privileged to gain access to the log file.
Writing logs to stdout would enable standard log tooling to be used
Thanks