[EKS] [request]: send control-plane logs to self-managed logging system

[liorfranko]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Tell us about your request We're looking for a way to send the control-plane logs (API server, Audit, Authenticator, Controller Manager, and Scheduler) to a self-managed logging system and not only to cloudwatch.

Which service(s) is this request for? EKS

[lyoung-confluent]

At least for k8s audit logs, EKS could to implement the k8s audit webhook backend interface which would allow compatibility with existing services (ex: falco) that support the webhook method.