amazon-eks-ami icon indicating copy to clipboard operation
amazon-eks-ami copied to clipboard

Provide ability to install packages or skip logs if not needed

Open jdb-at-aws opened this issue 3 years ago • 2 comments

What would you like to be added:

Not everyone requires the IP tables logs. The script currently requires iptables to be installed and if it isn't, the script fails. Instead, if /iptables installed/then send logs/else skip logs.

Why is this needed:

Some customers are locked down and cannot install iptables on their hosts and don't need those particular logs to debug all issues.

jdb-at-aws avatar Apr 28 '21 13:04 jdb-at-aws

Are you talking about the log collector script? iptables comes standard in AmazonLinux AMIs, so it should be present in the majority of AMIs. That being said, I don't think it's unreasonable to add a branch to the log collector script to check if iptables is there before doing anything that expects it to be.

mmerkes avatar Apr 29 '21 16:04 mmerkes

@jdb-at-aws iptables will be used only if available, and the script will not fail otherwise. See the get_iptables_info function.

Can we set this issue as resolved?

ttres avatar Jan 28 '22 06:01 ttres