diff --git a/services/log-management.html.md.erb b/services/log-management.html.md.erb index 7991a1cc..00dff988 100644 --- a/services/log-management.html.md.erb +++ b/services/log-management.html.md.erb @@ -11,6 +11,8 @@ Cloud Foundry aggregates logs for all instances of your apps as well as for requ If you want to persist more than the limited amount of logging information that Cloud Foundry can buffer, drain these logs to a log management service. +Feature: Since [CAPI release 1.141.0](https://github.com/cloudfoundry/capi-release/releases/tag/1.141.0) you can use mTLS inside your syslog drain. Please, follow the described process inside Step 2: Create and Bind a User-Provided Service Instance to handle it. Please inject the corresponding credentials as PEM encoded X.509 certificate. + For more information about the systems responsible for log aggregation and streaming in Cloud Foundry, see [App Logging in Cloud Foundry](../deploy-apps/streaming-logs.html). @@ -58,12 +60,17 @@ To set up a communication channel between the log management service and your Cl You can create a syslog drain service and bind apps to it using Cloud Foundry Command Line Interface (cf CLI) commands. -1. To create the service instance, run `cf create-user-provided-service` (or `cf cups`) with the `-l` flag, filling in values as follows: +1. To create the service instance, run `cf create-user-provided-service` (or `cf cups`) with the `-l`. - DRAIN-NAME: A name to use for your syslog drain service instance. - SYSLOG-DRAIN-URL: The syslog URL from [Step 1: Configure the Log Management Service](#step1).
$ cf create-user-provided-service DRAIN-NAME -l SYSLOG-URL+In case of the usage of the mTLS feature delivered in [CAPI release 1.141.0](https://github.com/cloudfoundry/capi-release/releases/tag/1.141.0), you can use `-p` flag to define the credentials, filling in values as follows. +
+$ cf create-user-provided-service DRAIN-NAME -l SYSLOG-URL -p {"cert":"-----BEGIN CERTIFICATE-----\nMIIH...-----END CERTIFICATE-----","key":"-----BEGIN PRIVATE KEY-----\nMIIE...-----END PRIVATE KEY-----"} ++ For more information, see [User-Provided Service Instances](./user-provided.html). 1. To bind an app to the service instance, do one of the following: