New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
LOG-2864: Compatibility with ES default output #1587
LOG-2864: Compatibility with ES default output #1587
Conversation
/retest |
/approve |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: jcantrill, xperimental The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
e98fb6d
to
638bd29
Compare
/retest |
1 similar comment
/retest |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
@xperimental: all tests passed! Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
Description
Currently the LokiStack integration always creates two outputs, one for each of the log streams that is forwarded by default (
application
andinfrastructure
). While these outputs are calleddefault
anddefault-infra
, they do not behave like thedefault
output that is available when using the ElasticSearch log storage.This PR changes the behaviour of the
default
output reference when using LokiStack, so that it is internally split into different outputs depending on the log stream forwarded into it. This should ensure that an input is always forwarded into the correct tenant, thus enforcing the correct authorization. Additionally this enables the use of customClusterLogForwarder
configurations that were usable with the ElasticSearch log storage, for example to forwardaudit
logs into the LokiStack log store.Known limitations:
ClusterRole
assigned to thelogcollector
currently always has write access to all tenants not just the ones it needs for the current configuration./cc @cahartma
/assign @jcantrill
Links