Chapter 8. Forward to Amazon CloudWatch

Procedure

1. Create a Secret YAML file that uses the aws_access_key_id and aws_secret_access_key fields to specify your base64-encoded AWS credentials. For example:

   apiVersion: v1
   kind: Secret
   metadata:
     name: aws-secret
     namespace: <namespace_name>
   data:
     aws_access_key_id: QUtJQUlPU0ZPRE5ON0VYQU1QTEUK
     aws_secret_access_key: d0phbHJYVXRuRkVNSS9LN01ERU5HL2JQeFJmaUNZRVhBTVBMRUtFWQo=

   namespace

   Specify the namespace where your ClusterLogForwarder CR is deployed. The secret must be in the same namespace as the ClusterLogForwarder CR.

2. Create the secret. For example:

   $ oc apply -f aws-secret.yaml

3. Create or edit a YAML file that defines the ClusterLogForwarder CR object. In the file, specify the name of the secret. For example:

   apiVersion: observability.openshift.io/v1
   kind: ClusterLogForwarder
   metadata:
     name: <log_forwarder_name>
     namespace: <log_forwarder_namespace>
   spec:
     serviceAccount:
       name: <service_account_name>
     outputs:
      - name: cw-output
        type: cloudwatch
        cloudwatch:
          authentication:
            type: awsAccessKey
            awsAccessKey:
              keyId:
                key: <key>
                secretName: cw-secret
              keySecret:
                key: <key>
                secretName: cw-secret
          groupName: <prefix-{.dynamic_value||"none"}>
          region: us-east-2
     pipelines:
       - name: infra-logs
         inputRefs:
           - infrastructure
           - audit
           - application
         outputRefs:
           - cw-output

   serviceAccount.name

   Specify the name of your service account.

   outputs.name

   Specify a name for the output.

   type

   Specify the cloudwatch type.

   secretName

   Specify the name of the secret that has your AWS credentials.

   groupName

   Specify the strategy for grouping log streams. The value can be a combination of static and dynamic values consisting of field paths separated by "||". Encase dynamic values in single curly brackets "{}". Follow dynamic values with a static fallback value.

   region

   Specify the AWS region.

   pipelines.name

   Specify a name for the pipeline.

   inputRefs

   Specify the names of inputs defined in the input.name field for this pipeline. You can also use the built-in values application, infrastructure, audit.

   output

   Specify the names of outputs defined in the outputs.name field for this pipeline.

4. Apply the CR object:

   $ oc apply -f <file_name>.yaml