Use Case

I use ACM to manage a fleet of clusters. I want to use openshift logging to aggregate selected logs from the entire fleet in a single Loki (or other) database where I can do queries across the fleet.

Acceptance critiera

Demo:

• Use ACM to push logging configuration to a fleet of clusters.
• Have all clusters forward logs to a central Loki instance.
• Query logs across the cluster

Missing pieces

Need to add cluster-id to log meta-data.

• Use openshift cluster  ID? Not available on non-openshift clusters, does it matter?
• Use API host:port? Problem discovering inside the cluster.

Notes

 
rageorge on this slack chat :

We have a policy which deploys and configures the logging operator.  https://github.com/stolostron/policy-collection/blob/main/community/CM-Configuration-Management/policy-configure-logforwarding.yaml
and a template policy https://github.com/stolostron/policy-collection/blob/main/community/CM-Configuration-Management/policy-cluster-logforwarder-templatized.yaml