Goals

The goals of this epic are to:

• Drop all dependencies upon out dated technologies (e.g. fluentd, Elastic stack)
• Drop the ClusterLogging.logging.openshift.io API
• Introduce the ClusterLogForwarder.observability.openshift.io API to replace ClusterLogForwarder.logging.openshift.io
• Produce an alternate workflow for deploying a full logging stack

Non-Goals

Motivation

• The primary motivation is drop technologies we no longer will offer
   

  Alternatives

• Alternative is to continue updating the 1.0 apis

Acceptance Criteria

• Verify administrators can deploy a logging stack that includes vector forwarding, loki logstorage, console visualization
• Verify forwarding and collection can be deployed using the new CLF.observability API
• Verify existing forwarding and collection are migrated to the new CLF.opservability API

Risk and Assumptions

Documentation Considerations

Open Questions

Additional Notes

Specific Items to review before release:

• template of parameters
• Viaq specific changes in outputs (e.g. flat labels). Drop? Figure out how to swap from viaq v1 and v2
• token auth in elasticsearch
• Document migration of default es should provide index that matches alias
• Document migrations for enabling container structured logs
• Viaq v2 remove "file" field
• Add validation for http auth for token or username/password only
• Ensure outputs modify "timestamp" key to viaq V2
• migrate syslog "field references" to use vector like templating
• Document removal of non-RFC fields which varies from v1: remove_tag_prefix , tag_key , use_record, payload_key
• Document all labels passed to ES with underscore... instead of allow list