Uploaded image for project: 'Observability and Data Analysis Program'
  1. Observability and Data Analysis Program
  2. OBSDA-165

Support for log forward to Amazon OpenSearch Service using Sigv4 auth signed requests

XMLWordPrintable

    • False
    • None
    • False
    • Not Selected
    • Impediment

      ###Proposed title of this feature request

      Support for log forward to Amazon OpenSearch Service using Sigv4 auth signed requests

      ###What is the nature and description of the request?

      Able to send the logs collected in OCP from OCP Logging stack to Amazon OpenSearch Service [0] using Sigv4 auth signed requests [1]

      ###Why is this needed this? (List the business requirements here)

      We would like to send logs to AWS OpenSearch directly.  This is currently not possible as the OpenShift Logging Operator does not support signing requests with Sigv4, a requirement of AWS OpenSearch.  The lack of the ability to send logs directly means we have to setup additional infrastructure to intercept and sign the requests, before forwarding on to AWS OpenSearch.  The use of a proxy to sign the requests adds latency and is a potential point of failure, therefore, we would like to remove this additional step and send logs directly.

      ###List any affected packages or components

      Logging stack

      [0] https://aws.amazon.com/opensearch-service/
      [1] https://docs.amazonaws.cn/en_us/general/latest/gr/sigv4_signing.html

              jamparke@redhat.com Jamie Parker
              rhn-support-ocasalsa Oscar Casal Sanchez
              Votes:
              9 Vote for this issue
              Watchers:
              15 Start watching this issue

                Created:
                Updated:
                Resolved: