AWS Logging System in K8S

Introduction

Thank you for clicking through to my arcticle. I've been a DevOps engineer for 2 years in dev-team of 7 engineers.

My name is MINSEOK, LEE, but I use Unchaptered as an alias on the interenet. So, you can call me anythings "MINSEOK, LEE" or "Unchaptered" to ask something.

Before started

This article is some kind of note for AEWS 2, Week 4, Restropection.

AWS EKS with CloudWatch Logs

With some configuration, AWS EKS can collect and view CloudWatch logs.
These collected logs can also be queried in SQL format using Log Insight.
The following log types are supported for collection

1. Control Plane

2. Node

3. Application

However, CloudWatch Logs charges Seoul Region a very high fee of $0.76 per 1GB of data collection, so it seems better to use another monitoring system based on open source.

Control Plane Logs

Supported Data Types to collect in control plane of K8S.

1. API Server
   The request and response record about all process in k8s cluster.

2. Audit
   The record about users, administrators and system components to affect k8s cluster.

3. Authenticator
   The record about IAM access profile for RBAC authentication.

4. Controller Manager

5. Scheduler