feat: 🎸 wip

ministryofjustice · Dec 20, 2023 · 88b70e5 · 88b70e5
1 parent 7fad416
commit 88b70e5
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/configmap.tf b/configmap.tf
@@ -74,6 +74,21 @@ resource "kubernetes_config_map" "fluent-bit-config" {
         Match               cp-ingress-modsec-stdout.*
         regex               log (ModSecurity-nginx|modsecurity|OWASP_CRS|owasp-modsecurity-crs)
 
+    [FILTER]
+        Name                kubernetes
+        Alias               modsec_nginx_ingress_stdout
+        Match               cp-ingress-modsec-stdout.*
+        Kube_Tag_Prefix     cp-ingress-modsec-stdout.var.log.containers.
+        Kube_URL            https://kubernetes.default.svc:443
+        Kube_CA_File        /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
+        Kube_Token_File     /var/run/secrets/kubernetes.io/serviceaccount/token
+        K8S-Logging.Parser  On
+        K8S-Logging.Exclude On
+        Keep_Log            On
+        Merge_Log           On
+        Merge_Log_Key       log_processed
+        Buffer_Size         1MB
+
     [FILTER]
         Name                              lua
         Match                             cp-ingress-modsec-stdout.*