diff --git a/configmap.tf b/configmap.tf index e64a45a..3afab11 100644 --- a/configmap.tf +++ b/configmap.tf @@ -74,6 +74,21 @@ resource "kubernetes_config_map" "fluent-bit-config" { Match cp-ingress-modsec-stdout.* regex log (ModSecurity-nginx|modsecurity|OWASP_CRS|owasp-modsecurity-crs) + [FILTER] + Name kubernetes + Alias modsec_nginx_ingress_stdout + Match cp-ingress-modsec-stdout.* + Kube_Tag_Prefix cp-ingress-modsec-stdout.var.log.containers. + Kube_URL https://kubernetes.default.svc:443 + Kube_CA_File /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + Kube_Token_File /var/run/secrets/kubernetes.io/serviceaccount/token + K8S-Logging.Parser On + K8S-Logging.Exclude On + Keep_Log On + Merge_Log On + Merge_Log_Key log_processed + Buffer_Size 1MB + [FILTER] Name lua Match cp-ingress-modsec-stdout.*