EKS logging

• https://docs.aws.amazon.com/prescriptive-guidance/latest/implementing-logging-monitoring-cloudwatch/kubernetes-eks-logging.html
• Control plane: https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.html

EKS control plane logging:

• API server
• Audit: audit.k8s.io/v1
• Authenticator
• Controller Manager: cloud-controller-manager
• Scheduler

Commands

• aws eks describe-cluster --name YOUR_CLUSTER --query 'cluster.logging.clusterLogging'

• aws logs describe-log-groups | grep logGroupName | grep "/aws/eks/"
• aws logs tail --follow /aws/eks/you-cluster-name/cluster | egrep ("kube-apiserver-audit | kube-apiserver | authenticator | kube-controller-manager | cloud-controller-manager")

Activities

• Read https://docs.aws.amazon.com/prescriptive-guidance/latest/implementing-logging-monitoring-cloudwatch/kubernetes-eks-logging.html

Related

• Kubernetes control plane
• enabled_cluster_log_types
• Unable to schedule pod
• dispatcher.go

See also

• EKS logging, EKS control plane logging, httplog.go
• cluster_enabled_log_types ([ api, audit, authenticator, controllerManager, scheduler ]), cluster.logging.clusterLogging
• Kubernetes logging: Kubernetes log files, kubectl logs, EKS logging, Rancher logging
• EKS security, endpoint access control, Grant access, AWS Config Security Best Practices for EKS, List of AWS Config Managed Rules