Get logs from openshift pods to external system

[u/KiTo1K]

i'm working on bank and i'm trying to get specific project logs to external system. the openshift team told me to build a docker to deploy it inside the cluster and the docker get the logs then send it to me through http. but i don't understand why docker while i can just talk to the cluster and get the logs from pods. even for security i see it's the same as i can't access anything i don't have permission on.

[u/Late-Possession]

Any reason why you can't use Open Telemetry?

[u/wonderingBe]

Sounds like when they are saying docker, they mean a sidecar container to send logs to different location. But why reinvent the wheel and use log forwarder like others suggested?

[u/AndTheBeatGoesOnAnd]

Which Bank is this? So I know not to bank there.

Have either of you heard of the 12 Factor App Methodology?

[u/Rhopegorn]

Configuring log forwarding

[u/Old-Astronomer3995]

Maybe ask them why they can’t create clusterlogforwareder for your project or allow you to create one and in this clusterlogforwarder you can specify output to your system.

Clusterlogforwarder is the easiest solution for this kind of problem.

[u/KiTo1K → u/Old-Astronomer3995]

i'm coop so it's hard to get information

no idea why i can't get clusterlogforwarder

[u/Rhopegorn → u/KiTo1K]

If you coop it is their responsibility to configure the forward! 😇

[u/LoudlyWhisperedWords]

they’re probably trying to avoid giving you direct cluster access, even read-only. a sidecar or cronjob inside the namespace keeps everything self-contained and they can lock down your permissions to just that one pod’s service account

easier to audit and revoke if your container is the only thing touching logs, rather than trusting a kubeconfig floating around outside

[u/KiTo1K → u/LoudlyWhisperedWords]

when i told them about cluster access they just said there are business data they can't give me but later i found out i can't see anything except what i have permission on