elastisys / compliantkubernetes-apps

Elastisys Compliant Kubernetes is an open source, Certified Kubernetes distribution designed according to the ISO27001 controls: providing you with security tooling and observability from day one.
https://elastisys.io/compliantkubernetes/
Apache License 2.0
46 stars 8 forks source link

Test and verify that Fluentd and log-manager behaviour is consistent on Azure #2353

Open aarnq opened 4 days ago

aarnq commented 4 days ago

Description

The Azure integration for audit and sc-logs has been under a few iterations and before promoting the feature further we would like to do proper testing to ensure that it works as expected.

So the goal is to first ensure that its behaviour is correct, that we actually get audit and sc-logs from Fluentd, second ensure that log-manager compaction can compact new logs into per day chunks, and third ensure that log-manager retention can remove old logs that is outside of the retention window.

Additional context

Refer to the behaviour of the S3 implementation as that has been proven to work and runs at scale.

Definition of done