You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pipeline/filters/kubernetes.md
+8-5Lines changed: 8 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -76,7 +76,7 @@ The plugin supports the following configuration parameters:
76
76
|`use_journal`| When enabled, the filter reads logs in `Journald` format. |`Off`|
77
77
|`use_kubelet`| Optional feature flag to get metadata information from Kubelet instead of calling Kube Server API to enhance the log. This could mitigate the [Kube API heavy traffic issue for large cluster](kubernetes.md#optional-feature-using-kubelet-to-get-metadata). If used when any [Kubernetes Namespace Meta](#kubernetes-namespace-meta) fields are enabled, Kubelet will be used to fetch pod data, but namespace meta will still be fetched using the `kube_url` settings.|`Off`|
78
78
|`use_pod_association`| Deprecated alias for `aws_use_pod_association`. Kept for backward compatibility with AWS Observability users. |`Off`|
79
-
|`use_tag_for_meta`| When enabled, Kubernetes metadata (for example, `pod_name`, `container_name`, and `namespace_name`) will be extracted from the tag itself. Connection to Kubernetes API Server won't get established and API calls for metadata won't be made. See [Workflow of Tail + Kubernetes Filter](#workflow-of-tail-and-kubernetes-filter) and [Custom tag For enhanced filtering](#custom-tags-for-enhanced-filtering) to better understand metadata extraction from tags. |`Off`|
79
+
|`use_tag_for_meta`| When enabled, Kubernetes metadata (for example, `pod_name`, `container_name`, and `namespace_name`) will be extracted from the tag itself. Connection to Kubernetes API Server won't get established and API calls for metadata won't be made. See [Workflow of Tail and Kubernetes Filter](#workflow-of-tail-and-kubernetes-filter) and [Custom tag For enhanced filtering](#custom-tags-for-enhanced-filtering) to better understand metadata extraction from tags. |`Off`|
80
80
81
81
### AWS pod association
82
82
@@ -572,10 +572,13 @@ When `aws_use_pod_association` is enabled, the Kubernetes filter automatically d
572
572
573
573
### How detection works
574
574
575
-
1. Fluent Bit reads the service account token from `/var/run/secrets/kubernetes.io/serviceaccount/token`
576
-
2. The JSON Web Token (JWT) payload is decoded to extract the `iss` (issuer) field
577
-
3. If the issuer contains `oidc.eks.` (matching the EKS OpenID Connect (OIDC) URL pattern `https://oidc.eks.{region}.amazonaws.com/id/{cluster-id}`), the platform is set to `eks`
578
-
4. Otherwise, the platform is set to `k8s` for native Kubernetes
575
+
1. Fluent Bit reads the service account token from `/var/run/secrets/kubernetes.io/serviceaccount/token`.
576
+
577
+
1. The JSON Web Token (JWT) payload is decoded to extract the `iss` (issuer) field.
578
+
579
+
1. If the issuer contains `oidc.eks.` (matching the EKS OpenID Connect (OIDC) URL pattern `https://oidc.eks.{region}.amazonaws.com/id/{cluster-id}`), the platform is set to `eks`.
580
+
581
+
1. Otherwise, the platform is set to `k8s` for native Kubernetes.
0 commit comments