Skip to content

Default persisted-logs to vendor-specific object store#241

Open
mhotan wants to merge 2 commits intodocs/fluentbit-logging-permissionsfrom
feat/persisted-logs-objectstore-defaults
Open

Default persisted-logs to vendor-specific object store#241
mhotan wants to merge 2 commits intodocs/fluentbit-logging-permissionsfrom
feat/persisted-logs-objectstore-defaults

Conversation

@mhotan
Copy link
Contributor

@mhotan mhotan commented Feb 19, 2026

Summary

  • Azure: Switch persistedLogs.sourceType from AzureLogAnalytics to ObjectStore. Fluentbit's azure_blob plugin writes logs to Azure Blob Storage under persisted-logs/ prefix in the metadata container. Old AzureLogAnalytics config preserved as commented alternative.
  • GCP selfhosted: Add explicit GCPStackdriver persisted logs config with project ID. Disable fluentbit DaemonSet since GKE's built-in logging agent collects container logs to Cloud Logging automatically.
  • Template: Make azure_blob auth conditional — auth_type and shared_key only rendered when storage.custom.stow.config.key is set, allowing future managed identity support without config changes.
  • AWS: No changes needed, already works with ObjectStore/S3.

Test plan

  • helm template with values.azure.yaml — verify fluentbit ConfigMap has azure_blob output and config-overrides shows sourceType: ObjectStore
  • helm template with values.gcp.selfhosted-intracluster.yaml — verify no fluentbit resources rendered and config-overrides shows sourceType: GCPStackdriver
  • helm template with values.aws.yaml — verify S3 output plugin unchanged (no regression)

🤖 Generated with Claude Code

mhotan and others added 2 commits February 18, 2026 22:15
- Azure: Switch from AzureLogAnalytics to ObjectStore with azure_blob
  plugin. Fluentbit writes logs to Azure Blob Storage in the metadata
  container under the persisted-logs/ prefix.
- GCP selfhosted: Add explicit GCPStackdriver config so GKE's built-in
  logging agent feeds Cloud Logging. Disable fluentbit DaemonSet since
  it's not needed.
- Template: Make azure_blob auth conditional—only emit auth_type/shared_key
  when a storage account key is provided.

AWS remains unchanged (already uses ObjectStore with S3).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Azure uses AKS Container Insights to collect container logs to
Azure Log Analytics natively. Disable the fluentbit DaemonSet
since it's unnecessary — the AKS monitoring addon handles log
collection.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant