Disabling Fluent Bit

Fluent Bit is the log collection engine used for both internal log aggregation (Loki) and audit log forwarding to SIEM tools.

Warning

Disabling Fluent Bit stops all log collection, including SIEM forwarding. Only disable Fluent Bit if you are not using Loki and you have no SIEM integration configured.

1. Update bootstrap configuration

   [artesca-os@bootstrap ~]$
   

   sudo salt-call --local state.single file.serialize \
     /etc/metalk8s/bootstrap.yaml \
     dataset="{ \
       'addons': { \
         'fluent-bit': { \
           'enabled': False \
         }, \
       } \
     }" \
     serializer=yaml merge_if_exists=True show_changes=True
   

2. Export the MetalK8s version you are using as an environment variable:

   [artesca-os@bootstrap ~]$
   

   export MK8SVERSION=`sudo kubectl \
       --kubeconfig=/etc/kubernetes/admin.conf \
       get cm -n kube-system artesca-version \
       -o jsonpath="{.data.metalk8s}"`
   

3. Apply the changes

   [artesca-os@bootstrap ~]$
   

   sudo kubectl exec --kubeconfig /etc/kubernetes/admin.conf \
       $(sudo kubectl --kubeconfig /etc/kubernetes/admin.conf get pod -n kube-system -l app=salt-master -o name) \
       -n kube-system -c salt-master -- \
       salt-run state.sls metalk8s.addons.logging.deployed \
       saltenv=metalk8s-$MK8SVERSION