Skip to content

Commit

Permalink
feat: Add enable-policy-event-logs flag to readme
Browse files Browse the repository at this point in the history
  • Loading branch information
mycrEEpy committed Sep 9, 2023
1 parent 9a08c59 commit 56ca9be
Showing 1 changed file with 12 additions and 0 deletions.
12 changes: 12 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,16 @@ Default: false

Set this flag to `true` to enable the Network Policy feature support.

#### `enable-policy-event-logs`

Type: Boolean

Default: false

Set this flag to `true` to enable the collection & logging of policy decision logs.

> Notice: Enabling this feature requires one CPU core per node.
#### `enable-cloudwatch-logs`

Type: Boolean
Expand All @@ -39,6 +49,8 @@ Default: false

Network Policy Agent provides an option to stream policy decision logs to Cloudwatch. For EKS clusters, the policy logs will be located under `/aws/eks/<cluster-name>/cluster/` and for self-managed K8S clusters, the logs will be placed under `/aws/k8s-cluster/cluster/`. By default, Network Policy Agent will log policy decision information for individual flows to a file on the local node (`/var/run/aws-routed-eni/network-policy-agent.log`).

This feature requires to also enable the `enable-policy-event-logs` flag.

This feature requires you to provide relevant Cloudwatch permissions to `aws-node` pod via the below policy.

```
Expand Down

0 comments on commit 56ca9be

Please sign in to comment.