namespace: fluent-operator apiVersion: kustomize.config.k8s.io/v1alpha1 kind: Component resources: # fb-config/ contains the ClusterFluentBitConfig resource. # The fluent operator uses this to construct the main fluent # bit configuration. - fb-config/ # gcpinfra/ contains an IAMPolicyMember resource which is needed # to give your cluster the right permissions to write to google # cloud logging -- roles/logging.logWriter. - gcpinfra/ # k8s-container/ contains fluent operator custom resources (input, # filter, output) responsible for k8s container logs. - k8s-container/ # k8s-node/ contains fluent operator custom resources (input, # filter, output) responsible for non-container logs, like # systemd and auditd. - k8s-node/ # lua-preprocess/ contains fluent operator lua scripts # to help preprocess logs before the lua-severity filter - lua-preprocess/ # parsers/ contains ClusterParser resources which are custom # parsers that can be used by any fluent bit input stream. - parsers/ # fluentbit.yaml contains the FluentBit custom resource. # This is what tells the fluent operator how it needs to # construct the fluent bit daemonset. i.e., what image to # use, env variables, volume mounts etc. - fluentbit.yaml # edge-siem.yaml contains the config map for SIEM configs # for edge owned components - edge-siem.yaml # rbac.yaml defines cluster permissions needed by fluent bit - rbac.yaml