4 Getting inputs from Containers and Kubernetes

 

This chapter covers

  • Running different ways we can capture events from containerized apps.
  • Investigating how we can observe containers and Kubernetes itself.
  • Discussing deployment patterns and tools to power our monitoring.
  • Applying techniques for adding container or Kubernetes context to events.

In the last chapter, we looked at a variety of input plugins that can be used in cloud-native and traditional deployments. These inputs have provided insights into applications and the environments in which they are deployed, whether bare metal, virtual machine, or container. We haven’t considered how the software and infrastructure in which we deploy containers and orchestrate them with Kubernetes can be a source of signals (logs, metrics, and traces).

Figure 4.1 shows our architecture diagram again, highlighting the parts of Fluent Bit relevant to this chapter. We’re still on the top layer of our diagram, which reflects the importance of the ability to ingest events. Without that, Fluent Bit’s value becomes rather limited.

Figure 4.1 Logical architecture of Fluent Bit, with this chapter's focus highlighted.

4.1 Fluent Bit capturing Docker Events and Metrics

 
 
 

4.1.1 Docker Events

 
 

4.1.2 Docker Metrics

 
 
 

4.2 Using Podman as a Docker alternative

 
 
 

4.3 Other Containers

 
 
 
 

4.4 Container Log Drivers

 
 
 
 

4.5 Application direct to Fluent Bit

 
 

4.5.1 OpenTelemetry’s approach to containerized applications

 
 
 

4.5.2 Deploying for application direct logging

 
 
 

4.5.3 Enriching log events with Pod context by injection

 
 
 
 

4.5.4 Enriching log events with Pod context by filter

 

4.6 Kubernetes and observability

 
 
 

4.6.1 Understanding Kubernetes' position on logging

 
 
 

4.6.2 Kubernetes auditing

 
 
 
 

4.6.3 Kubernetes events input

 
 
 
 

4.6.4 The many parts of the Kubernetes ecosystem

 
 
 
 

4.6.5 Container Images

 
 
 

4.6.6 Helm charts

 

4.7 Kubernetes Operator

 
 
 

4.7.1 Competing Operator option

 
 
 

4.8 Observations on Fluent Bit with Kubernetes

 
 
 

4.8.1 The next possible frontier of observability with Fluent Bit - eBPF

 
 
 

4.9 Summary

 
 
 
sitemap

Unable to load book!

The book could not be loaded.

(try again in a couple of minutes)

manning.com homepage
test yourself with a liveTest