add logwatch

terraform-modules · Jun 7, 2023 · 2e6d772 · 2e6d772
1 parent 5d323f0
commit 2e6d772
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 0 deletions.
diff --git a/examples/full-cluster-tf-upgrade/1.22/main.tf b/examples/full-cluster-tf-upgrade/1.22/main.tf
@@ -48,6 +48,20 @@ locals {
 
 }
 
+# The log group name format is /aws/eks/<cluster-name>/cluster
+# Reference: https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.html
+resource "aws_cloudwatch_log_group" "eks_cluster" {
+  name              = format("/aws/eks/%v/cluster", var.cluster_name)
+  retention_in_days = 180
+
+  tags = merge(
+    local.base_tags,
+    local.common_tags,
+    var.tags,
+    var.application_tags,
+  )
+}
+
 # we changed endpoint_public_access to false by default. This is so we can reach the EKS API through private IPs
 # from on-prem and from the cloud.  Otherwise, another account outside of where this is created will be unable to 
 # access teh API. This also requires a SG change in securitygroup.tf

diff --git a/examples/full-cluster-tf-upgrade/1.23/main.tf b/examples/full-cluster-tf-upgrade/1.23/main.tf
@@ -48,6 +48,20 @@ locals {
 
 }
 
+# The log group name format is /aws/eks/<cluster-name>/cluster
+# Reference: https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.html
+resource "aws_cloudwatch_log_group" "eks_cluster" {
+  name              = format("/aws/eks/%v/cluster", var.cluster_name)
+  retention_in_days = 180
+
+  tags = merge(
+    local.base_tags,
+    local.common_tags,
+    var.tags,
+    var.application_tags,
+  )
+}
+
 # we changed endpoint_public_access to false by default. This is so we can reach the EKS API through private IPs
 # from on-prem and from the cloud.  Otherwise, another account outside of where this is created will be unable to 
 # access teh API. This also requires a SG change in securitygroup.tf