Oracle Cloud Infrastructure's Kubernetes support

[pphu]

OCI Container Engine for Kubernetes (OKE) outputs logs to the user data mount point in /u01. The fix is to just mount /u01 to give the agent access to the logs. See #107 for the fix

[PeterMerkert]

I am running also into the problem that the setup with logDNA works out of the box, but I cannot see any logging output other then "kubernetes administration" output. An excerpts:

Sep 12 14:36:05 oke-c3damzsgi4g-n2wiobzmzrg-sl7kqdlnxfa-0 messages I0912 11:36:05.088108   16238 plugins.go:563] Loaded volume plugin "flexvolume-oracle/oci"
Sep 12 14:36:05 oke-c3damzsgi4g-n2wiobzmzrg-sl7kqdlnxfa-0 messages I0912 11:36:05.100639   16238 plugins.go:563] Loaded volume plugin "flexvolume-oracle/oci"
Sep 12 14:36:05 oke-c3damzsgi4g-n2wiobzmzrg-sl7kqdlnxfa-0 messages I0912 11:36:05.122023   16238 plugins.go:563] Loaded volume plugin "flexvolume-oracle/oci"
Sep 12 14:36:05 oke-c3damzsgi4g-n2wiobzmzrg-sl7kqdlnxfa-0 messages I0912 11:36:05.134166   16238 plugins.go:563] Loaded volume plugin "flexvolume-oracle/oci"
Sep 12 14:36:05 oke-c3damzsgi4g-n2wiobzmzrg-sl7kqdlnxfa-0 audit.log type=NETFILTER_CFG msg=audit(1568288165.978:374276): table=nat family=2 entries=180
Sep 12 14:36:05 oke-c3damzsgi4g-n2wiobzmzrg-sl7kqdlnxfa-0 audit.log type=SYSCALL msg=audit(1568288165.978:374276): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56238d833840 items=0 ppid=17005 pid=30512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" subj=system_u:system_r:container_runtime_t:s0 key=(null)
Sep 12 14:36:05 oke-c3damzsgi4g-n2wiobzmzrg-sl7kqdlnxfa-0 audit.log type=PROCTITLE msg=audit(1568288165.978:374276): proctitle=2F7362696E2F69707461626C6573002D74006E6174002D4300504F5354524F5554494E47002D730031302E3234342E302E302F31360000002D64003232342E302E302E302F34002D6A004D415351554552414445002D2D77616974
Sep 12 14:36:05 oke-c3damzsgi4g-n2wiobzmzrg-sgcihzw5ciq-0 agent.log INFO INFO - Sent metrics with opc-request-id: /C2F5035BA7DA6AF27AD6D4F2F04E2406/E492CE1A3858B108E739764E953FE7F4; status: 200; took: 0.2s
Sep 12 14:36:05 oke-c3damzsgi4g-n2wiobzmzrg-ss3h3lewoqa-0 audit.log type=NETFILTER_CFG msg=audit(1568288165.394:374258): table=filter family=2 entries=42

However, I tried the v2 DeamonSet and that seems to work in the beginning, I can see some outputs from my pods, but then it prints out the following warning in each pod of logdna-agent:

Sep 12 14:52:06 logdna-agent-p5rxg logdna-agent WARN  WARN  logdna_agent::modules::http   > failed sending http request: Error(Hyper(Error(IncompleteMessage)), "https://logs.logdna.com/logs/agent?hostname=oke-c3damzsgi4g-n2wiobzmzrg-ss3h3lewoqa-0%0A&mac=&ip=&now=1568289126063&tags=agent-v2-ga%2Cagent-v2") 

And there is no output thereafter from my pods again. There is still administration output like the one mentioned above.

[PeterMerkert]

Yes, so adding actually your change to the logdna-agent-v2.yaml does work for me and now finally transmits the logs from OKE. Thanks for your PR :-)

[luisuimi]

 21 08:16:15 LogDNASample LogDNA Sample App INFO type=CRYPTO_KEY_USER msg=audit(1539953067.158:1156938): pid=14611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14612 suid=74 rport=40868 laddr=10.11.5.50 lport=22 exe="/usr/sbin/sshd" hostname=? addr=109.104.88.43 terminal=? res=success'