ACK One collects Fleet control plane component and audit logs and delivers them to Simple Log Service (SLS) Log projects in your account. This topic describes how to enable log collection and view the logs.
Prerequisites
-
Sufficient SLS Logstore quota (default: 50 per account). To increase, submit a ticket
How log collection works
Control plane component logs help you operate clusters more securely and effectively. When enabled, ACK One collects logs from four control plane components and delivers them to new SLS projects on apay-as-you-go basis.
The four components and their Logstores:
| Component | Logstore | Description |
|---|---|---|
| kube-apiserver | apiserver |
Exposes the Kubernetes API. See kube-apiserver. |
| kube-controller-manager | kcm |
Manages core Kubernetes control loops. See kube-controller-manager. |
| application-controller | application-controller |
Handles application distribution in ACK One. |
| cluster-operator | cluster-operator |
Manages cluster association and disassociation with Fleet instances. |
Constraints:
-
Control plane component logs and audit logs are always enabled and disabled together.
-
Logs are delivered to new SLS projects only, not existing ones.
Enable log collection
Enable Collection of Operation Logs and Auditing Logs is on by default during Fleet instance creation. For existing instances, enable it manually.
Enable during Fleet instance creation
Turn on Enable Collection of Operation Logs and Auditing Logs when you enable Fleet management.
Enable for an existing Fleet instance
-
Log on to the ACK One console. In the left-side navigation pane, choose Fleet > Fleet Observability > Fleet Log Center.
-
On the Log Center page, click the Audit Logs tab, then click Enable.
To disable, click Disable Audit Logs & Control Plane Logs.
View logs
After enabling, access logs from the SLS console or ACK One console.
View logs in the SLS console
-
Log on to the Simple Log Service console.
-
In the Projects section, click the Fleet instance's project.
-
On the Log Storage page, select a Logstore from the Logstores list. Each component has a dedicated Logstore listed in How log collection works. See What is Simple Log Service?.
View logs in the ACK One console
-
Log on to the ACK One console. In the left-side navigation pane, choose Fleet > Fleet Observability > Fleet Log Center.
-
On the Log Center page, click the Audit Logs or Logs of Control Plane Components tab.
For multiple Fleet instances, select the target on the Fleet Information page first.
Troubleshooting
After clicking the Audit Logs or Logs of Control Plane Components tab, I see an "invalid endpoint" error.
Your account exceeded the SLS project quota:
-
Delete unused SLS projects to free up quota.
-
Submit a ticket to increase the quota.
After deleting the SLS project used for log collection, logs are no longer collected.
The system does not recreate SLS projects or Logstores after deletion. To re-enable, toggle Enable Collection of Operation Logs and Auditing Logs off and on.