Update Diagnostic Setting defaults for Kubernetes Cluster

modules/kubernetes-cluster/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 2.0
+* Added `log_categories` and `metric_categories` variables to enable configuration of Diagnostic Settings.
+* Changed default log categories.
+
 ## 1.2
 * Added support for using an internal load balancer by granting the cluster managed identity the `Reader` and `Network Contributor` roles on the virtual network.
 

modules/kubernetes-cluster/VERSION

@@ -1 +1 @@
-1.2
+2.0

modules/kubernetes-cluster/src/main.tf

@@ -70,36 +70,20 @@ resource "azurerm_monitor_diagnostic_setting" "main" {
   target_resource_id         = azurerm_kubernetes_cluster.main.id
   log_analytics_workspace_id = var.log_analytics_workspace_id
 
-  enabled_log {
-    category = "kube-apiserver"
-  }
-
-  enabled_log {
-    category = "kube-audit"
-  }
-
-  enabled_log {
-    category = "kube-audit-admin"
-  }
-
-  enabled_log {
-    category = "kube-controller-manager"
-  }
-
-  enabled_log {
-    category = "kube-scheduler"
-  }
+  dynamic "enabled_log" {
+    for_each = var.log_categories
 
-  enabled_log {
-    category = "cluster-autoscaler"
+    content {
+      category = enabled_log.value
+    }
   }
 
-  enabled_log {
-    category = "cloud-controller-manager"
-  }
+  dynamic "metric" {
+    for_each = var.metric_categories
 
-  metric {
-    category = "AllMetrics"
+    content {
+      category = metric.value
+    }
   }
 }
 

modules/kubernetes-cluster/src/variables.tf

@@ -33,6 +33,21 @@ variable "log_analytics_workspace_id" {
   type = string
 }
 
+# https://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-logs/microsoft-containerservice-managedclusters-logs
+variable "log_categories" {
+  type = list(string)
+  default = [
+    "kube-scheduler"
+  ]
+}
+
+variable "metric_categories" {
+  type = list(string)
+  default = [
+    "AllMetrics"
+  ]
+}
+
 variable "network_plugin" {
   type    = string
   default = "kubenet"