AWS eks documentation change
Summary
Added new community add-ons list and Fluent Bit documentation with IAM permission guidance
Security assessment
Adds documentation for Fluent Bit including IAM permission considerations, which relates to security best practices but does not address a specific vulnerability.
Diff
diff --git a/eks/latest/userguide/community-addons.md b/eks/latest/userguide/community-addons.md index 7765b5a5a..82ad8e7ca 100644 --- a//eks/latest/userguide/community-addons.md +++ b//eks/latest/userguide/community-addons.md @@ -1 +1 @@ -[](/pdfs/eks/latest/userguide/eks-ug.pdf#community-addons "Open PDF")[](https://github.com/awsdocs/amazon-eks-user-guide/tree/mainline/latest/ug/workloads/community-addons.adoc "Edit this page on GitHub") +[](/pdfs/eks/latest/userguide/eks-ug.pdf#community-addons "Open PDF")[](https://github.com/awsdocs/amazon-eks-user-guide/tree/mainline/latest/ug/community-addons.xml "Edit this page on GitHub") @@ -67,0 +68,15 @@ The following community add-ons are available from Amazon EKS. + * Kubernetes Metrics Server + + * kube-state-metrics + + * Prometheus Node Exporter + + * Cert Manager + + * External DNS + + * Fluent Bit + + + + @@ -133 +148 @@ Documentation | [GitHub Readme](https://github.com/kubernetes-sigs/external-dns -Service account name | external-dns +Service account name | `external-dns` @@ -136,0 +152,15 @@ Custom IAM permissions | None +### Fluent Bit + +Fluent Bit is a lightweight and high-performance log processor and forwarder. It allows you to collect data/logs from different sources, unify them, and send them to multiple destinations including Amazon CloudWatch Logs, Amazon S3, and Amazon Kinesis Data Firehose. Fluent Bit is designed with performance and resource efficiency in mind, making it ideal for Kubernetes environments. + +This add-on does not require IAM permissions in the default configuration. However, you may need to grant this add-on IAM permissions if you configure an AWS output location. For more information, see [Use Pod Identities to assign an IAM role to an Amazon EKS add-on](./update-addon-role.html). + +Property | Value +---|--- +Add-on name | `fluent-bit` +Namespace | `fluent-bit` +Documentation | [Fluent Bit Documentation](https://docs.fluentbit.io/manual/) +Service account name | `fluent-bit` +Managed IAM policy | None +Custom IAM permissions | None +