Skip to content

Extend azure monitor container insights with container network logs#718

Open
wanlonghenry wants to merge 5 commits intoAzure:mainfrom
wanlonghenry:main
Open

Extend azure monitor container insights with container network logs#718
wanlonghenry wants to merge 5 commits intoAzure:mainfrom
wanlonghenry:main

Conversation

@wanlonghenry
Copy link

@wanlonghenry wanlonghenry commented Dec 1, 2025

Describe your changes

Extend azure monitor container insights with container network logs

Issue number

#000

Checklist before requesting a review

  • The pr title can be used to describe what this pr did in CHANGELOG.md file
  • I have executed pre-commit on my machine
  • I have passed pr-check on my machine

Thanks for your cooperation!

| <a name="input_monitor_data_collection_rule_extensions_streams"></a> [monitor\_data\_collection\_rule\_extensions\_streams](#input\_monitor\_data\_collection\_rule\_extensions\_streams) | An array of container insights table streams. See documentation in DCR for a list of the valid streams and their corresponding table: https://learn.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-data-collection-configure?tabs=portal#stream-values-in-dcr | `list(any)` | <pre>[<br/> "Microsoft-ContainerLog",<br/> "Microsoft-ContainerLogV2",<br/> "Microsoft-KubeEvents",<br/> "Microsoft-KubePodInventory",<br/> "Microsoft-KubeNodeInventory",<br/> "Microsoft-KubePVInventory",<br/> "Microsoft-KubeServices",<br/> "Microsoft-KubeMonAgentEvents",<br/> "Microsoft-InsightsMetrics",<br/> "Microsoft-ContainerInventory",<br/> "Microsoft-ContainerNodeInventory",<br/> "Microsoft-Perf"<br/>]</pre> | no |
| <a name="input_monitor_metrics"></a> [monitor\_metrics](#input\_monitor\_metrics) | (Optional) Specifies a Prometheus add-on profile for the Kubernetes Cluster<br/>object({<br/> annotations\_allowed = "(Optional) Specifies a comma-separated list of Kubernetes annotation keys that will be used in the resource's labels metric."<br/> labels\_allowed = "(Optional) Specifies a Comma-separated list of additional Kubernetes label keys that will be used in the resource's labels metric."<br/>}) | <pre>object({<br/> annotations_allowed = optional(string)<br/> labels_allowed = optional(string)<br/> })</pre> | `null` | no |
| <a name="input_msi_auth_for_monitoring_enabled"></a> [msi\_auth\_for\_monitoring\_enabled](#input\_msi\_auth\_for\_monitoring\_enabled) | (Optional) Is managed identity authentication for monitoring enabled? | `bool` | `null` | no |
| <a name="input_retina_flow_logs_enabled"></a> [retina\_flow\_logs\_enabled](#input\_retina\_flow\_logs\_enabled) | Enable container network observability logs for OMS agent. This applies to Linux nodes in the cluster. | `bool` | `false` | no |

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should this just say "Enable container network logs for oms agent..." instead of "container network observability logs

variable "retina_flow_logs_enabled" {
type = bool
default = false
description = "(Optional) Enable container network observability logs for OMS agent."

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same comment as above

@lonegunmanb
Copy link
Member

Hi @wanlonghenry, thanks for the contribution!

I have a question regarding the retina_flow_logs_enabled argument you're adding to the oms_agent block. Could you share where this field is supported? Specifically:

  1. Is there a corresponding attribute in the AzureRM Provider for retina_flow_logs_enabled in the oms_agent block?
  2. Is there an Azure REST API specification that includes this field (e.g., in the ManagedClusterAddonProfile or related schema)?

I wasn't able to find this attribute in the current provider source code or the Azure API specs, so any references or documentation you could point us to would be very helpful. If this is a new feature that hasn't been added to the provider yet, it might need to be proposed as a feature request in hashicorp/terraform-provider-azurerm first.

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Development

Successfully merging this pull request may close these issues.

3 participants