cloud-platform-terraform-logging

August 25, 2026 ยท View on GitHub

Terraform module that deploys cloud-platform logging solution. It includes components like: fluent-bit, eventrouter etc.

Requirements

NameVersion
terraform>= 1.2.5
helm>=2.6.0
kubectl2.1.3
kubernetes>=2.12.1

Providers

NameVersion
awsn/a
helm>=2.6.0
kubectl2.1.3
kubernetes>=2.12.1

Modules

NameSourceVersion
iam_assumable_roleterraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks5.59.0
s3_bucket_application_logsgithub.com/ministryofjustice/cloud-platform-terraform-s3-bucket5.3.1

Resources

NameType
helm_release.fluent_bitresource
kubectl_manifest.prometheus_rule_alertresource
kubernetes_cluster_role.thisresource
kubernetes_cluster_role_binding.thisresource
kubernetes_limit_range.defaultresource
kubernetes_namespace.loggingresource
kubernetes_network_policy.allow_prometheus_scrapingresource
kubernetes_network_policy.defaultresource
kubernetes_resource_quota.namespace_quotaresource
kubernetes_secret.s3_bucket_application_logsresource
kubernetes_service_account.thisresource
aws_caller_identity.currentdata source
aws_eks_cluster.eks_clusterdata source
aws_partition.currentdata source

Inputs

NameDescriptionTypeDefaultRequired
applicationApplication namestring""no
business_unitArea of the MOJ responsible for the servicestring""no
elasticsearch_hostThe elasticsearch host where logs are going to be shippedanyn/ayes
enable_fluent_bitEnable or not fluent-bit Helm Chart - change the default to true once it is ready to usebooltrueno
environment_nameEnvironment namestring""no
infrastructure_supportThe team responsible for managing the infrastructure. Should be of the form ()string""no
is_productionWhether this is used for production or notstring""no
namespaceNamespace namestring"logging"no
opensearch_app_hostThe opensearch host where user app logs are going to be shippedanyn/ayes
team_nameTeam namestring""no

Outputs

NameDescription
fluent_bit_irsa_arnIAM Role ARN for Fluent Bit IRSA
s3_bucket_application_logs_arnS3 bucket ARN for application logs
s3_bucket_application_logs_nameS3 bucket name for application logs

Reference: https://github.com/fluent/helm-charts/tree/main/charts/fluent-bit