cloud-platform-terraform-logging
August 25, 2026 ยท View on GitHub
Terraform module that deploys cloud-platform logging solution. It includes components like: fluent-bit, eventrouter etc.
Requirements
| Name | Version |
|---|---|
| terraform | >= 1.2.5 |
| helm | >=2.6.0 |
| kubectl | 2.1.3 |
| kubernetes | >=2.12.1 |
Providers
| Name | Version |
|---|---|
| aws | n/a |
| helm | >=2.6.0 |
| kubectl | 2.1.3 |
| kubernetes | >=2.12.1 |
Modules
| Name | Source | Version |
|---|---|---|
| iam_assumable_role | terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks | 5.59.0 |
| s3_bucket_application_logs | github.com/ministryofjustice/cloud-platform-terraform-s3-bucket | 5.3.1 |
Resources
| Name | Type |
|---|---|
| helm_release.fluent_bit | resource |
| kubectl_manifest.prometheus_rule_alert | resource |
| kubernetes_cluster_role.this | resource |
| kubernetes_cluster_role_binding.this | resource |
| kubernetes_limit_range.default | resource |
| kubernetes_namespace.logging | resource |
| kubernetes_network_policy.allow_prometheus_scraping | resource |
| kubernetes_network_policy.default | resource |
| kubernetes_resource_quota.namespace_quota | resource |
| kubernetes_secret.s3_bucket_application_logs | resource |
| kubernetes_service_account.this | resource |
| aws_caller_identity.current | data source |
| aws_eks_cluster.eks_cluster | data source |
| aws_partition.current | data source |
Inputs
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| application | Application name | string | "" | no |
| business_unit | Area of the MOJ responsible for the service | string | "" | no |
| elasticsearch_host | The elasticsearch host where logs are going to be shipped | any | n/a | yes |
| enable_fluent_bit | Enable or not fluent-bit Helm Chart - change the default to true once it is ready to use | bool | true | no |
| environment_name | Environment name | string | "" | no |
| infrastructure_support | The team responsible for managing the infrastructure. Should be of the form | string | "" | no |
| is_production | Whether this is used for production or not | string | "" | no |
| namespace | Namespace name | string | "logging" | no |
| opensearch_app_host | The opensearch host where user app logs are going to be shipped | any | n/a | yes |
| team_name | Team name | string | "" | no |
Outputs
| Name | Description |
|---|---|
| fluent_bit_irsa_arn | IAM Role ARN for Fluent Bit IRSA |
| s3_bucket_application_logs_arn | S3 bucket ARN for application logs |
| s3_bucket_application_logs_name | S3 bucket name for application logs |
Reference: https://github.com/fluent/helm-charts/tree/main/charts/fluent-bit