This topic describes how VMware Tanzu Kubernetes Grid Integrated Edition (TKGI) implements sinks for collecting logs and metrics from Kubernetes worker nodes and workloads.

For step-by-step instructions on creating sinks in TKGI, see Creating and Managing Sink Resources.

Overview

A sink collects logs or metrics about Kubernetes worker nodes in a TKGI deployment and workloads that are running on them.

For more information, see:

Sink Types

You can create two types of sinks:

  • Log sinks
  • Metric sinks

See the table below for information about these sink types.

Sink Type Sink Resource Description
Log sink ClusterLogSink

Forwards logs from a cluster to a log destination. Logs are transported using one of the following:

  • The Syslog Protocol defined in RFC 5424
  • WebHook
  • Fluent Bit output plugins
Log sink LogSink

Forwards logs from a namespaced subset within a ClusterLogSink resource to a log destination. Logs are transported using one of the following:

  • The Syslog Protocol defined in RFC 5424
  • WebHook
  • Fluent Bit output plugins
Metric sink ClusterMetricSink Collects and writes metrics from a cluster to specified outputs using input and output plugins.
Metric sink MetricSink Collects and writes metrics from a namespace within a cluster to specified outputs using input and output plugins.

Sink Architecture

TKGI-provisioned Kubernetes clusters include an observability manager that manages log sink and metric sink configurations within a cluster.

The following diagram details TKGI cluster observability architecture:

Observability Manager architecture in TKGI

In the Tanzu Kubernetes Grid Integrated Edition tile > In-Cluster Monitoring:

  • Enable Metric Sink Resources enables metric sinks.
  • Enable Log Sink Resources enables log sinks.
  • Enable node exporter on workers forwards additional infrastructure metrics.

Setting these checkboxes in Ops Manager directs how BOSH configures the observability manager.

For more information about enabling log sinks and metrics sinks, see (Optional) In-Cluster Monitoring in the Installing topic for your IaaS.

Log Sink Architecture

The TKGI log sink aggregates workload logs and forwards them to a common log destination.

The following diagram details TKGI log sink architecture:

Log sink architecture in TKGI

Logs are monitored and aggregated by a Fluent Bit DaemonSet running as a pod on each worker node.

An event-controller collects Kubernetes API events and sends them to a second Fluent Bit daemon pod for aggregation.

All aggregated log entries are marshaled to a common log destination.

Note: When sinks are added or removed, all of the Fluent Bit pods are refreshed with new sink information.

Metric Sink Architecture

The TKGI metric sink aggregates workload metrics and forwards them to a common metrics destination.

The following diagram details TKGI metric sink architecture:

Metric Sink architecture in TKGI

A metric sink collects and writes metrics from a cluster to specified outputs using input and output plugins.

Workload metrics are monitored by a set of third-party plugins. The plugins forward the metrics to a Telegraf service pod.

A pair of kubelets monitors Kubernetes and forwards Kubernetes metrics to a pair of Telegraf service pods.

If Node Exporter is enabled on the worker nodes in the Tanzu Kubernetes Grid Integrated Edition tile, a Node Exporter DaemonSet is included in all clusters. For more information about Node Exporter metrics, see the Node Exporter repository in GitHub.

To define the collected unstructured metrics, a metric-controller monitors Kubernetes for custom resource definitions and forwards those definitions to the Telegraf services.

The Telegraf services collect, process, and aggregate gathered metrics. All aggregated metrics are marshaled to an additional plugin for forwarding to a third-party application.

Note: When sinks are added or removed, all of the Telegraf pods are refreshed with new sink information.

check-circle-line exclamation-circle-line close-line
Scroll to top icon