Send docker logs to fluentd over tls using the fluentd driver.

[nitrogene]

I managed to send logs from a container running a fluentbit client to a container running an instance of fluentd via tls.

Here is the relevant part of the fluentbit client configuration file:

[OUTPUT]
    Name forward
    Match *
    Host some-fluentd
    Port 24224
    tls On
    tls.verify On
    tls.ca_file /run/secrets/ca_certificate
    tls.crt_file /run/secrets/client_certificate
    tls.key_file /run/secrets/private_client_key
    tls.key_passwd ${TLS_PRIVATE_KEY_PASSPHRASE}
    Shared_Key  ${SHARED_KEY}

And for the fluentd configuration file:

<source>
  @type  forward
  port  24224
  <security>
    self_hostname fluentd
    shared_key "#{ENV["SHARED_KEY"]}"
  </security>
  <transport tls>
    version TLSv1_2
    ca_path                /run/secrets/ca_certificate
    cert_path              /run/secrets/server_certificate
    private_key_path       /run/secrets/private_server_key
    private_key_passphrase "#{ENV["TLS_PRIVATE_KEY_PASSPHRASE"]}"
    client_cert_auth       true
  </transport>
</source>

The fluentd instance can successfully send the logs produced by the fluentbit client to a graylog server. But I can't see anymore the logs sent by docker (using fluentd driver) to the fluentd container. For information, here's an extract of my docker-compose file:

version: '3'
services:
    # MongoDB: https://hub.docker.com/_/mongo/
    mongo:
      image: mongo:4.4.12
      container_name: some-mongo
      hostname: some-mongo
      volumes:
        - mongo-storage:/data/db:rw
      networks:
        - graylog
      restart: unless-stopped
      depends_on:
        - fluentd
      logging:
        driver: fluentd
        options:
          fluentd-address: localhost:24224
          tag: "docker.{{.Name}}"

Shouldn't I configure the logging driver to dial via fluentd container via tls ?How ?

Regards,

Jean-Pierre

[fujimotos]

Transferred from Fluentd discussion forum.