debugd: document AWS IAM needed for log collection

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
This commit is contained in:
Paul Meyer 2022-12-13 11:03:41 +01:00
parent e5e5d8eaae
commit acecfc4033

View File

@ -58,6 +58,8 @@ You can enable the logcollection of debugd to send logs to Opensearch.
On Azure, ensure your user assigned identity has the `Key Vault Secrets User` role assigned on the key vault `opensearch-creds`.
On AWS, attach the `SecretManagerE2E` policy to your control-plane and worker node role.
When deploying with cdbg, enable by setting the `logcollect=true` and your name `logcollect.admin=yourname`.
```shell-session