[Wishlist] Define log rotation for NSG log, if path is specified
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Neutron Open vSwitch Charm |
New
|
Undecided
|
Unassigned |
Bug Description
In a use case where we want to externalize the network security group logging from syslog or the neutron-
For instance, if I configure neutron-openvswitch or neutron-gateway with:
juju config neutron-openvswitch security-
It would help ensure reliability if a file such as /etc/logrotate.
As an example:
# Configuration file maintained by Juju. Local changes may be overwritten
/var/log/nsg.log {
daily
missingok
compress
delaycompress
notifempty
copytruncate
rotate 60
}
To clarify the point of externalizing the log, sometimes we may want a security team with unprivileged ssh access to the hypervisor to be able to read the log output, but /var/log/neutron and /var/log/syslog are not readable w/out privilege escalation.