From 8d96c469947aa9d40de45075db21010ed2ba7f98 Mon Sep 17 00:00:00 2001 From: IvanHunters Date: Thu, 29 Oct 2026 17:08:49 +0300 Subject: [PATCH] fix(monitoring-agents): isolate merged log payload under log_processed Fluent Bit's kubernetes filter runs with Merge_Log On but without Merge_Log_Key, so a parsed JSON log line is merged into the record root. An application log line can thereby forge the service fields that later pipeline stages rely on for routing and tenant isolation (kubernetes_namespace_name, kubernetes.labels, tenant, cluster, log_source). Setting Merge_Log_Key log_processed nests the parsed payload under a dedicated key so application content can no longer override top-level service fields. Applies to both the platform (system/monitoring-agents) and guest (apps/kubernetes) Fluent Bit configurations. Assisted-by: LLM Signed-off-by: IvanHunters --- .../kubernetes/templates/helmreleases/monitoring-agents.yaml | 1 + packages/system/monitoring-agents/values.yaml | 1 + 2 files changed, 2 insertions(+) diff --git a/packages/apps/kubernetes/templates/helmreleases/monitoring-agents.yaml b/packages/apps/kubernetes/templates/helmreleases/monitoring-agents.yaml index 2ec0bc3ca..9e3fd3ee5 100644 --- a/packages/apps/kubernetes/templates/helmreleases/monitoring-agents.yaml +++ b/packages/apps/kubernetes/templates/helmreleases/monitoring-agents.yaml @@ -81,6 +81,7 @@ spec: Name kubernetes Match kube.* Merge_Log On + Merge_Log_Key log_processed Keep_Log On K8S-Logging.Parser On K8S-Logging.Exclude On diff --git a/packages/system/monitoring-agents/values.yaml b/packages/system/monitoring-agents/values.yaml index 78a6ec9fd..a52e9c213 100644 --- a/packages/system/monitoring-agents/values.yaml +++ b/packages/system/monitoring-agents/values.yaml @@ -450,6 +450,7 @@ fluent-bit: Name kubernetes Match kube.* Merge_Log On + Merge_Log_Key log_processed Keep_Log On K8S-Logging.Parser On K8S-Logging.Exclude On