{{- if (.Capabilities.APIVersions.Has "logging.banzaicloud.io/v1beta1/Flow") }}
---
apiVersion: logging.banzaicloud.io/v1beta1
kind: Flow
metadata:
  name: klog
  namespace: kube-system
spec:
  match:
    - select:
        labels:
          k8s-app: "konnectivity-agent"
    - select:
        labels:
          k8s-app: "kube-proxy"
    - select:
        labels:
          app: "snapshot-validation-webhook"
  filters:
    - tag_normaliser: {}
    - parser:
        hash_value_field: "klog"
        reserve_data: true
        remove_key_name_field: true
        parse:
          type: "multi_format"
          patterns:
            - format: "regexp"
              expression: '(?<log_level>[A-Z])(?<month>\d{2})(?<day>\d{2})\s+(?<time>\d{2}:\d{2}:\d{2}(|\.\d+))\s+(?<threadid>\d+)\s+(?<file>[^ ]*):(?<line>\d+)\]\s("(?<msg>([^"\\]*(?:\\.[^"\\]*)*))"(|\s+(?<kv>.*))|(?<greedy_msg>.*))$'
              types: "month:integer,day:integer,threadid:integer"
            - format: "none"
    - record_transformer:
        enable_ruby: true
        records:
          - timestamp: '${time.strftime("%Y")}-${ record["klog"]["month"] }-${ record["klog"]["day"] }T${ record["klog"]["time"] }Z'
            message: '${ !(record["klog"]["greedy_msg"].nil?) ? record["klog"]["greedy_msg"] : record["klog"]["msg"] }'
            log.level: '${ record["klog"]["log_level"].gsub("I", "info").gsub("W", "warn").gsub("E", "error").gsub("F", "fatal") }'
            klog_kv: '${ !(record["klog"]["kv"].nil?) ? record["klog"]["kv"] : "" }'
        remove_keys: "$['klog']['month'],$['klog']['day'],$['klog']['time'],$['klog']['log_level'],$['klog']['msg'],$['klog']['greedy_msg'],$['klog']['kv']"
    - parser:
        key_name: "klog_kv"
        hash_value_field: "klog.fields"
        reserve_data: true
        remove_key_name_field: true
        parse:
          type: "multi_format"
          patterns:
            - format: "logfmt"
            - format: "none"
  globalOutputRefs:
    - "default"
{{- end }}