Basic EFK stack for OpenShift using ClusterLogging and Elastic operators

elastic_fluentd_kibana_openshift_deployment.yaml

apiVersion: "logging.openshift.io/v1"
kind: "ClusterLogging"
metadata:
  name: "instance"
  namespace: "openshift-logging"
spec:
  managementState: "Managed"
  logStore:
    type: "elasticsearch"
    retentionPolicy: 
      application:
        maxAge: 2h
      infra:
        maxAge: 1h
      audit:
        maxAge: 1h
    elasticsearch:
      nodeSelector: 
        node-role.kubernetes.io/log: ''
      nodeCount: 2
      resources: 
        requests: {}
        limits: {}
      storage:
        storageClassName: "managed-premium"
        size: "50G"
      redundancyPolicy: "SingleRedundancy"
  visualization:
    type: "kibana"
    kibana:
      resources: 
        requests: {}
        limits: {}
      proxy:
        resources: 
          requests: {}
          limits: {}
      replicas: 1
  curation:
    type: "curator"
    curator:
      nodeSelector: 
        node-role.kubernetes.io/log: ''
      resources: 
        requests: {}
        limits: {}
      schedule: "*/10 * * * *"
  collection:
    logs:
      type: "fluentd"
      fluentd:
        resources: 
          requests: {}
          limits: {}