feat: add kubernetes events log group (#257)

* feat: add kubernetes events log group

* terraform-docs: automated action

---------

Co-authored-by: Benjamin Valiente (Contractor) <benjamin.valiente@thoughtbot.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Author: 3 people

aws/platform/README.md

@@ -141,7 +141,6 @@ You can then use it to manually edit the aws-auth ConfigMap:
 | <a name="module_common_platform"></a> [common\_platform](#module\_common\_platform) | ../../platform | n/a |
 | <a name="module_dns_service_account_role"></a> [dns\_service\_account\_role](#module\_dns\_service\_account\_role) | ./modules/dns-service-account-role | n/a |
 | <a name="module_ebs_csi_driver_service_account_role"></a> [ebs\_csi\_driver\_service\_account\_role](#module\_ebs\_csi\_driver\_service\_account\_role) | ./modules/ebs-csi-driver-service-account-role | n/a |
-| <a name="module_kubernetes_events_cloudwatch_logs"></a> [kubernetes\_events\_cloudwatch\_logs](#module\_kubernetes\_events\_cloudwatch\_logs) | ./modules/cloudwatch-logs | n/a |
 | <a name="module_network"></a> [network](#module\_network) | ../network-data | n/a |
 | <a name="module_prometheus_service_account_role"></a> [prometheus\_service\_account\_role](#module\_prometheus\_service\_account\_role) | ./modules/prometheus-service-account-role | n/a |
 | <a name="module_secrets_store_provider"></a> [secrets\_store\_provider](#module\_secrets\_store\_provider) | ./modules/secrets-store-provider | n/a |

aws/platform/main.tf

@@ -135,19 +135,6 @@ module "cloudwatch_logs" {
   skip_destroy      = var.logs_skip_destroy
 }
 
-module "kubernetes_events_cloudwatch_logs" {
-  source = "./modules/cloudwatch-logs"
-
-  aws_namespace     = [module.cluster_name.full]
-  aws_tags          = var.aws_tags
-  cluster_full_name = "${module.cluster_name.full}/kubernetes-events"
-  k8s_namespace     = var.k8s_namespace
-  log_group_prefix  = var.logs_prefix
-  oidc_issuer       = data.aws_ssm_parameter.oidc_issuer.value
-  retention_in_days = var.logs_retention_in_days
-  skip_destroy      = var.logs_skip_destroy
-}
-
 module "cluster_autoscaler_service_account_role" {
   source = "./modules/cluster-autoscaler-service-account-role"
 

aws/platform/modules/cloudwatch-logs/README.md

@@ -22,6 +22,7 @@
 
 | Name | Type |
 |------|------|
+| [aws_cloudwatch_log_group.kubernetes_events](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group) | resource |
 | [aws_cloudwatch_log_group.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group) | resource |
 | [aws_iam_policy.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_policy) | resource |
 | [aws_iam_role_policy_attachment.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |

aws/platform/modules/cloudwatch-logs/main.tf

@@ -15,6 +15,13 @@ resource "aws_cloudwatch_log_group" "this" {
   tags              = var.aws_tags
 }
 
+resource "aws_cloudwatch_log_group" "kubernetes_events" {
+  name              = "${var.log_group_prefix}/${var.cluster_full_name}/kubernetes-events"
+  retention_in_days = var.retention_in_days
+  skip_destroy      = var.skip_destroy
+  tags              = var.aws_tags
+}
+
 resource "aws_iam_policy" "this" {
   name   = module.fluent_bit_service_account_role.name
   policy = data.aws_iam_policy_document.this.json