mesheryctl design import -f https://raw.githubusercontent.com/meshery/meshery.io/master/catalog/1d8a8ea2-fcbf-464c-9cfd-4d17cb0dc1d3/0.0.7/design.yml
What This Design Does:
This design represents a secure on-premises Kubernetes environment for running and automatically scaling a client application. Fluent Bit runs as a DaemonSet and collects application and cluster logs. Network policies use a default-deny approach and permit only the required internal application traffic and outbound log delivery to an authorized cloud logging endpoint. Cloud credentials are referenced through a Kubernetes Secret, while Fluent Bit configuration is stored in a ConfigMap
Design Snapshot
Caveats and Consideration:
This is a reference architecture and requires environment-specific configuration before production use. Replace placeholder cloud endpoints and credentials, enable TLS certificate verification, apply least-privilege RBAC, encrypt Kubernetes Secrets at rest, and rotate credentials regularly. NetworkPolicy enforcement requires a compatible CNI plugin. Kubernetes NetworkPolicy alone may not restrict traffic by domain name, so an egress gateway, firewall, or proxy should be used to guarantee that only approved logging destinations are reachable. Fluent Bit buffering, retry behavior, log filtering, and sensitive-data redaction should also be configured
Compatibility:
Design Details
CATEGORY
deploymentCREATED BY
CREATED AT
September 07, 2026VERSION
0.0.7-
MODELS
Related Designs
vault-0.30.1.tgz
