// the find
vmware-archive/eventrouter
A simple introspective kubernetes service that forwards events to a specified sink.
Eventrouter watches the Kubernetes event API and forwards those events to external sinks — Elasticsearch, Kafka, InfluxDB, S3, Azure Event Hub, HTTP, and a few others. It fills a real gap: Kubernetes events only live for an hour by default, and this gets them somewhere permanent. That said, this repo is archived and hasn't been touched since 2022.
The sink abstraction is clean — a simple interface with a single `UpdateEvents` method means adding a new destination is straightforward Go. It covers the most common destinations people actually want (Kafka, S3, Elasticsearch via glog, HTTP). Single-binary, low-resource footprint with a small RBAC footprint that only needs read access to events. The HTTP sink with a sample implementation makes it easy to plug in anything custom.
Archived by VMware in 2022 — this is dead upstream, and the Kubernetes event API has evolved since then. No support for filtered forwarding; you get every event in the cluster or nothing, which gets noisy fast at scale. Rockset sink references a service that shut down. The EFK-oriented default output format is hardcoded JSON wrapping that may not match what modern observability stacks (Loki, OpenTelemetry collectors) expect without transformation.