parent
9adc2c7c6c
commit
f5d6481d3d
|
@ -133,8 +133,7 @@ log audit backend using the following [kube-apiserver][kube-apiserver] flags:
|
|||
- `--audit-log-maxbackup` defines the maximum number of audit log files to retain
|
||||
- `--audit-log-maxsize` defines the maximum size in megabytes of the audit log file before it gets rotated
|
||||
|
||||
{{< note >}}
|
||||
In case kube-apiserver is configured as a Pod,remember to mount the hostPath to the localtion of the policy file and log file. For example,
|
||||
In case kube-apiserver is configured as a Pod,remember to mount the hostPath to the location of the policy file and log file. For example,
|
||||
`
|
||||
--audit-policy-file=/etc/kubernetes/audit-policy.yaml
|
||||
--audit-log-path=/var/log/audit.log
|
||||
|
@ -146,7 +145,7 @@ then mount the volumes:
|
|||
- mountPath: /etc/kubernetes/audit-policy.yaml
|
||||
name: audit
|
||||
readOnly: true
|
||||
- mountPath: /var/log/audit.log
|
||||
- mountPath: /var/log/audit.log
|
||||
name: audit-log
|
||||
readOnly: false
|
||||
```
|
||||
|
@ -157,7 +156,7 @@ finally the hostPath:
|
|||
path: /etc/kubernetes/audit-policy.yaml
|
||||
type: File
|
||||
name: audit
|
||||
- hostPath:
|
||||
- hostPath:
|
||||
path: /var/log/audit.log
|
||||
type: FileOrCreate
|
||||
name: audit-log
|
||||
|
@ -165,7 +164,7 @@ finally the hostPath:
|
|||
```
|
||||
|
||||
|
||||
{{< /note >}}
|
||||
|
||||
### Webhook backend
|
||||
|
||||
Webhook backend sends audit events to a remote API, which is assumed to be the
|
||||
|
|
Loading…
Reference in New Issue