From 7e54b18dd4abf3226baf8c09d1fbce8ef22becce Mon Sep 17 00:00:00 2001 From: PriyanshuAhlawat Date: Wed, 16 Mar 2022 01:31:54 +0530 Subject: [PATCH 1/3] Update controlling-access.md --- .../en/docs/concepts/security/controlling-access.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/content/en/docs/concepts/security/controlling-access.md b/content/en/docs/concepts/security/controlling-access.md index 1a0c93d8cf..7db564b3dc 100644 --- a/content/en/docs/concepts/security/controlling-access.md +++ b/content/en/docs/concepts/security/controlling-access.md @@ -130,6 +130,16 @@ Once a request passes all admission controllers, it is validated using the valid for the corresponding API object, and then written to the object store (shown as step **4**). +## Auditing + +Kubernetes auditing provides a security-relevant, chronological set of records documenting the sequence of actions in a cluster. +The cluster audits the activities generated by users, by applications that use the Kubernetes API, and by the control plane itself. +Each request on each stage of its execution generates an audit event, which is then pre-processed according to a certain policy and written to a backend. +The policy determines what's recorded when an event is processed and it's compared against the list of rules in order. The first matching rule sets the audit level of the event. +The defined audit levels are: None, Metadata, Request and RequestResponse. +The Audit backends persist audit events to an external storage. By default kube-apiserver provides two backends: log and webhook backend. + + ## API server ports and IPs The previous discussion applies to requests sent to the secure port of the API server From c7952b2c3ee47534f37c197189680fbf00eab1b3 Mon Sep 17 00:00:00 2001 From: PriyanshuAhlawat Date: Wed, 16 Mar 2022 19:16:46 +0530 Subject: [PATCH 2/3] Update controlling-access.md --- content/en/docs/concepts/security/controlling-access.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/content/en/docs/concepts/security/controlling-access.md b/content/en/docs/concepts/security/controlling-access.md index 7db564b3dc..97cf71f829 100644 --- a/content/en/docs/concepts/security/controlling-access.md +++ b/content/en/docs/concepts/security/controlling-access.md @@ -129,16 +129,12 @@ The available Admission Control modules are described in [Admission Controllers] Once a request passes all admission controllers, it is validated using the validation routines for the corresponding API object, and then written to the object store (shown as step **4**). - ## Auditing Kubernetes auditing provides a security-relevant, chronological set of records documenting the sequence of actions in a cluster. The cluster audits the activities generated by users, by applications that use the Kubernetes API, and by the control plane itself. -Each request on each stage of its execution generates an audit event, which is then pre-processed according to a certain policy and written to a backend. -The policy determines what's recorded when an event is processed and it's compared against the list of rules in order. The first matching rule sets the audit level of the event. -The defined audit levels are: None, Metadata, Request and RequestResponse. -The Audit backends persist audit events to an external storage. By default kube-apiserver provides two backends: log and webhook backend. +For more information, see "[Auditing](https://kubernetes.io/docs/tasks/debug-application-cluster/audit/)". ## API server ports and IPs From e62d2f7302ed45d26e56913558a403fc312a9b1b Mon Sep 17 00:00:00 2001 From: Priyanshu Ahlawat <84102724+PriyanshuAhlawat@users.noreply.github.com> Date: Thu, 31 Mar 2022 08:30:44 +0530 Subject: [PATCH 3/3] Update content/en/docs/concepts/security/controlling-access.md Co-authored-by: Qiming Teng --- content/en/docs/concepts/security/controlling-access.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/concepts/security/controlling-access.md b/content/en/docs/concepts/security/controlling-access.md index 97cf71f829..ff15c1512d 100644 --- a/content/en/docs/concepts/security/controlling-access.md +++ b/content/en/docs/concepts/security/controlling-access.md @@ -134,7 +134,7 @@ for the corresponding API object, and then written to the object store (shown as Kubernetes auditing provides a security-relevant, chronological set of records documenting the sequence of actions in a cluster. The cluster audits the activities generated by users, by applications that use the Kubernetes API, and by the control plane itself. -For more information, see "[Auditing](https://kubernetes.io/docs/tasks/debug-application-cluster/audit/)". +For more information, see [Auditing](/docs/tasks/debug-application-cluster/audit/). ## API server ports and IPs