whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update controlling-access.md

Browse Source
This commit is contained in:
PriyanshuAhlawat
2022-03-16 19:16:46 +05:30
parent 7e54b18dd4
commit c7952b2c3e
1 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/concepts/security/controlling-access.md
+1 -5
View File
@@ -129,16 +129,12 @@ The available Admission Control modules are described in [Admission Controllers]
Once a request passes all admission controllers, it is validated using the validation routines
for the corresponding API object, and then written to the object store (shown as step **4**).
## Auditing
Kubernetes auditing provides a security-relevant, chronological set of records documenting the sequence of actions in a cluster.
The cluster audits the activities generated by users, by applications that use the Kubernetes API, and by the control plane itself.
Each request on each stage of its execution generates an audit event, which is then pre-processed according to a certain policy and written to a backend.
The policy determines what's recorded when an event is processed and it's compared against the list of rules in order. The first matching rule sets the audit level of the event.
The defined audit levels are: None, Metadata, Request and RequestResponse.
The Audit backends persist audit events to an external storage. By default kube-apiserver provides two backends: log and webhook backend.
For more information, see "[Auditing](https://kubernetes.io/docs/tasks/debug-application-cluster/audit/)".
## API server ports and IPs