From c7952b2c3ee47534f37c197189680fbf00eab1b3 Mon Sep 17 00:00:00 2001 From: PriyanshuAhlawat Date: Wed, 16 Mar 2022 19:16:46 +0530 Subject: [PATCH] Update controlling-access.md --- content/en/docs/concepts/security/controlling-access.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/content/en/docs/concepts/security/controlling-access.md b/content/en/docs/concepts/security/controlling-access.md index 7db564b3dc..97cf71f829 100644 --- a/content/en/docs/concepts/security/controlling-access.md +++ b/content/en/docs/concepts/security/controlling-access.md @@ -129,16 +129,12 @@ The available Admission Control modules are described in [Admission Controllers] Once a request passes all admission controllers, it is validated using the validation routines for the corresponding API object, and then written to the object store (shown as step **4**). - ## Auditing Kubernetes auditing provides a security-relevant, chronological set of records documenting the sequence of actions in a cluster. The cluster audits the activities generated by users, by applications that use the Kubernetes API, and by the control plane itself. -Each request on each stage of its execution generates an audit event, which is then pre-processed according to a certain policy and written to a backend. -The policy determines what's recorded when an event is processed and it's compared against the list of rules in order. The first matching rule sets the audit level of the event. -The defined audit levels are: None, Metadata, Request and RequestResponse. -The Audit backends persist audit events to an external storage. By default kube-apiserver provides two backends: log and webhook backend. +For more information, see "[Auditing](https://kubernetes.io/docs/tasks/debug-application-cluster/audit/)". ## API server ports and IPs