starlingx/docs
Code Issues Proposed changes

K8S Audit Policy file missing on Standby controller (dsr8 mr3, dsr8 mr2+)

Browse Source 
Change-Id: I8891e01618225e75b229716c89d8c1998686bbc5
Signed-off-by: Ngairangbam Mili <ngairangbam.mili@windriver.com>
This commit is contained in:
Ngairangbam Mili 2024-09-11 03:21:59 +00:00
parent be030bcdad
commit 56b52b11c6
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
doc/source/security/kubernetes/kubernetes-operator-command-logging-663fce5d74e7.rst
View File

@ -83,11 +83,11 @@ my-audit-policy-file ...}`` parameter. By configuring the parameter
audit-log-maxbackup: '3' audit-log-maxbackup: '3'
audit-log-maxsize: '40' audit-log-maxsize: '40'
audit-log-path: '/var/log/kubernetes/audit/audit.log' audit-log-path: '/var/log/kubernetes/audit/audit.log'
audit-policy-file: '/etc/kubernetes/my-audit-policy-file.yml' audit-policy-file: '/etc/kubernetes/my-audit-policy-file.yaml'
apiserver_extra_volumes: apiserver_extra_volumes:
- name: my-audit-policy-file - name: my-audit-policy-file
mountPath: '/etc/kubernetes/my-audit-policy-file.yml' mountPath: '/etc/kubernetes/my-audit-policy-file.yaml'
hostPath: '/etc/kubernetes/my-audit-policy-file.yml' hostPath: '/etc/kubernetes/my-audit-policy-file.yaml'
pathType: File pathType: File
readOnly: true readOnly: true
content: | content: |
@ -122,7 +122,7 @@ In |prod| |prod-ver|, a custom policy file can only be created at bootstrap
time in ``apiserver_extra_volumes`` section. If a custom policy file was time in ``apiserver_extra_volumes`` section. If a custom policy file was
configured at bootstrap, then after bootstrap the user has the option to configured at bootstrap, then after bootstrap the user has the option to
configure the parameter ``audit-policy-file`` to either this custom policy file configure the parameter ``audit-policy-file`` to either this custom policy file
(``/etc/kubernetes/my-audit-policy-file.yml`` in the example above) or the (``/etc/kubernetes/my-audit-policy-file.yaml`` in the example above) or the
default policy file ``/etc/kubernetes/default-audit-policy.yaml``. If no custom default policy file ``/etc/kubernetes/default-audit-policy.yaml``. If no custom
policy file was configured at bootstrap, then the user can only configure the policy file was configured at bootstrap, then the user can only configure the
parameter ``audit-policy-file`` to the default policy file. parameter ``audit-policy-file`` to the default policy file.