Skip to content

Commit

Permalink
fix dynamic audit yaml
Browse files Browse the repository at this point in the history
  • Loading branch information
pbarker committed Nov 19, 2018
1 parent 9c9fddb commit 2b85e02
Showing 1 changed file with 8 additions and 12 deletions.
20 changes: 8 additions & 12 deletions content/en/docs/tasks/debug-application-cluster/audit.md
Original file line number Diff line number Diff line change
Expand Up @@ -211,9 +211,9 @@ audit policies.

{{< feature-state for_k8s_version="v1.13" state="alpha" >}}

In Kubeernetes version 1.13, you can configure dynamic audit webhook backends AuditSink API objects.
In Kubernetes version 1.13, you can configure dynamic audit webhook backends AuditSink API objects.

To enable dynamic auditingm you must set the following apiserver flags:
To enable dynamic auditing you must set the following apiserver flags:

- `--audit-dynamic-configuration`: the primary switch. When the feature is at GA, the only required flag.
- `--feature-gates=DynamicAuditing=true`: feature gate at alpha and beta.
Expand All @@ -224,22 +224,18 @@ When enabled, an AuditSink object can be provisioned:
apiVersion: auditregistration.k8s.io/v1alpha1
kind: AuditSink
metadata:
name: <name>
name: mysink
spec:
policy:
level: <level>
level: Metadata
stages:
- <stage>
- RequestResponse
webhook:
throttle:
qps: <10>
burst: <15>
qps: 10
burst: 15
clientConfig:
url: <backend url>
service:
name: <service name>
namespace: <service namespace>
caBundle: <ca bundle>
url: "https://audit.app"
```

For the complete API definition, see [the godoc](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/apis/audit/v1alpha1/types.go). Multiple objects will exist as independent solutions.
Expand Down

0 comments on commit 2b85e02

Please sign in to comment.