From 93313628578b6d46fda049153c803cf4748bed8d Mon Sep 17 00:00:00 2001 From: michalbolek <36153294+michalbolek@users.noreply.github.com> Date: Mon, 25 Sep 2023 12:56:57 +0200 Subject: [PATCH] Add info for kOps 1.22-1.24 on audit logging path changes (#15941) * Add info for kOps 1.22-1.25 on audit logging path changes Just a note with info on path [changes](https://github.com/kubernetes/kops/blob/master/docs/releases/1.22-NOTES.md#control-plane-pods-no-longer-mount-srvkubernetes) in 1.22-1.25 when audit logging is to be enabled. * Update affected kOps versions Changed to 1.22-1.24 * Update docs/cluster_spec.md --------- Co-authored-by: Ciprian Hacman --- docs/cluster_spec.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/cluster_spec.md b/docs/cluster_spec.md index 7229e179d2..6006ca9c17 100644 --- a/docs/cluster_spec.md +++ b/docs/cluster_spec.md @@ -446,6 +446,8 @@ spec: **Note**: The auditPolicyFile is needed. If the flag is omitted, no events are logged. +**Note**: For kOps 1.22-1.24 please use `auditPolicyFile: /srv/kubernetes/kube-apiserver/audit/policy-config.yaml` due to [change in mounted paths](https://github.com/kubernetes/kops/blob/master/docs/releases/1.22-NOTES.md#control-plane-pods-no-longer-mount-srvkubernetes). + You could use the [fileAssets](https://github.com/kubernetes/kops/blob/master/docs/cluster_spec.md#fileassets) feature to push an advanced audit policy file on the master nodes. Example policy file can be found [here](https://raw.githubusercontent.com/kubernetes/website/master/content/en/examples/audit/audit-policy.yaml)