Skip to content
Snippets Groups Projects
Commit e8449592 authored by Jack Charlie Munday's avatar Jack Charlie Munday
Browse files

feat: audit logging rotation

parent ebc8a45a
No related branches found
No related tags found
1 merge request!281feat: audit logging rotation
Pipeline #11198020 passed
Stage: build
Stage: scan-policies
Hide whitespace changes
Inline Side-by-side
magnum/drivers/common/templates/kubernetes/fragments/configure-kubernetes-master.sh
+ 2
− 1
View file @ e8449592
...@@ -398,6 +398,7 @@ fi ...@@ -398,6 +398,7 @@ fi
KUBE_AUDIT_LOGGING_POLICY="/etc/kubernetes/audit-policy.yaml" KUBE_AUDIT_LOGGING_POLICY="/etc/kubernetes/audit-policy.yaml"
KUBE_AUDIT_LOGGING_WEBHOOK="/etc/kubernetes/webhook-audit-policy.yaml" KUBE_AUDIT_LOGGING_WEBHOOK="/etc/kubernetes/webhook-audit-policy.yaml"
KUBE_AUDIT_LOGGING_ADDITIONAL_FLAGS="--audit-log-maxsize=200 --audit-log-maxbackup=10 --audit-log-maxage=30"
mkdir -p $(dirname ${KUBE_AUDIT_LOGGING_POLICY}) mkdir -p $(dirname ${KUBE_AUDIT_LOGGING_POLICY})
if [ "$kube_min_version" -ge "31" ]; then if [ "$kube_min_version" -ge "31" ]; then
cat << EOF > ${KUBE_AUDIT_LOGGING_POLICY} cat << EOF > ${KUBE_AUDIT_LOGGING_POLICY}
...@@ -488,7 +489,7 @@ contexts: ...@@ -488,7 +489,7 @@ contexts:
current-context: k8s-audit current-context: k8s-audit
EOF EOF
KUBE_API_ARGS="$KUBE_API_ARGS --audit-log-path=- --audit-policy-file=$KUBE_AUDIT_LOGGING_POLICY --audit-webhook-config-file=$KUBE_AUDIT_LOGGING_WEBHOOK" KUBE_API_ARGS="$KUBE_API_ARGS --audit-log-path=- --audit-policy-file=$KUBE_AUDIT_LOGGING_POLICY --audit-webhook-config-file=$KUBE_AUDIT_LOGGING_WEBHOOK $KUBE_AUDIT_LOGGING_ADDITIONAL_FLAGS"
fi fi
KUBE_ADMISSION_CONTROL="" KUBE_ADMISSION_CONTROL=""
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment