Skip to content
Snippets Groups Projects
Commit e8449592 authored by Jack Charlie Munday's avatar Jack Charlie Munday
Browse files

feat: audit logging rotation

parent ebc8a45a
No related branches found
No related tags found
1 merge request!281feat: audit logging rotation
Pipeline #11198020 passed
......@@ -398,6 +398,7 @@ fi
KUBE_AUDIT_LOGGING_POLICY="/etc/kubernetes/audit-policy.yaml"
KUBE_AUDIT_LOGGING_WEBHOOK="/etc/kubernetes/webhook-audit-policy.yaml"
KUBE_AUDIT_LOGGING_ADDITIONAL_FLAGS="--audit-log-maxsize=200 --audit-log-maxbackup=10 --audit-log-maxage=30"
mkdir -p $(dirname ${KUBE_AUDIT_LOGGING_POLICY})
if [ "$kube_min_version" -ge "31" ]; then
cat << EOF > ${KUBE_AUDIT_LOGGING_POLICY}
......@@ -488,7 +489,7 @@ contexts:
current-context: k8s-audit
EOF
KUBE_API_ARGS="$KUBE_API_ARGS --audit-log-path=- --audit-policy-file=$KUBE_AUDIT_LOGGING_POLICY --audit-webhook-config-file=$KUBE_AUDIT_LOGGING_WEBHOOK"
KUBE_API_ARGS="$KUBE_API_ARGS --audit-log-path=- --audit-policy-file=$KUBE_AUDIT_LOGGING_POLICY --audit-webhook-config-file=$KUBE_AUDIT_LOGGING_WEBHOOK $KUBE_AUDIT_LOGGING_ADDITIONAL_FLAGS"
fi
KUBE_ADMISSION_CONTROL=""
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment