K
Q

K8S Audit changes are not being saved in master after restart

5/5/2020

i created K8S cluster (unmanaged) in google cloud. i added the following changes in the master:

--audit-dynamic-configuration --feature-gates=DynamicAuditing=true --runtime-config=auditregistration.k8s.io/v1alpha1=true

as written in : https://kubernetes.io/docs/tasks/debug-application-cluster/audit/

and everything is working as expected. but after restart these settings are not being saved.

anyone encounter this problem?

-- inza
audit
kubernetes

Similar Questions

AttachVolume.NewAttacher failed for volume: Failed to get GCE GCECloudProvider with error <nil>
How to run a node auto-scaler script without using a cron-job in Kubernetes ( PKS)
Loadbalancing python webserver in kubernetes pods
error creating overlay failed to mount overlay: permission denied

1 Answer

5/5/2020

Assuming you are using kubeadm, this is how you apply flags to the apiserver (all of these changes should be done on the master node)

  1. Edit the following file: /etc/kubernetes/manifests/kube-apiserver.yaml and add these flags to the list of flags:
--audit-dynamic-configuration
--feature-gates=DynamicAuditing=true
--runtime-config=auditregistration.k8s.io/v1alpha1=true

Note that every change done to the kube-apiserver manifest causes the apiserver to restart.

  1. Once it is up and running execute the following command to verify flags are all set and server is up and running: ps -ef | grep kube-apiserver. The output should contain the flags you applied.

In case of issues, see the kube-apiserver logs placed at /var/log/containers/ and search for files beginning with kube-apiserver.

-- omricoco
Source: StackOverflow