Skip to content

Commit f129519

Browse files
committed
fix dynamic audit yaml
1 parent 9c9fddb commit f129519

File tree

1 file changed

+9
-13
lines changed
  • content/en/docs/tasks/debug-application-cluster

1 file changed

+9
-13
lines changed

content/en/docs/tasks/debug-application-cluster/audit.md

Lines changed: 9 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -211,9 +211,9 @@ audit policies.
211211

212212
{{< feature-state for_k8s_version="v1.13" state="alpha" >}}
213213

214-
In Kubeernetes version 1.13, you can configure dynamic audit webhook backends AuditSink API objects.
214+
In Kubernetes version 1.13, you can configure dynamic audit webhook backends AuditSink API objects.
215215

216-
To enable dynamic auditingm you must set the following apiserver flags:
216+
To enable dynamic auditing you must set the following apiserver flags:
217217

218218
- `--audit-dynamic-configuration`: the primary switch. When the feature is at GA, the only required flag.
219219
- `--feature-gates=DynamicAuditing=true`: feature gate at alpha and beta.
@@ -224,25 +224,21 @@ When enabled, an AuditSink object can be provisioned:
224224
apiVersion: auditregistration.k8s.io/v1alpha1
225225
kind: AuditSink
226226
metadata:
227-
name: <name>
227+
name: mysink
228228
spec:
229229
policy:
230-
level: <level>
230+
level: Metadata
231231
stages:
232-
- <stage>
232+
- RequestResponse
233233
webhook:
234234
throttle:
235-
qps: <10>
236-
burst: <15>
235+
qps: 10
236+
burst: 15
237237
clientConfig:
238-
url: <backend url>
239-
service:
240-
name: <service name>
241-
namespace: <service namespace>
242-
caBundle: <ca bundle>
238+
url: "https://audit.app"
243239
```
244240

245-
For the complete API definition, see [the godoc](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/apis/audit/v1alpha1/types.go). Multiple objects will exist as independent solutions.
241+
For the complete API definition, see [the godoc](https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/api/auditregistration/v1alpha1/types.go). Multiple objects will exist as independent solutions.
246242

247243
Existing static backends that you configure with runtime flags are not affected by this feature. However, the dynamic backends share the truncate options of the static webhook. If webhook truncate options are set with runtime flags, they are applied to all dynamic backends.
248244

0 commit comments

Comments
 (0)