-
Notifications
You must be signed in to change notification settings - Fork 80
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support for Google Kubernetes Engine (GKE) #18
Comments
hmm... I'd like to deal just with k8s audit events if possible. @tallclair do you know if the raw k8s audit events are available from gke? |
No, they are not. Dynamic audit control will address this need. Once that merges, it would be awesome to have a version of audit2rbac that can be deployed as a pod in a cluster, and configured as an audit backend. |
audit2rbac v0.7.0 doesn't handle my GKE audit log, is there some other way I can make use of audit2rbac with Google's Kubernetes Engine? |
This feature might be very useful. Is there any interest in adding it? |
Google's managed Kubernetes service redirects the Kubernetes Audit Log to their Cloud Audit Logging/Stackdriver Logging services. These logs can be queried using the
gcloud
command line tools, eg:This produces output formatted like this:
Would it be reasonable to try to support this format in
audit2rbac
?(I am relatively new to Kubernetes/GKE so I could be mistaken about how GKE's audit logging works, but I think the above description is accurate.)
The text was updated successfully, but these errors were encountered: