Solution

Mon, 01 Jan 0001 00:00:00 +0000

On the controlplane node, create the file /etc/kubernetes/audit-policy.yaml with the following content:
```
apiVersion: audit.k8s.io/v1
kind: Policy
rules:
- level: Metadata
```

Edit the API Server Pod specification (in the file /etc/kubernetes/manifests/kube-apiserver.yaml) by adding the following two volume definitions:

- name: audit
 hostPath:
 path: /etc/kubernetes/audit-policy.yaml
 type: File
- name: audit-log
 hostPath:
 path: /var/log/kubernetes/audit/
 type: DirectoryOrCreate

and also add the following entries to the volumeMounts field of the container:

- mountPath: /etc/kubernetes/audit-policy.yaml
 name: audit
 readOnly: true
- mountPath: /var/log/kubernetes/audit/
 name: audit-log
 readOnly: false

Start a simple Pod:

Audit on Exoscale Academy

Solution