-
Story
-
Resolution: Unresolved
-
Undefined
-
None
-
None
- Since virtctl commands to interact with VMIs do not use kube-apiserver (cluster audit logger), we can use Kubernetes Auditing implementation and use a local volume/webhook to audit log virtctl requests in virt-api.
- Ensure ‘oc adm node-logs --role=master --path=’ and ‘oc adm must-gather – /usr/bin/gather_audit_logs’ can get audit logs from virt-api
ref: https://docs.google.com/document/d/1aN_TunfOp6gXhpQU4YAnukfGvtwE3bFbNEQcjKnHvUE/edit