Skip to content

Instantly share code, notes, and snippets.

@EmilyM1
Created February 2, 2022 22:46
Show Gist options
  • Save EmilyM1/b0b4a401e6cc088dea8fd51d275c8062 to your computer and use it in GitHub Desktop.
Save EmilyM1/b0b4a401e6cc088dea8fd51d275c8062 to your computer and use it in GitHub Desktop.
Change of Audit Profile in Audit Logs
{
"kind": "Event",
"apiVersion": "audit.k8s.io/v1",
"level": "RequestResponse",
"auditID": "973373e8-3dac-4a8b-85be-dfd06cf71dd3",
"stage": "ResponseComplete",
"requestURI": "/apis/authorization.k8s.io/v1/subjectaccessreviews?timeout=10s",
"verb": "create",
"user": {
"username": "system:serviceaccount:openshift-apiserver:openshift-apiserver-sa",
"uid": "REDACTED",
"groups": [
"system:serviceaccounts",
"system:serviceaccounts:openshift-apiserver",
"system:authenticated"
],
"extra": {
"authentication.kubernetes.io/pod-name": [
"apiserver-REDACTED"
],
"authentication.kubernetes.io/pod-uid": [
"b8d5d360-2468-4272-89e1-5bc16cf6ac0f"
]
}
},
"sourceIPs": [
"REDACTED"
],
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment