apiserver-audit.json

{
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "cd2da677-f8a1-4c65-8033-a020a7e9f2a8",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "resource": "pods",
    "namespace": "kube-system",
    "name": "kube-apiserver-single-control-plane",
    "apiVersion": "v1"
  },
  "requestReceivedTimestamp": "2019-07-12T15:48:43.741364Z",
  "requestURI": "/api/v1/namespaces/kube-system/pods/kube-apiserver-single-control-plane",
  "sourceIPs": [
    "172.17.0.2"
  ],
  "stage": "RequestReceived",
  "stageTimestamp": "2019-07-12T15:48:43.741364Z",
  "user": {
    "username": "system:node:single-control-plane",
    "groups": [
      "system:nodes",
      "system:authenticated"
    ]
  },
  "userAgent": "kubelet/v1.15.0 (linux/amd64) kubernetes/e8462b5",
  "verb": "get"
}