Ensure that the --audit-log-path argument is set

SedangLevel 1Tinjauan manualopenshift

Deskripsi

Enable auditing on the Kubernetes API Server and set the desired audit log path. The benchmark marks this recommendation Manual.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

OpenShift audit works at the API server level, logging all requests coming to the server. API server audit is on by default. Run the following command to find the Kubernetes API audit log path: oc get configmap config -n openshift-kube-apiserver -ojson | jq -r '.data["config.yaml"]' | jq '.apiServerArguments["audit-log-path"]' Verify the path is /var/log/kube-apiserver/audit.log.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Set the --audit-log-path argument

Properti

Sistem operasi: Apa saja
Tag: openshiftapi-serverlogging
Referensi: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 1.2.18 Ensure that the --audit-log-path argument is set