Sauf indication contraire, le contenu de cette page est régi par une licence Creative Commons Attribution 4.0, et les échantillons de code sont régis par une licence Apache 2.0. Pour en savoir plus, consultez les Règles du site Google Developers. Java est une marque déposée d'Oracle et/ou de ses sociétés affiliées.
Dernière mise à jour le 2025/09/04 (UTC).
[[["Facile à comprendre","easyToUnderstand","thumb-up"],["J'ai pu résoudre mon problème","solvedMyProblem","thumb-up"],["Autre","otherUp","thumb-up"]],[["Difficile à comprendre","hardToUnderstand","thumb-down"],["Informations ou exemple de code incorrects","incorrectInformationOrSampleCode","thumb-down"],["Il n'y a pas l'information/les exemples dont j'ai besoin","missingTheInformationSamplesINeed","thumb-down"],["Problème de traduction","translationIssue","thumb-down"],["Autre","otherDown","thumb-down"]],["Dernière mise à jour le 2025/09/04 (UTC)."],[[["\u003cp\u003eThis content outlines the audit logging specifics for root-only workloads, utilizing Kubernetes audit logs as the source.\u003c/p\u003e\n"],["\u003cp\u003eThe audited operations focus on data changes, specifically Create, Read, Update, and Delete (CRUD) operations, within the Kubernetes environment.\u003c/p\u003e\n"],["\u003cp\u003eKey audit log fields include the user or service identity (\u003ccode\u003euser.username\u003c/code\u003e), the target resource (\u003ccode\u003erequestURI\u003c/code\u003e), the action performed (\u003ccode\u003everb\u003c/code\u003e), the event timestamp (\u003ccode\u003erequestReceivedTimestamp\u003c/code\u003e), the source of the action (\u003ccode\u003esourceIPs\u003c/code\u003e), and the outcome (\u003ccode\u003estage\u003c/code\u003e).\u003c/p\u003e\n"],["\u003cp\u003eAn example log entry demonstrates the structure and content of an audit event, including details about the user, action, timestamp, and source IP.\u003c/p\u003e\n"]]],[],null,["# Add-on manager (ADD)\n\nData changes (CRUD operations)\n------------------------------\n\n**Example log** \n\n {\n \"kind\": \"Event\",\n \"apiVersion\": \"audit.k8s.io/v1\",\n \"level\": \"Metadata\",\n \"auditID\": \"8c604d8d-368c-4294-9cfa-e361b4cbbefa\",\n \"stage\": \"RequestReceived\",\n \n \"requestURI\": \"/apis/addon.private.gdc.goog/VERSION/namespaces/root/addonsets/root-admin/status\",\n \n \"verb\": \"patch\",\n \"user\": {\n \"username\": \"system:serviceaccount:kube-system:addon-manager-controller-sa\",\n \"uid\": \"43ee00d0-fd9a-48ff-9e74-da11e39144fe\",\n \"groups\": [\n \"system:serviceaccounts\",\n \"system:serviceaccounts:kube-system\",\n \"system:authenticated\"\n ],\n \"extra\": {\n \"authentication.kubernetes.io/pod-name\": [\n \"addon-manager-controller-55cc67bf8f-dr7z7\"\n ],\n \"authentication.kubernetes.io/pod-uid\": [\n \"735fc26e-a94a-4c10-a90a-86948cda9eeb\"\n ]\n }\n },\n \"sourceIPs\": [\n \"10.253.132.107\"\n ],\n \"userAgent\": \"addon-manager-cm/v0.0.0 (linux/amd64) kubernetes/$Format\",\n \"objectRef\": {\n \"resource\": \"addonsets\",\n \"namespace\": \"root\",\n \"name\": \"root-admin\",\n \"apiGroup\": \"addon.private.gdc.goog\",\n \"apiVersion\": \"VERSION\",\n \"subresource\": \"status\"\n },\n \"requestReceivedTimestamp\": \"2022-11-18T23:15:22.882546Z\",\n \"stageTimestamp\": \"2022-11-18T23:15:22.882546Z\"\n }"]]