加購管理員 (ADD)
透過集合功能整理內容
你可以依據偏好儲存及分類內容。
資料變更 (CRUD 作業)
| 記錄項目中包含稽核資訊的欄位 |
| 稽核中繼資料 |
稽核欄位名稱 |
值 |
| 使用者或服務身分 |
user.username |
例如，假設使用者要求系統
將文字從英文翻譯成法文
"user":{
"username":"system:serviceaccount:kube-system:
addon-manager-controller-sa"
}
|
|
目標
(呼叫 API 的欄位和值)
|
requestURI |
"requestURI":"/apis/addon.private.gdc.goog/VERSION/
namespaces/root/addonsets/root-admin/status"
|
|
動作
(包含所執行作業的欄位)
|
verb |
"verb":"patch"
|
| 事件時間戳記 |
requestReceivedTimestamp
|
例如，假設使用者要求系統
將文字從英文翻譯成法文
"requestReceivedTimestamp":2022-11-18T23:15:22.882546Z
|
| 動作來源 |
sourceIPs |
例如，假設使用者要求系統
將文字從英文翻譯成法文
"sourceIPs":["10.253.132.107"]
|
| 結果 |
stage |
例如，假設使用者要求系統
將文字從英文翻譯成法文
"stage":"RequestReceived"
|
| 其他欄位 |
不適用 |
不適用 |
範例記錄
{
"kind": "Event",
"apiVersion": "audit.k8s.io/v1",
"level": "Metadata",
"auditID": "8c604d8d-368c-4294-9cfa-e361b4cbbefa",
"stage": "RequestReceived",
"requestURI": "/apis/addon.private.gdc.goog/VERSION/namespaces/root/addonsets/root-admin/status",
"verb": "patch",
"user": {
"username": "system:serviceaccount:kube-system:addon-manager-controller-sa",
"uid": "43ee00d0-fd9a-48ff-9e74-da11e39144fe",
"groups": [
"system:serviceaccounts",
"system:serviceaccounts:kube-system",
"system:authenticated"
],
"extra": {
"authentication.kubernetes.io/pod-name": [
"addon-manager-controller-55cc67bf8f-dr7z7"
],
"authentication.kubernetes.io/pod-uid": [
"735fc26e-a94a-4c10-a90a-86948cda9eeb"
]
}
},
"sourceIPs": [
"10.253.132.107"
],
"userAgent": "addon-manager-cm/v0.0.0 (linux/amd64) kubernetes/$Format",
"objectRef": {
"resource": "addonsets",
"namespace": "root",
"name": "root-admin",
"apiGroup": "addon.private.gdc.goog",
"apiVersion": "VERSION",
"subresource": "status"
},
"requestReceivedTimestamp": "2022-11-18T23:15:22.882546Z",
"stageTimestamp": "2022-11-18T23:15:22.882546Z"
}
除非另有註明，否則本頁面中的內容是採用創用 CC 姓名標示 4.0 授權，程式碼範例則為阿帕契 2.0 授權。詳情請參閱《Google Developers 網站政策》。Java 是 Oracle 和/或其關聯企業的註冊商標。
上次更新時間：2025-09-04 (世界標準時間)。
[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-09-04 (世界標準時間)。"],[[["\u003cp\u003eThis content outlines the audit logging specifics for root-only workloads, utilizing Kubernetes audit logs as the source.\u003c/p\u003e\n"],["\u003cp\u003eThe audited operations focus on data changes, specifically Create, Read, Update, and Delete (CRUD) operations, within the Kubernetes environment.\u003c/p\u003e\n"],["\u003cp\u003eKey audit log fields include the user or service identity (\u003ccode\u003euser.username\u003c/code\u003e), the target resource (\u003ccode\u003erequestURI\u003c/code\u003e), the action performed (\u003ccode\u003everb\u003c/code\u003e), the event timestamp (\u003ccode\u003erequestReceivedTimestamp\u003c/code\u003e), the source of the action (\u003ccode\u003esourceIPs\u003c/code\u003e), and the outcome (\u003ccode\u003estage\u003c/code\u003e).\u003c/p\u003e\n"],["\u003cp\u003eAn example log entry demonstrates the structure and content of an audit event, including details about the user, action, timestamp, and source IP.\u003c/p\u003e\n"]]],[],null,["# Add-on manager (ADD)\n\nData changes (CRUD operations)\n------------------------------\n\n**Example log** \n\n {\n \"kind\": \"Event\",\n \"apiVersion\": \"audit.k8s.io/v1\",\n \"level\": \"Metadata\",\n \"auditID\": \"8c604d8d-368c-4294-9cfa-e361b4cbbefa\",\n \"stage\": \"RequestReceived\",\n \n \"requestURI\": \"/apis/addon.private.gdc.goog/VERSION/namespaces/root/addonsets/root-admin/status\",\n \n \"verb\": \"patch\",\n \"user\": {\n \"username\": \"system:serviceaccount:kube-system:addon-manager-controller-sa\",\n \"uid\": \"43ee00d0-fd9a-48ff-9e74-da11e39144fe\",\n \"groups\": [\n \"system:serviceaccounts\",\n \"system:serviceaccounts:kube-system\",\n \"system:authenticated\"\n ],\n \"extra\": {\n \"authentication.kubernetes.io/pod-name\": [\n \"addon-manager-controller-55cc67bf8f-dr7z7\"\n ],\n \"authentication.kubernetes.io/pod-uid\": [\n \"735fc26e-a94a-4c10-a90a-86948cda9eeb\"\n ]\n }\n },\n \"sourceIPs\": [\n \"10.253.132.107\"\n ],\n \"userAgent\": \"addon-manager-cm/v0.0.0 (linux/amd64) kubernetes/$Format\",\n \"objectRef\": {\n \"resource\": \"addonsets\",\n \"namespace\": \"root\",\n \"name\": \"root-admin\",\n \"apiGroup\": \"addon.private.gdc.goog\",\n \"apiVersion\": \"VERSION\",\n \"subresource\": \"status\"\n },\n \"requestReceivedTimestamp\": \"2022-11-18T23:15:22.882546Z\",\n \"stageTimestamp\": \"2022-11-18T23:15:22.882546Z\"\n }"]]
