Marketplace (MKT)

Emplacement de la charge de travail

Charges de travail réservées aux organisations
Source du journal d'audit

API KRM
Opérations auditées

Créer un service Marketplace

Champs de l'entrée de journal contenant des informations d'audit
Métadonnées d'audit Nom du champ d'audit Valeur
Identité de l'utilisateur ou du service username

Par exemple,

"username": "system:serviceaccount:gpc-system:mkt-controller"

Cible

(Champs et valeurs qui appellent l'API)

 apiGroup

Par exemple,

"apiGroup": "marketplace.gdc.goog"

Action

(Champs contenant l'opération effectuée)

 verb

Par exemple,

"verb": "create"
Code temporel de l'événement requestReceivedTimestamp

Par exemple,

"requestReceivedTimestamp":"2022-12-04T03:07:21.657328Z"
Source de l'action userAgent

Par exemple,

"userAgent": "fleet-admin-cm/v0.0.0 (linux/amd64) kubernetes/$Format"
Résultat response_code

Par exemple,

"response_code":"200"
Autres champs Non applicable Non applicable

Exemple de journal

{
  "_gdch_cluster": "org-1-admin",
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "c142325e-8dee-4f36-b392-6d4dfe33947f",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "name": "dataproc-service",
    "namespace": "gpc-system",
    "resource": "marketplaceservices",
    "apiGroup": "marketplace.gdc.goog",
    "apiVersion": "v1alpha1"
  },
  "requestReceivedTimestamp": "2022-12-04T03:07:21.657328Z",
  "requestURI": "/apis/marketplace.gdc.goog/v1alpha1/namespaces/gpc-system/marketplaceservices"
  "responseStatus": {
    "code": 201,
    "metadata": {},
  }
   "sourceIPs": [
    "10.53.166.199"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2022-12-04T03:07:21.657328Z",
  "user": {
    "extra": {
      "authentication.kubernetes.io/pod-name": [
        "fleet-admin-controller-59cc779bfd-vtx96"
      ],
      "authentication.kubernetes.io/pod-uid": [
        "3f656979-43ea-4012-892c-a595cf94a17b"
      ]
    }
    "username": "system:serviceaccount:gpc-system:mkt-controller",
    "uid": "884009bb-d50c-46a1-a68c-8fa1b91da675"
    "groups": [
      "system:serviceaccounts",
      "system:serviceaccounts:gpc-system",
      "system:authenticated"
    ]
      },
      "userAgent": "fleet-admin-cm/v0.0.0 (linux/amd64) kubernetes/$Format",
      "verb": "create"
}

Mettre à jour un service Marketplace

Champs de l'entrée de journal contenant des informations d'audit
Métadonnées d'audit Nom du champ d'audit Valeur
Identité de l'utilisateur ou du service username

Par exemple,

"username": "kubernetes-admin"

Cible

(Champs et valeurs qui appellent l'API)

 apiGroup

Par exemple,

"apiGroup": "marketplace.gdc.goog"

Action

(Champs contenant l'opération effectuée)

 verb

Par exemple,

"verb": "patch"
Code temporel de l'événement requestReceivedTimestamp

Par exemple,

"requestReceivedTimestamp":"2022-12-03T01:09:47.451242Z"
Source de l'action userAgent

Par exemple,

"userAgent": "kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78"
Résultat response_code

Par exemple,

"response_code":"200"
Autres champs Non applicable Non applicable

Exemple de journal

{
  "cluster": "org-1-admin",
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "c142325e-8dee-4f36-b392-6d4dfe33947f",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "name": "dataproc-service",
    "namespace": "gpc-system",
    "resource": "marketplaceservices",
    "apiGroup": "marketplace.gdc.goog",
    "apiVersion": "v1alpha1"
  },
  "requestReceivedTimestamp": "2022-12-04T03:07:21.657328Z",
  "requestURI": "/apis/marketplace.gdc.goog/v1alpha1/namespaces/gpc-system/marketplaceservices/dataproc-service?fieldManager=kubectl-edit"
  "responseStatus": {
    "code": 201,
    "metadata": {},
  }
   "sourceIPs": [
    "10.200.0.6"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2022-12-04T03:07:21.657328Z",
   "user": {
    "groups": [
      "system:masters",
      "system:authenticated"
      ],
      "username": "kubernetes-admin"
      },
      "userAgent": "kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
      "verb": "patch"
}

Révoquer ou accorder l'accès à un service Marketplace

Champs de l'entrée de journal contenant des informations d'audit
Métadonnées d'audit Nom du champ d'audit Valeur
Identité de l'utilisateur ou du service username

Par exemple,

"username": "fop-platform-admin@example.com"

Cible

(Champs et valeurs qui appellent l'API)

 apiGroup

Par exemple,

"apiGroup": "rbac.authorization.k8s.io"

Action

(Champs contenant l'opération effectuée)

 verb

Par exemple,

"verb": "create"
Code temporel de l'événement time

Par exemple,

"time":"2022-12-04T02:00:17.475634Z"
Source de l'action username

Par exemple,

"username": "fop-platform-admin@example.com"
Résultat response_code

Par exemple,

"response_code":"201"
Autres champs Non applicable Non applicable

Exemple de journal

{
  "cluster": "org-1-admin",
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "c142325e-8dee-4f36-b392-6d4dfe33947f",
  "impersonatedUser": {
  "groups": [
    "system:authenticated"
    "username": "fop-platform-admin@example.com"
    }
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiVersion": "v1"
    "name": "user-fop-platform-admin--example--com-marketplace-viewer",
    "resource": "clusterrolebindings",
    "apiGroup": "rbac.authorization.k8s.io",
  },
  "requestReceivedTimestamp": "2022-12-04T03:07:21.657328Z",
  "requestURI": "/apis/rbac.authorization.k8s.io/v1/clusterrolebindings"
  "responseStatus": {
    "code": 201,
    "metadata": {},
  }
   "sourceIPs": [
    "10.253.164.220"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2022-12-04T03:07:21.657328Z",
   "user": {
    "extra": {
      "authentication.kubernetes.io/pod-name": [
        "fleet-admin-gateway-server-c8b7f879c-zwchc"
      ],
      "authentication.kubernetes.io/pod-uid": [
        "f0ec7e0-a604-4b70-a5fc-793e0c158349"
      ]
      }
    "username": "system:serviceaccount:gpc-system:fleet-admin-gateway-server-sa",
    "uid": "72904c96-d59a-4344-8408-5751f42ffdd88"
    "groups": [
      "system:serviceaccounts",
      "system:serviceaccounts:gpc-system",
      "system:authenticated"
      },
      "userAgent": "ui-gateway-server/v0.0.0 (linux/amd64) kubernetes/$Format",
      "verb": "create"
}