Charges de travail du serveur NTP (NTP)

Emplacement de la charge de travail	Charges de travail root uniquement
Source du journal d'audit	Journaux d'audit Kubernetes
Opérations auditées	Modifications des données

Modifications des données (opérations CRUD)

Champs de l'entrée de journal contenant des informations d'audit
Métadonnées d'audit	Nom du champ d'audit	Valeur
Identité de l'utilisateur ou du service	username	Par exemple, "user_username": "system:serviceaccount:gpc-system:root-admin-controller-sa"
Cible (Champs et valeurs qui appellent l'API)	requestURI	"requestURI":"//apis/system.private.gdc.goog/VERSION/ namespaces/gpc-system/ntpservers/ntp-relay-fhr6t/status"
Action (Champs contenant l'opération effectuée)	verb	"verb":"patch"
Code temporel de l'événement	requestReceivedTimestamp	Par exemple, "requestReceivedTimestamp":2022-12-13T13:48:30.014578Z
Source de l'action	_gdch_service_name	Par exemple, "_gdch_service_name": "apiserver"
Résultat	responseStatus_code	Par exemple, "responseStatus_code":"200"
Autres champs	Non applicable	Non applicable

Exemple de journal

{
"_gdch_cluster": "root-admin",
"_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-w5srk",
"_gdch_service_name": "apiserver",
"annotations_authorization_k8s_io_decision":  " allow",
"annotations_authorization_k8s_io_reason RBAC": allowed by ClusterRoleBinding "root-admin-common-controllers-rolebinding" of ClusterRole "root-admin-common-controllers-role" to ServiceAccount "root-admin-controller-sa/gpc-system",
"apiGroup"  :  "system.private.gdc.goog",
"apiVersion":  "audit.k8s.io/v1",
"auditID": 05e72a29-1b18-4db7-9ded-8f51e3a145d8,
"cluster": "root-admin",
"fluentbit_pod":   "anthos-audit-logs-forwarder-w5srk",
"kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "system.private.gdc.goog",
    "apiVersion": "v1alpha1",
    "name": "ntp-relay-fhr6t",
    "namespace": "gpc-system",
    "resource": "ntpservers",
    "subresource":  "status"
  },
"requestReceivedTimestamp": "2022-12-13T13:48:29.996912Z",
"requestURI": "/apis/system.private.gdc.goog/v1alpha1/namespaces/gpc-system/ntpservers/ntp-relay-fhr6t/status"
"responseStatus": {
    "code": 200,
    "metadata": {},
  },
"service_name": "apiserver",
"stage": "ResponseComplete",
"stageTimestamp": "2022-12-13T13:48:30.014578Z",
"userAgent": "root-admin-cm/v0.0.0 (linux/amd64) kubernetes/$Format",
"user_uid": "c01df74a-a983-44db-8fd3-e0dae87c0796",
"user_username": "system:serviceaccount:gpc-system:root-admin-controller-sa",
"verb": "patch",
"Time" : "1670939310014",
"tsNs": "1670939310014791527"
}