本頁面由 Cloud Translation API 翻譯而成。

虛擬機器管理 (VMM)

工作負載位置	機構工作負載
稽核記錄來源	Kubernetes 稽核記錄
稽核的作業	建立 VM 列出 VM 更新 VM 刪除 VM 建立 VM 磁碟列出 VM 磁碟刪除 VM 磁碟列出 VM 類型建立 VM 類型刪除 VM 類型更新 VM 類型建立 VM 存取權要求列出 VM 存取要求刪除 VM 存取要求列出 VM 映像檔建立 VM 映像檔匯入作業列出 VM 映像檔匯入作業刪除 VM 映像檔匯入作業啟動 VM 停止 VM 重新啟動 VM 暫停 VM 取消暫停 VM 查看基礎架構作業員 (IO) 的緊急存取動作

建立 VM

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user": { "groups": [ "system:authenticated" ], "username": "fop-myusername" }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef": { "apiGroup": "virtualmachine.gdc.goog", "apiVersion": "v1", "name": "vm1", "namespace": "myusername-test", "resource": "virtualmachines" }
動作 (包含所執行作業的欄位)	`verb`	`"verb": "create"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp": "2023-09-19T21:16:11.086606Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster": "org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 201, "metadata": {} }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-tzdxt",
  "_gdch_org_id": "org-1.zone1.google.gdch.test",
  "_gdch_org_name": "org-1",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by RoleBinding \"fop-myusername-vm-admin/myusername-test\" of Role \"project-vm-admin\" to User \"fop-myusername\"",
    "mutation.webhook.admission.k8s.io/round_0_index_12": "{\"configuration\":\"gatekeeper-mutating-webhook-configuration\",\"webhook\":\"mutation.gatekeeper.sh\",\"mutated\":false}"
  },
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "6b48ee52-baa4-47d1-9357-98d1bf7bee7e",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "virtualmachine.gdc.goog",
    "apiVersion": "v1",
    "name": "vm1",
    "namespace": "myusername-test",
    "resource": "virtualmachines"
  },
  "requestReceivedTimestamp": "2023-09-19T21:16:11.086606Z",
  "requestURI": "/apis/virtualmachine.gdc.goog/v1/namespaces/myusername-test/virtualmachines?fieldManager=kubectl-client-side-apply",
  "responseStatus": {
    "code": 201,
    "metadata": {}
  },
  "sourceIPs": [
    "10.200.0.1",
    "10.200.0.6"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2023-09-19T21:16:11.097294Z",
  "user": {
    "groups": [
      "system:authenticated"
    ],
    "username": "fop-myusername"
  },
  "userAgent": "kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb": "create"
}

列出 VM

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user": { "groups": [ "system:authenticated" ], "username": "fop-myusername" }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef": { "apiGroup": "virtualmachine.gdc.goog", "apiVersion": "v1", "namespace": "myusername-test", "resource": "virtualmachines" }
動作 (包含所執行作業的欄位)	`verb`	`"verb": "list"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp": "2023-09-19T21:37:40.632532Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster": "org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 200, "metadata": {} }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-tzdxt",
  "_gdch_org_id": "org-1.zone1.google.gdch.test",
  "_gdch_org_name": "org-1",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by RoleBinding \"fop-myusername-vm-admin/myusername-test\" of Role \"project-vm-admin\" to User \"fop-myusername\""
  },
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "e848a3a1-da7e-4b74-8c12-f2af066dda55",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "virtualmachine.gdc.goog",
    "apiVersion": "v1",
    "namespace": "myusername-test",
    "resource": "virtualmachines"
  },
  "requestReceivedTimestamp": "2023-09-19T21:37:40.632532Z",
  "requestURI": "/apis/virtualmachine.gdc.goog/v1/namespaces/myusername-test/virtualmachines?limit=500",
  "responseStatus": {
    "code": 200,
    "metadata": {}
  },
  "sourceIPs": [
    "10.200.0.1",
    "10.200.0.6"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2023-09-19T21:37:40.639807Z",
  "user": {
    "groups": [
      "system:authenticated"
    ],
    "username": "fop-myusername"
  },
  "userAgent": "kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb": "list"
}

更新 VM

包括啟動/停止作業。重新啟動作業也會顯示為服務帳戶的兩項更新作業 (停止和啟動)。

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "fop-myname-test", "groups":[ "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef": { "apiGroup": "virtualmachine.gdc.goog", "apiVersion": "v1", "name": "vm1", "namespace": "myusername-test", "resource": "virtualmachines" }
動作 (包含所執行作業的欄位)	`verb`	`"verb": "patch"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp": "2023-09-19T21:42:20.229318Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster": "org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 415, "message": "the body of the request was in an unknown format - accepted media types include: application/json-patch+json, application/merge-patch+json, application/apply-patch+yaml", "metadata": {}, "reason": "UnsupportedMediaType", "status": "Failure" }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-rxgp7",
  "_gdch_org_id": "org-1.zone1.google.gdch.test",
  "_gdch_org_name": "org-1",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"vmm-controller\" of ClusterRole \"vmm-controller\" to ServiceAccount \"vmm-controller/vm-system\""
  },
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "f094a667-adc8-46cf-9ce7-e0f534b792a9",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "virtualmachine.gdc.goog",
    "apiVersion": "v1",
    "name": "vm1",
    "namespace": "myusername-test",
    "resource": "virtualmachines"
  },
  "requestReceivedTimestamp": "2023-09-19T21:42:20.229318Z",
  "requestURI": "/apis/virtualmachine.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1",
  "responseStatus": {
    "code": 415,
    "message": "the body of the request was in an unknown format - accepted media types include: application/json-patch+json, application/merge-patch+json, application/apply-patch+yaml",
    "metadata": {},
    "reason": "UnsupportedMediaType",
    "status": "Failure"
  },
  "sourceIPs": [
    "10.201.64.17"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2023-09-19T21:42:20.230057Z",
  "user": {
    "extra": {
      "authentication.kubernetes.io/pod-name": [
        "vmm-controller-588b67d499-p7qzv"
      ],
      "authentication.kubernetes.io/pod-uid": [
        "b5bec7d9-d813-4c9d-a2c6-7c8b2ab7ae9c"
      ]
    },
    "groups": [
      "system:serviceaccounts",
      "system:serviceaccounts:vm-system",
      "system:authenticated"
    ],
    "uid": "24a689d1-aabb-4738-9576-eb3a56e5c3d4",
    "username": "system:serviceaccount:vm-system:vmm-controller"
  },
  "userAgent": "vmm-controller/v0.0.0 (linux/amd64) kubernetes/$Format",
  "verb": "patch"
}

刪除 VM

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user": { "groups": [ "system:masters", "system:authenticated" ], "username": "kubernetes-admin" }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef": { "apiGroup": "virtualmachine.gdc.goog", "apiVersion": "v1", "name": "vm1", "namespace": "myusername-test", "resource": "virtualmachines" }
動作 (包含所執行作業的欄位)	`verb`	`"verb": "delete"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp": "2023-09-19T20:58:25.165020Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster": "org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 200, "metadata": {} }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-tzdxt",
  "_gdch_org_id": "org-1.zone1.google.gdch.test",
  "_gdch_org_name": "org-1",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": ""
  },
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "b487c3cf-3eda-4cc9-bb5f-1d9665038ee0",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "virtualmachine.gdc.goog",
    "apiVersion": "v1",
    "name": "vm1",
    "namespace": "myusername-test",
    "resource": "virtualmachines"
  },
  "requestReceivedTimestamp": "2023-09-19T20:58:25.165020Z",
  "requestURI": "/apis/virtualmachine.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1",
  "responseStatus": {
    "code": 200,
    "metadata": {}
  },
  "sourceIPs": [
    "10.200.0.6"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2023-09-19T20:58:25.181044Z",
  "user": {
    "groups": [
      "system:masters",
      "system:authenticated"
    ],
    "username": "kubernetes-admin"
  },
  "userAgent": "kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb": "delete"
}

建立 VM 磁碟

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user": { "groups": [ "system:authenticated" ], "username": "fop-myusername" }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef": { "apiGroup": "virtualmachine.gdc.goog", "apiVersion": "v1", "name": "vm1-boot-disk", "namespace": "myusername-test", "resource": "virtualmachinedisks" }
動作 (包含所執行作業的欄位)	`verb`	`"verb": "create"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp": "2023-09-19T21:16:11.056904Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster": "org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 201, "metadata": {} }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-tzdxt",
  "_gdch_org_id": "org-1.zone1.google.gdch.test",
  "_gdch_org_name": "org-1",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by RoleBinding \"fop-myusername-vm-admin/myusername-test\" of Role \"project-vm-admin\" to User \"fop-myusername\"",
    "mutation.webhook.admission.k8s.io/round_0_index_12": "{\"configuration\":\"gatekeeper-mutating-webhook-configuration\",\"webhook\":\"mutation.gatekeeper.sh\",\"mutated\":false}"
  },
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "b304923c-1df4-4184-bafd-40161210e85e",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "virtualmachine.gdc.goog",
    "apiVersion": "v1",
    "name": "vm1-boot-disk",
    "namespace": "myusername-test",
    "resource": "virtualmachinedisks"
  },
  "requestReceivedTimestamp": "2023-09-19T21:16:11.056904Z",
  "requestURI": "/apis/virtualmachine.gdc.goog/v1/namespaces/myusername-test/virtualmachinedisks?fieldManager=kubectl-client-side-apply",
  "responseStatus": {
    "code": 201,
    "metadata": {}
  },
  "sourceIPs": [
    "10.200.0.1",
    "10.200.0.6"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2023-09-19T21:16:11.071123Z",
  "user": {
    "groups": [
      "system:authenticated"
    ],
    "username": "fop-myusername"
  },
  "userAgent": "kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb": "create"
}

列出 VM 磁碟

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user": { "groups": [ "system:authenticated" ], "username": "fop-myusername" }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef": { "apiGroup": "virtualmachine.gdc.goog", "apiVersion": "v1", "namespace": "myusername-test", "resource": "virtualmachinedisks" }
動作 (包含所執行作業的欄位)	`verb`	`"verb": "list"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp": "2023-09-19T21:18:43.108931Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster": "org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 200, "metadata": {} }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-l7p8r",
  "_gdch_org_id": "org-1.zone1.google.gdch.test",
  "_gdch_org_name": "org-1",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by RoleBinding \"fop-myusername-vm-admin/myusername-test\" of Role \"project-vm-admin\" to User \"fop-myusername\""
  },
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "3d71f7fd-11d0-4ed7-9d8c-a9bf9f61b46d",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "virtualmachine.gdc.goog",
    "apiVersion": "v1",
    "namespace": "myusername-test",
    "resource": "virtualmachinedisks"
  },
  "requestReceivedTimestamp": "2023-09-19T21:18:43.108931Z",
  "requestURI": "/apis/virtualmachine.gdc.goog/v1/namespaces/myusername-test/virtualmachinedisks?limit=500",
  "responseStatus": {
    "code": 200,
    "metadata": {}
  },
  "sourceIPs": [
    "10.200.0.1",
    "10.200.0.7"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2023-09-19T21:18:43.137015Z",
  "user": {
    "groups": [
      "system:authenticated"
    ],
    "username": "fop-myusername"
  },
  "userAgent": "kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb": "list"
}

刪除 VM 磁碟

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "fop-myname-test", "groups":[ "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "namespace":"foo", "resource":"virtualmachinedisks", "apiGroup":"virtualmachine.gdc.goog", "name":"vm1-boot-disk", "apiVersion":"v1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"delete"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":200 }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "namespace":"foo",
    "resource":"virtualmachinedisks",
    "apiGroup":"virtualmachine.gdc.goog",
    "apiVersion":"v1",
    "name":"vm1-boot-disk"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachine.gdc.goog/v1/namespaces/foo/virtualmachinedisks/vm1-boot-disk",
  "responseStatus":{
    "metadata":{},
    "code":200
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "fop-myname-test",
    "groups":[
      "system: authenticated"
      ]
    },
  "userAgent":"kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb":"delete"
}

列出 VM 類型

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "fop-myname-test", "groups":[ "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "resource":"virtualmachinetypes", "apiGroup":"virtualmachine.gdc.goog", "apiVersion":"v1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"list"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":200 }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "annotations":{
    "authorization.k8s.io/decision":"allow",
    "authorization.k8s.io/reason":"RBAC: allowed by RoleBinding 'g-vm-admin-binding/foo' of Role 'g-vm-admin' to User 'fop-myname-test'"
    },
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "resource":"virtualmachinetypes",
    "apiGroup":"virtualmachine.gdc.goog",
    "apiVersion":"v1"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachine.gdc.goog/v1/virtualmachinetypes?limit=500",
  "responseStatus":{
    "metadata":{},
    "code":200
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "fop-myname-test",
    "groups":[
      "system: authenticated"
      ]
    },
  "userAgent":"kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb":"list"
}

建立 VM 類型

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "fop-myname-test", "groups":[ "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "resource":"virtualmachinetypes", "apiGroup":"virtualmachine.gdc.goog", "name":"test-type", "apiVersion":"v1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"create"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":201 }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "annotations":{
    "authorization.k8s.io/decision":"allow",
    "authorization.k8s.io/reason":"RBAC: allowed by ClusterRoleBinding 'g-pa-binding' of ClusterRole 'g-cluster' to User 'fop-myname-test'"
    },
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "resource":"virtualmachinetypes",
    "apiGroup":"virtualmachine.gdc.goog",
    "name":"test-type",
    "apiVersion":"v1"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachine.gdc.goog/v1/virtualmachinetypes?fieldManager=kubectl-client-side-apply",
  "responseStatus":{
    "metadata":{},
    "code":201
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "fop-myname-test",
    "groups":[
      "system: authenticated"
      ]
    },
  "userAgent":"kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb":"create"
}

刪除 VM 類型

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "fop-myname-test", "groups":[ "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "resource":"virtualmachinetypes", "apiGroup":"virtualmachine.gdc.goog", "name":"test-type", "apiVersion":"v1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"delete"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":200, "status":"Success" }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "annotations":{
    "authorization.k8s.io/decision":"allow",
    "authorization.k8s.io/reason":"RBAC: allowed by ClusterRoleBinding 'g-pa-binding' of ClusterRole 'g-cluster' to User 'fop-myname-test'"
    },
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "resource":"virtualmachinetypes",
    "apiGroup":"virtualmachine.gdc.goog",
    "name":"test-type",
    "apiVersion":"v1"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachine.gdc.goog/v1/virtualmachinetypes/test-type",
  "responseStatus":{
    "metadata":{},
    "code":200,
    "status":"Success"
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "fop-myname-test",
    "groups":[
      "system: authenticated"
      ]
    },
  "userAgent":"kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb":"delete"
}

更新 VM 類型

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "fop-myname-test", "groups":[ "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "resource":"virtualmachinetypes", "apiGroup":"virtualmachine.gdc.goog", "name":"test-type", "apiVersion":"v1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"patch"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":200 }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "annotations":{
    "authorization.k8s.io/decision":"allow",
    "authorization.k8s.io/reason":"RBAC: allowed by ClusterRoleBinding 'g-pa-binding' of ClusterRole 'g-cluster' to User 'fop-myname-test'"
    },
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "resource":"virtualmachinetypes",
    "apiGroup":"virtualmachine.gdc.goog",
    "name":"test-type",
    "apiVersion":"v1"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachine.gdc.goog/v1/virtualmachinetypes/test-type?fieldManager=kubectl-client-side-apply",
  "responseStatus":{
    "metadata":{},
    "code":200
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "fop-myname-test",
    "groups":[
      "system: authenticated"
      ]
    },
  "userAgent":"kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb":"patch"
}

建立 VM 存取要求

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "fop-myname-test", "groups":[ "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "namespace":"foo", "resource":"virtualmachineaccessrequests", "apiGroup":"virtualmachine.gdc.goog", "apiVersion":"v1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"create"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":201 }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "annotations":{
    "authorization.k8s.io/decision":"allow",
    "authorization.k8s.io/reason":"RBAC: allowed by RoleBinding 'g-vm-admin-binding/foo' of Role 'g-vm-admin' to User 'fop-myname-test'"
    },
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "namespace":"foo",
    "resource":"virtualmachineaccessrequests",
    "apiGroup":"virtualmachine.gdc.goog",
    "apiVersion":"v1"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachine.gdc.goog/v1/namespaces/foo/virtualmachineaccessrequests?fieldManager=kubectl-create",
  "responseStatus":{
    "metadata":{},
    "code":201
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "fop-myname-test",
    "groups":[
      "system: authenticated"
      ]
    },
  "userAgent":"kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb":"create"
}

列出 VM 存取要求

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "fop-myname-test", "groups":[ "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "namespace":"foo", "resource":"virtualmachineaccessrequests", "apiGroup":"virtualmachine.gdc.goog", "apiVersion":"v1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"list"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":200 }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "annotations":{
    "authorization.k8s.io/decision":"allow",
    "authorization.k8s.io/reason":"RBAC: allowed by RoleBinding 'g-vm-admin-binding/foo' of Role 'g-vm-admin' to User 'fop-myname-test'"
    },
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "namespace":"foo",
    "resource":"virtualmachineaccessrequests",
    "apiGroup":"virtualmachine.gdc.goog",
    "apiVersion":"v1"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachine.gdc.goog/v1/namespaces/foo/virtualmachineaccessrequests?limit=500",
  "responseStatus":{
    "metadata":{},
    "code":200
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "fop-myname-test",
    "groups":[
      "system: authenticated"
      ]
    },
  "userAgent":"kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb":"list"
}

刪除 VM 存取要求

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "fop-myname-test", "groups":[ "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "namespace":"foo", "resource":"virtualmachineaccessrequests", "apiGroup":"virtualmachine.gdc.goog", "name":"vm1-jdc9c", "apiVersion":"v1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"delete"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":200 }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "annotations":{
    "authorization.k8s.io/decision":"allow",
    "authorization.k8s.io/reason":"RBAC: allowed by RoleBinding 'g-vm-admin-binding/foo' of Role 'g-vm-admin' to User 'fop-myname-test'"
    },
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "namespace":"foo",
    "resource":"virtualmachineaccessrequests",
    "apiGroup":"virtualmachine.gdc.goog",
    "name":"vm1-jdc9c",
    "apiVersion":"v1"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachine.gdc.goog/v1/namespaces/foo/virtualmachineaccessrequests/vm1-jdc9c",
  "responseStatus":{
    "metadata":{},
    "code":200
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "fop-myname-test",
    "groups":[
      "system: authenticated"
      ]
    },
  "userAgent":"kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb":"delete"
}

列出 VM 映像檔

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "system:serviceaccount:gatekeeper-system:gatekeeper-admin", "uid":"225d02e7-ee06-42c9-a561-df1945d83224", "groups":[ "system:serviceaccounts", "system:serviceaccounts:gatekeeper-system", "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "resource":"virtualmachineimage", "apiGroup":"virtualmachineview.gdc.goog", "apiVersion":"v1alpha1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"list"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":200 }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "annotations":{
    "authorization.k8s.io/decision":"allow",
    "authorization.k8s.io/reason":"RBAC: allowed by ClusterRoleBinding 'gatekeeper-manager-rolebinding' of ClusterRole 'gatekeeper-manager-role' to ServiceAccount 'gatekeeper-admin/gatekeeper-system'"
    },
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "resource":"virtualmachineimage",
    "apiGroup":"virtualmachineview.gdc.goog",
    "apiVersion":"v1alpha1"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachineview.gdc.goog/v1alpha1/virtualmachineimage?limit=500",
  "responseStatus":{
    "metadata":{},
    "code":200
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "system:serviceaccount:gatekeeper-system:gatekeeper-admin",
    "uid":"225d02e7-ee06-42c9-a561-df1945d83224",
    "groups":[
      "system:serviceaccounts",
      "system:serviceaccounts:gatekeeper-system",
      "system: authenticated"
      ]
    },
  "userAgent":"gatekeeper/v3.7.0 (linux/amd64) 3ba8e93/2021-11-15T20:59:44Z",
  "verb":"list"
}

建立 VM 映像檔匯入作業

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "kubernetes-admin", "groups":[ "system:masters", "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "namespace":"foo", "resource":"virtualmachineimageimports", "apiGroup":"virtualmachine.gdc.goog", "apiVersion":"v1alpha1", "name":"import-1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"create"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":201 }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "annotations":{
    "apiserver.latency.k8s.io/response-write":"1.476μs",
    "authorization.k8s.io/reason":"",
    "apiserver.latency.k8s.io/serialize-response-object":"71.971μs",
    "authorization.k8s.io/decision":"allow",
    "apiserver.latency.k8s.io/total":"7.405669466s",
    "apiserver.latency.k8s.io/validating-webhook":"7.395358418s",
    "apiserver.latency.k8s.io/transform-response-object":"2.358μs"
    },
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "namespace":"foo",
    "resource":"virtualmachineimageimports",
    "apiGroup":"virtualmachine.gdc.goog",
    "apiVersion":"v1alpha1",
    "name":"import-1"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachine.gdc.goog/v1alpha1/namespaces/foo/virtualmachineimageimports?fieldManager=kubectl-client-side-apply",
  "responseStatus":{
    "metadata":{},
    "code":201
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "kubernetes-admin",
    "groups":[
      "system:masters",
      "system: authenticated"
      ]
    },
  "userAgent":"kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb":"create"
}

列出 VM 映像檔匯入作業

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "system:serviceaccount:gatekeeper-system:gatekeeper-admin", "groups":[ "system:serviceaccounts", "system:serviceaccounts:gatekeeper-system", "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "resource":"virtualmachineimageimports", "apiGroup":"virtualmachine.gdc.goog", "apiVersion":"v1alpha1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"list"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":201 }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "resource":"virtualmachineimageimports",
    "apiGroup":"virtualmachine.gdc.goog",
    "apiVersion":"v1alpha1"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachine.gdc.goog/v1alpha1/virtualmachineimageimports?limit=500",
  "responseStatus":{
    "metadata":{},
    "code":201
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "system:serviceaccount:gatekeeper-system:gatekeeper-admin",
    "groups":[
      "system:serviceaccounts",
      "system:serviceaccounts:gatekeeper-system",
      "system: authenticated"
      ]
    },
  "userAgent":"gatekeeper/v3.7.0 (linux/amd64) 3ba8e93/2021-11-15T20:59:44Z",
  "verb":"list"
}

刪除 VM 映像檔匯入作業

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user":{ "username": "kubernetes-admin", "groups":[ "system:masters", "system: authenticated" ] }
目標 (呼叫 API 的欄位和值)	`objectRef`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef":{ "namespace":"foo", "resource":"virtualmachineimageimports", "apiGroup":"virtualmachine.gdc.goog", "name":"import-1", "apiVersion":"v1alpha1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"delete"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus":{ "metadata":{}, "code":200 }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster":"org-1-infra",
  "_gdch_fluentbit_pod":"anthos-audit-logs-forwarder-8z2rm",
  "_gdch_service_name":"apiserver",
  "apiVersion":"audit.k8s.io/v1",
  "auditID":"ba0344d7-283f-4d79-aabc-e083al9b053a",
  "kind":"Event",
  "level":"Metadata",
  "objectRef":{
    "namespace":"foo",
    "resource":"virtualmachineimageimports",
    "apiGroup":"virtualmachine.gdc.goog",
    "name":"import-1",
    "apiVersion":"v1alpha1"
    },
  "requestReceivedTimestamp":"2022-11-11T22:02:02.034688Z",
  "requestURI":"/apis/virtualmachine.gdc.goog/v1alpha1/namespaces/foo/virtualmachineimageimports/import-1",
  "responseStatus":{
    "metadata":{},
    "code":200
    },
  "sourceIPs":["10.142.5.147"],
  "stage":"ResponseComplete",
  "stageTimestamp":"2022-11-11T22:02:02.045045Z",
  "tsNs":1668204122074601081,
  "user":{
    "username": "kubernetes-admin",
    "groups":[
      "system:masters",
      "system: authenticated"
      ]
    },
  "userAgent":"kubectl/v1.23.5 (linux/amd64) kubernetes/c285e78",
  "verb":"delete"
}

啟動 VM

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user": { "groups": [ "system:authenticated" ], "username": "fop-myusername" }
目標 (呼叫 API 的欄位和值)	`requestURI`	格式如下： `"requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/namespace/virtualmachines/name/start"` 其中 `namespace` 和 `name` 會識別目標物件。例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1/start"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp": "2023-09-19T22:27:26.787243Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster": "org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 202, "metadata": {} }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-rxgp7",
  "_gdch_org_id": "org-1.zone1.google.gdch.test",
  "_gdch_org_name": "org-1",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by RoleBinding \"fop-myusername-vm-admin/myusername-test\" of Role \"project-vm-admin\" to User \"fop-myusername\""
  },
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "1446c6b9-f728-4f0d-9a70-aa8361749eef",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "virtualmachineoperations.gdc.goog",
    "apiVersion": "v1",
    "name": "vm1",
    "namespace": "myusername-test",
    "resource": "virtualmachines",
    "subresource": "start"
  },
  "requestReceivedTimestamp": "2023-09-19T22:27:26.787243Z",
  "requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1/start",
  "responseStatus": {
    "code": 202,
    "metadata": {}
  },
  "sourceIPs": [
    "10.200.0.1",
    "10.200.0.5"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2023-09-19T22:27:26.929619Z",
  "user": {
    "groups": [
      "system:authenticated"
    ],
    "username": "fop-myusername"
  },
  "userAgent": "Go-http-client/2.0",
  "verb": "update"
}

停止 VM

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user": { "groups": [ "system:authenticated" ], "username": "fop-myusername" }
目標 (呼叫 API 的欄位和值)	`requestURI`	格式如下： `"requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/namespace/virtualmachines/name/stop"` 其中 `namespace` 和 `name` 會識別目標物件。例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1/stop"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp": "2023-09-19T22:27:26.787243Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster": "org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 202, "metadata": {} }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-rxgp7",
  "_gdch_org_id": "org-1.zone1.google.gdch.test",
  "_gdch_org_name": "org-1",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by RoleBinding \"fop-myusername-vm-admin/myusername-test\" of Role \"project-vm-admin\" to User \"fop-myusername\""
  },
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "1446c6b9-f728-4f0d-9a70-aa8361749eef",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "virtualmachineoperations.gdc.goog",
    "apiVersion": "v1",
    "name": "vm1",
    "namespace": "myusername-test",
    "resource": "virtualmachines",
    "subresource": "stop"
  },
  "requestReceivedTimestamp": "2023-09-19T22:27:26.787243Z",
  "requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1/stop",
  "responseStatus": {
    "code": 202,
    "metadata": {}
  },
  "sourceIPs": [
    "10.200.0.1",
    "10.200.0.5"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2023-09-19T22:27:26.929619Z",
  "user": {
    "groups": [
      "system:authenticated"
    ],
    "username": "fop-myusername"
  },
  "userAgent": "Go-http-client/2.0",
  "verb": "update"
}

重新啟動 VM

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user": { "groups": [ "system:authenticated" ], "username": "fop-myusername" }
目標 (呼叫 API 的欄位和值)	`requestURI`	格式如下： `"requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/namespace/virtualmachines/name/restart"` 其中 `namespace` 和 `name` 會識別目標物件。例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1/restart"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp": "2023-09-19T22:27:26.787243Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster": "org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 202, "metadata": {} }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-rxgp7",
  "_gdch_org_id": "org-1.zone1.google.gdch.test",
  "_gdch_org_name": "org-1",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by RoleBinding \"fop-myusername-vm-admin/myusername-test\" of Role \"project-vm-admin\" to User \"fop-myusername\""
  },
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "1446c6b9-f728-4f0d-9a70-aa8361749eef",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "virtualmachineoperations.gdc.goog",
    "apiVersion": "v1",
    "name": "vm1",
    "namespace": "myusername-test",
    "resource": "virtualmachines",
    "subresource": "restart"
  },
  "requestReceivedTimestamp": "2023-09-19T22:27:26.787243Z",
  "requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1/restart",
  "responseStatus": {
    "code": 202,
    "metadata": {}
  },
  "sourceIPs": [
    "10.200.0.1",
    "10.200.0.5"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2023-09-19T22:27:26.929619Z",
  "user": {
    "groups": [
      "system:authenticated"
    ],
    "username": "fop-myusername"
  },
  "userAgent": "Go-http-client/2.0",
  "verb": "update"
}

暫停 VM

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user": { "groups": [ "system:authenticated" ], "username": "fop-myusername" }
目標 (呼叫 API 的欄位和值)	`requestURI`	格式如下： `"requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/namespace/virtualmachines/name/pause"` 其中 `namespace` 和 `name` 會識別目標物件。例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1/pause"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp": "2023-09-19T22:27:26.787243Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster": "org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 202, "metadata": {} }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-rxgp7",
  "_gdch_org_id": "org-1.zone1.google.gdch.test",
  "_gdch_org_name": "org-1",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by RoleBinding \"fop-myusername-vm-admin/myusername-test\" of Role \"project-vm-admin\" to User \"fop-myusername\""
  },
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "1446c6b9-f728-4f0d-9a70-aa8361749eef",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "virtualmachineoperations.gdc.goog",
    "apiVersion": "v1",
    "name": "vm1",
    "namespace": "myusername-test",
    "resource": "virtualmachines",
    "subresource": "pause"
  },
  "requestReceivedTimestamp": "2023-09-19T22:27:26.787243Z",
  "requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1/pause",
  "responseStatus": {
    "code": 202,
    "metadata": {}
  },
  "sourceIPs": [
    "10.200.0.1",
    "10.200.0.5"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2023-09-19T22:27:26.929619Z",
  "user": {
    "groups": [
      "system:authenticated"
    ],
    "username": "fop-myusername"
  },
  "userAgent": "Go-http-client/2.0",
  "verb": "update"
}

取消暫停 VM

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user": { "groups": [ "system:authenticated" ], "username": "fop-myusername" }
目標 (呼叫 API 的欄位和值)	`requestURI`	格式如下： `"requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/namespace/virtualmachines/name/unpause"` 其中 `namespace` 和 `name` 會識別目標物件。例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1/unpause"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp": "2023-09-19T22:27:26.787243Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster": "org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 202, "metadata": {} }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-rxgp7",
  "_gdch_org_id": "org-1.zone1.google.gdch.test",
  "_gdch_org_name": "org-1",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": "RBAC: allowed by RoleBinding \"fop-myusername-vm-admin/myusername-test\" of Role \"project-vm-admin\" to User \"fop-myusername\""
  },
  "apiVersion": "audit.k8s.io/v1",
  "auditID": "1446c6b9-f728-4f0d-9a70-aa8361749eef",
  "kind": "Event",
  "level": "Metadata",
  "objectRef": {
    "apiGroup": "virtualmachineoperations.gdc.goog",
    "apiVersion": "v1",
    "name": "vm1",
    "namespace": "myusername-test",
    "resource": "virtualmachines",
    "subresource": "unpause"
  },
  "requestReceivedTimestamp": "2023-09-19T22:27:26.787243Z",
  "requestURI": "/apis/virtualmachineoperations.gdc.goog/v1/namespaces/myusername-test/virtualmachines/vm1/unpause",
  "responseStatus": {
    "code": 202,
    "metadata": {}
  },
  "sourceIPs": [
    "10.200.0.1",
    "10.200.0.5"
  ],
  "stage": "ResponseComplete",
  "stageTimestamp": "2023-09-19T22:27:26.929619Z",
  "user": {
    "groups": [
      "system:authenticated"
    ],
    "username": "fop-myusername"
  },
  "userAgent": "Go-http-client/2.0",
  "verb": "update"
}

查看 IO 的緊急存取動作

基礎架構營運商 (IO) 有權執行本文所述的所有 VMM 稽核作業。系統會自動稽核記錄他們的所有動作，並納入 Kubernetes 稽核記錄。

記錄項目中包含稽核資訊的欄位
稽核中繼資料	稽核欄位名稱	值
使用者或服務身分	`user`	例如，假設使用者要求系統將文字從英文翻譯成法文 "user": { "groups": [ "system:masters", "system:authenticated" ], "username": "kubernetes-admin" }
目標 (呼叫 API 的欄位和值)	`objectRef` VM 專屬資源的 `objectRef.apiGroup` 模式如下： `"virtualmachine.gdc.goog\|.kubevirt.\|.cdi."`	例如，假設使用者要求系統將文字從英文翻譯成法文 "objectRef": { "resource": "vmruntimes", "apiGroup": "vm.cluster.gke.io", "apiVersion": "v1" }
動作 (包含所執行作業的欄位)	`verb`	`"verb":"list"`
事件時間戳記	`requestReceivedTimestamp`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"requestReceivedTimestamp":"2022-11-30T00:47:09.472822Z"`
動作來源	`_gdch_cluster`	例如，假設使用者要求系統將文字從英文翻譯成法文 `"_gdch_cluster":"org-1-infra"`
結果	`responseStatus`	例如，假設使用者要求系統將文字從英文翻譯成法文 "responseStatus": { "code": 200, "metadata": {} }
其他欄位	不適用	不適用

範例記錄

{
  "_gdch_cluster": "org-1-infra",
  "_gdch_fluentbit_pod": "anthos-audit-logs-forwarder-ztsnr",
  "responseStatus": {
    "code": 200,
    "metadata": {}
  },
  "kind": "Event",
  "stageTimestamp": "2022-11-30T00:47:09.475563Z",
  "annotations": {
    "authorization.k8s.io/decision": "allow",
    "authorization.k8s.io/reason": ""
  },
  "sourceIPs": [
    "10.200.1.109"
  ],
  "objectRef": {
    "resource": "vmruntimes",
    "apiGroup": "virtualmachine.private.gdc.goog",
    "apiVersion": "v1"
  },
  "apiVersion": "audit.k8s.io/v1",
  "verb": "list",
  "auditID": "fe338dca-f502-4fde-ba25-98bd29341a83",
  "level": "Metadata",
  "requestURI": "/apis/virtualmachine.private.gdc.goog/v1/vmruntimes",
  "user": {
    "groups": [
      "system:masters",
      "system:authenticated"
    ],
    "username": "kubernetes-admin"
  },
  "stage": "ResponseComplete",
  "requestReceivedTimestamp": "2022-11-30T00:47:09.472822Z",
  "userAgent": "operator/v0.0.0 (linux/amd64) kubernetes/$Format",
  "_gdch_service_name": "apiserver"
}

虛擬機器管理 (VMM) 透過集合功能整理內容 你可以依據偏好儲存及分類內容。

建立 VM

列出 VM

更新 VM

刪除 VM

建立 VM 磁碟

列出 VM 磁碟

刪除 VM 磁碟

列出 VM 類型

建立 VM 類型

刪除 VM 類型

更新 VM 類型

建立 VM 存取要求

列出 VM 存取要求

刪除 VM 存取要求

列出 VM 映像檔

建立 VM 映像檔匯入作業

列出 VM 映像檔匯入作業

刪除 VM 映像檔匯入作業

啟動 VM

停止 VM

重新啟動 VM

暫停 VM

取消暫停 VM

查看 IO 的緊急存取動作

虛擬機器管理 (VMM)