External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-06 03:01:13 -03:30
Code Issues Packages Projects Releases Wiki Activity

add audit webhook support (#6317)

Browse Source 
* add audit webhook support

* use generic name auditsink
This commit is contained in:
Konstantin Lebedev
2020-07-20 13:32:54 +05:00
committed by GitHub
parent 1a1fe99669
commit a7ec0ed587
4 changed files with 40 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
roles/kubernetes/master/defaults/main/main.yml
View File

@@ -76,6 +76,16 @@ audit_policy_name: audit-policy
audit_policy_hostpath: "{{ audit_policy_file | dirname }}"
audit_policy_mountpath: "{{ audit_policy_hostpath }}"
# audit webhook support
kubernetes_audit_webhook: false
# path to audit webhook config file
audit_webhook_config_file: "{{ kube_config_dir }}/audit-policy/apiserver-audit-webhook-config.yaml"
audit_webhook_server_url: "https://audit.app"
audit_webhook_mode: batch
audit_webhook_batch_max_size: 100
audit_webhook_batch_max_wait: 1s
# Limits for kube components
kube_controller_memory_limit: 512M
kube_controller_cpu_limit: 250m