Mount audit log file to disk (#3335)

Azure · Jul 13, 2018 · bdebc29 · bdebc29
1 parent 81cf27c
commit bdebc29
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/parts/k8s/manifests/kubernetesmaster-kube-apiserver.yaml b/parts/k8s/manifests/kubernetesmaster-kube-apiserver.yaml
@@ -23,6 +23,8 @@ spec:
           readOnly: true
         - name: "sock"
           mountPath: "/opt"
+        - name: "auditlog"
+          mountPath: "/var/log/kubeaudit"
   volumes:
     - name: "etc-kubernetes"
       hostPath:
@@ -36,3 +38,6 @@ spec:
     - name: "sock"
       hostPath:
         path: "/opt"
+    - name: "auditlog"
+      hostPath:
+        path: "/var/log/kubeaudit"
diff --git a/pkg/acsengine/defaults-apiserver.go b/pkg/acsengine/defaults-apiserver.go
@@ -15,7 +15,7 @@ func setAPIServerConfig(cs *api.ContainerService) {
 		"--advertise-address":          "<kubernetesAPIServerIP>",
 		"--allow-privileged":           "true",
 		"--anonymous-auth":             "false",
-		"--audit-log-path":             "/var/log/audit.log",
+		"--audit-log-path":             "/var/log/kubeaudit/audit.log",
 		"--insecure-port":              "8080",
 		"--secure-port":                "443",
 		"--service-account-lookup":     "true",