andrewlow / kube-audit-webhook Goto Github PK

The code app.js currently simply drop the data that comes from the audit log webhook on stdout - assuming that there is a logging agent that will pick up the container output and forward to the logging service.

The IBM Cloud Activity Tracker with LogDNA service is the audit service provided by IBM Cloud. User actions against cloud resources are automatically sent to the service providing an audit trail.

There is some debate if kube audit logs should be stored in the Activity Tracker (AT) service or not. Currently audit-events that are sent to AT are generated exclusively by IBM services operating on resources on behalf of a customer action. The IKS master is run/managed by IBM, but the audit events are more kube-centric than IBM Cloud centric.

In any case - this entire project is a work-around to get the data out of the IKS master API server and get it into the customers hands. It is reasonable to allow the customer to send that data where they want.