{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/27087","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/27087/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/27087/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/27087/events","html_url":"https://github.com/kubernetes/kubernetes/pull/27087","id":159284405,"number":27087,"title":"Basic audit log","user":{"login":"soltysh","id":576341,"avatar_url":"https://avatars.githubusercontent.com/u/576341?v=3","gravatar_id":"","url":"https://api.github.com/users/soltysh","html_url":"https://github.com/soltysh","followers_url":"https://api.github.com/users/soltysh/followers","following_url":"https://api.github.com/users/soltysh/following{/other_user}","gists_url":"https://api.github.com/users/soltysh/gists{/gist_id}","starred_url":"https://api.github.com/users/soltysh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/soltysh/subscriptions","organizations_url":"https://api.github.com/users/soltysh/orgs","repos_url":"https://api.github.com/users/soltysh/repos","events_url":"https://api.github.com/users/soltysh/events{/privacy}","received_events_url":"https://api.github.com/users/soltysh/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/area/security","name":"area/security","color":"d4c5f9"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/cla:%20yes","name":"cla: yes","color":"bfe5bf"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/release-note-label-needed","name":"release-note-label-needed","color":"db5a64"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/size/L","name":"size/L","color":"ee9900"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/team/cluster","name":"team/cluster","color":"d2b48c"}],"state":"open","locked":false,"assignee":{"login":"lavalamp","id":647318,"avatar_url":"https://avatars.githubusercontent.com/u/647318?v=3","gravatar_id":"","url":"https://api.github.com/users/lavalamp","html_url":"https://github.com/lavalamp","followers_url":"https://api.github.com/users/lavalamp/followers","following_url":"https://api.github.com/users/lavalamp/following{/other_user}","gists_url":"https://api.github.com/users/lavalamp/gists{/gist_id}","starred_url":"https://api.github.com/users/lavalamp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lavalamp/subscriptions","organizations_url":"https://api.github.com/users/lavalamp/orgs","repos_url":"https://api.github.com/users/lavalamp/repos","events_url":"https://api.github.com/users/lavalamp/events{/privacy}","received_events_url":"https://api.github.com/users/lavalamp/received_events","type":"User","site_admin":false},"milestone":null,"comments":2,"created_at":"2016-06-08T22:02:03Z","updated_at":"2016-06-08T22:57:00Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/kubernetes/kubernetes/pulls/27087","html_url":"https://github.com/kubernetes/kubernetes/pull/27087","diff_url":"https://github.com/kubernetes/kubernetes/pull/27087.diff","patch_url":"https://github.com/kubernetes/kubernetes/pull/27087.patch"},"body":"Fixes #2203 by introducing simple audit logging, including the information about impersonation. We currently have something identical in openshift, but I'm open to any suggestions. Sample logs look like that:\r\n\r\nas `<self>`:\r\n```\r\nAUDIT: id=\"75114bb5-970a-47d5-a5f1-1e99cea0574c\" ip=\"127.0.0.1\" method=\"GET\" user=\"test-admin\" as=\"<self>\" namespace=\"openshift\" uri=\"/api/v1/namespaces/openshift/pods/python\"\r\nAUDIT: id=\"75114bb5-970a-47d5-a5f1-1e99cea0574c\" response=200\r\n```\r\n\r\nas user:\r\n```\r\nAUDIT: id=\"b0a443ae-f7d8-408c-a355-eb9501fd5c59\" ip=\"192.168.121.118\" method=\"GET\" user=\"system:admin\" as=\"test-admin\" namespace=\"openshift\" uri=\"/api/v1/namespaces/openshift/pods/python\"\r\nAUDIT: id=\"b0a443ae-f7d8-408c-a355-eb9501fd5c59\" response=200\r\n```\r\n\r\n```release-note\r\n* Add basic audit logging\r\n```\r\n\r\n@ericchiang @smarterclayton @roberthbailey @erictune @ghodss \r\n\r\n[![Analytics](https://kubernetes-site.appspot.com/UA-36037335-10/GitHub/.github/PULL_REQUEST_TEMPLATE.md?pixel)]()\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/224756130","html_url":"https://github.com/kubernetes/kubernetes/pull/27087#issuecomment-224756130","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/27087","id":224756130,"user":{"login":"k8s-bot","id":12551979,"avatar_url":"https://avatars.githubusercontent.com/u/12551979?v=3","gravatar_id":"","url":"https://api.github.com/users/k8s-bot","html_url":"https://github.com/k8s-bot","followers_url":"https://api.github.com/users/k8s-bot/followers","following_url":"https://api.github.com/users/k8s-bot/following{/other_user}","gists_url":"https://api.github.com/users/k8s-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/k8s-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/k8s-bot/subscriptions","organizations_url":"https://api.github.com/users/k8s-bot/orgs","repos_url":"https://api.github.com/users/k8s-bot/repos","events_url":"https://api.github.com/users/k8s-bot/events{/privacy}","received_events_url":"https://api.github.com/users/k8s-bot/received_events","type":"User","site_admin":false},"created_at":"2016-06-08T22:57:00Z","updated_at":"2016-06-08T22:57:00Z","body":"GCE e2e build/test **passed** for commit 752c551c39be25f16e03d37bec8a3c2567467370.\n* [Build Log](http://pr-test.k8s.io/27087/kubernetes-pull-build-test-e2e-gce/43860/build-log.txt)\n* [Test Artifacts](https://console.developers.google.com/storage/browser/kubernetes-jenkins/pr-logs/pull/27087/kubernetes-pull-build-test-e2e-gce/43860/artifacts/)\n* [Internal Jenkins Results](http://goto.google.com/prkubekins/job/kubernetes-pull-build-test-e2e-gce//43860)\n"}}
{"actor":{"display_login":"k8s-bot"}}