<p>I have a GKE cluster that uses a mix of Cloud IAM and cluster RBAC rules for resource access. For granularity, we use RBAC bindings for certain resources on the cluster, but I'm unable to find a place where those events are logged.</p>
<p>How do I see the logs for when cluster RBAC denies a user the permissions to do something? I can only see IAM related logs in Cloud Logging's audit logs. I'd like to know when the cluster itself denies access.</p>

<p>You can check the Kube API logs</p>
<pre><code>kubectl proxy &amp;
curl -s http://localhost:8001/logs/kube-apiserver.log
</code></pre>
<p>While GKE logs : <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/audit-logging#viewing_logs" rel="nofollow noreferrer">https://cloud.google.com/kubernetes-engine/docs/how-to/audit-logging#viewing_logs</a></p>
