<p>I am trying to implement auditing policy
My yaml</p>

<pre><code>~/.minikube/addons$ cat audit-policy.yaml 
# Log all requests at the Metadata level.
apiVersion: audit.k8s.io/v1beta1
kind: Policy
rules:
- level: Metadata
</code></pre>

<p>Pods got stuck</p>

<pre><code>minikube start  --extra-config=apiserver.Authorization.Mode=RBAC --extra-config=apiserver.Audit.LogOptions.Path=/var/logs/audit.log   --extra-config=apiserver.Audit.PolicyFile=/etc/kubernetes/addons/audit-policy.yaml
😄  minikube v0.35.0 on linux (amd64)
💡  Tip: Use 'minikube start -p &lt;name&gt;' to create a new cluster, or 'minikube delete' to delete this one.
🔄  Restarting existing virtualbox VM for "minikube" ...
⌛  Waiting for SSH access ...
📶  "minikube" IP address is 192.168.99.101
🐳  Configuring Docker as the container runtime ...
✨  Preparing Kubernetes environment ...
    ▪ apiserver.Authorization.Mode=RBAC
    ▪ apiserver.Audit.LogOptions.Path=/var/logs/audit.log
    ▪ apiserver.Audit.PolicyFile=/etc/kubernetes/addons/audit-policy.yaml
🚜  Pulling images required by Kubernetes v1.13.4 ...
🔄  Relaunching Kubernetes v1.13.4 using kubeadm ... 
⌛  Waiting for pods: apiserver
</code></pre>

<p>Why?</p>

<p>I can do this</p>

<pre><code>minkub start
</code></pre>

<p>Then I go for minikube ssh</p>

<pre><code>$ sudo bash
$ cd /var/logs
bash: cd: /var/logs: No such file or directory
ls
cache  empty  lib  lock  log  run  spool  tmp
</code></pre>

<p>How to apply extra-config?</p>

Richard Rublev
<p>I don't have good news. Although you made some mistakes with the <code>/var/logs</code> it does not matter in this case, as there seems to be no way of implement auditing policy in Minikube (I mean there is, few ways at least but they all seem to fail).</p>

<p>You can try couple of ways presented in GitHub issues and other links I will provide, but I tried probably all of them and they do not work with current Minikube version. You might try to make this work with earlier versions maybe, as it seems like at some point it was possible with the way you have provided in your question, but as for now in the updated version it is not. Anyway I have spend some time on trying the ways from the links and couple of my own ideas but no success, maybe you will be able to find the missing piece. </p>

<p>You can find more information in this documents:</p>

<p><a href="https://github.com/kubernetes/minikube/issues/1609" rel="nofollow noreferrer">Audit Logfile Not Created</a></p>

<p><a href="https://developer.ibm.com/recipes/tutorials/service-accounts-and-auditing-in-kubernetes/" rel="nofollow noreferrer">Service Accounts and Auditing in Kubernetes</a></p>

<p><a href="https://github.com/kubernetes/minikube/issues/2934" rel="nofollow noreferrer">fails with -extra-config=apiserver.authorization-mode=RBAC and audit logging: timed out waiting for kube-proxy</a></p>

<p><a href="https://stackoverflow.com/questions/51602129/how-do-i-enable-an-audit-log-on-minikube">How do I enable an audit log on minikube?</a></p>

<p><a href="https://github.com/kubernetes/minikube/issues/2741" rel="nofollow noreferrer">Enable Advanced Auditing Webhook Backend Configuration</a></p>
