<p>Is it enabled by default? How could I set up an example audit log?</p>

<p>I've tried:</p>

<pre><code>minikube start --extra-config=apiserver.Authorization.Mode=RBAC --extra-config=apiserver.Audit.LogOptions.Path=/var/log/apiserver/audit.log --extra-config=apiserver.Audit.LogOptions.MaxAge=30 --extra-config=apiserver.Audit.LogOptions.MaxSize=100 --extra-config=apiserver.Audit.LogOptions.MaxBackups=5
</code></pre>

<p>I'm also busy reading through (trying out all the options might take a while as <code>minikube start ...</code> is not a quick process): <a href="https://github.com/kubernetes/minikube/issues/1609" rel="nofollow noreferrer">https://github.com/kubernetes/minikube/issues/1609</a></p>

Chris Stryczynski
<p><a href="https://github.com/kubernetes/minikube/blob/master/site/content/en/docs/Tutorials/audit-policy.md" rel="nofollow noreferrer">https://github.com/kubernetes/minikube/blob/master/site/content/en/docs/Tutorials/audit-policy.md</a></p>

<p>A bit of a workaround: </p>

<pre><code>minikube stop

mkdir -p ~/.minikube/files/etc/ssl/certs

cat &lt;&lt;EOF &gt; ~/.minikube/files/etc/ssl/certs/audit-policy.yaml
# Log all requests at the Metadata level.
apiVersion: audit.k8s.io/v1
kind: Policy
rules:
- level: Metadata
EOF

minikube start \
  --extra-config=apiserver.audit-policy-file=/etc/ssl/certs/audit-policy.yaml \
  --extra-config=apiserver.audit-log-path=-

kubectl logs kube-apiserver-minikube -n  kube-system | grep audit.k8s.io/v1
</code></pre>
