Querying the Audit Log List of the Kubernetes Cluster

Function

This API is used to query the audit log list of the Kubernetes cluster.

Authorization Information

Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.

If you are using role/policy-based authorization, see Permissions Policies and Supported Actions for details on the required permissions.
If you are using identity policy-based authorization, no identity policy-based permission required for calling this API.

URI

GET /v5/{project_id}/container/kubernetes/cluster/audit-logs

**Table 1** Path Parameters
Parameter	Mandatory	Type	Description
project_id	Yes	String	The project ID.

**Table 2** Query Parameters
Parameter	Mandatory	Type	Description
enterprise_project_id	No	String	Specifies the ID of the enterprise project that the server belongs to. An enterprise project can be configured only after the enterprise project function is enabled. Enterprise project ID. The value 0 indicates the default enterprise project. To query servers in all enterprise projects, set this parameter to all_granted_eps. If you have only the permission on an enterprise project, you need to transfer the enterprise project ID to query the server in the enterprise project. Otherwise, an error is reported due to insufficient permission.
cluster_id	Yes	String	Cluster ID
cluster_name	No	String	Cluster name
host_name	No	String	Host name
host_id	No	String	Host ID.
host_ip	No	String	Host IP address.
verb	No	String	Actions recorded in audit logs. The options are as follows: create: resource creation delete: resource deletion deletecollection: resource collection deletion in batches patch: resource modification update: resource update get: resource obtaining list: resource list obtaining watch: resource monitoring
start_time	Yes	Long	Minimum time for querying logs
end_time	Yes	Long	Maximum time for querying logs
limit	Yes	Integer	Number of records displayed on each page. The default value is 10.
offset	Yes	Integer	Offset, which specifies the start position of the record to be returned. The value must be a number no less than 0. The default value is 0.
line_num	No	String	Page number to be transferred when CCE cluster logs are queried.

Request Parameters

**Table 3** Request header parameters
Parameter	Mandatory	Type	Description
X-Auth-Token	Yes	String	User token. It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the user token.

Response Parameters

Status code: 200

**Table 4** Response body parameters
Parameter	Type	Description
total_num	Integer	Total number of log events.
data_list	Array of ClusterAuditLogResponseInfo objects	Audit log list of the Kubernetes cluster

**Table 5** ClusterAuditLogResponseInfo
Parameter	Type	Description
cluster_name	String	Cluster name
cluster_id	String	Cluster ID
time	Long	Time when a log is generated
content	String	Audit log content, which is a string in JSON format.
cluster_type	String	Cluster type. Its value can be: cce: CCE cluster ali: Alibaba Cloud cluster tencent: Tencent Cloud cluster azure: Microsoft Azure Cloud cluster aws: AWS Cloud cluster self_built_hw: customer-built cluster on Huawei Cloud self_built_idc: IDC on-premises cluster
host_id	String	Server ID.
host_name	String	Host name
host_ip	String	Host IP address.
line_num	String	Row number of the CCE cluster log

Example Requests

None

Example Responses

Status code: 200

Request succeeded.

{
  "total_num" : 1,
  "data_list" : [ {
    "cluster_name" : "ywk-55555",
    "cluster_id" : "b075094b-d21a-499a-9006-624089c94402",
    "time" : 1814080859608,
    "content" : "listImageTagscdcssd-2/log4j:*, Method: GET Url=/v2/manage/namespaces/cdcssd-2/repos/log4j/tags, Reason",
    "cluster_type" : "cce",
    "host_id" : "16***0dc-94cb-4ca3-9087-06***cd168c1",
    "host_name" : 111,
    "host_ip" : "192.168.0.93"
  } ]
}