kubesphere / kubesphere/kubekey

Add a possibility to use existing Webhook for Audit instead embedded on install

Open
#2,002 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
2.9k
Forks
834
Avg merge
1d 5h
Merged PRs (30d)
31

Description

### Your current KubeKey version

kk version: &version.Info{Major:"3", Minor:"0", GitVersion:"v3.0.10", GitCommit:"3e381c6d5556117d132326b58c5177e0b0e839b6", GitTreeState:"clean", BuildDate:"2023-07-28T06:08:59Z", GoVersion:"go1.19.2", Compiler:"gc", Platform:"linux/amd64"}

### Describe this feature

We can have a possibility to enable the kubernetes auditing using the webook inside of apiserver and so on like https://www.kubesphere.io/docs/v3.4/toolbox/auditing/auditing-receive-customize/

But it works just if the team enter in the server and run kubectl but in kubesphere is not possible to audit it if we not enable the auditing to true inside of clusterconfiguration or via YAML. Enabling the auditing we need deploy many application like opensearch, webhook and sometimes we not have enough resources.

### Describe the solution you'd like

It is possible enable the auditing from Kubesphere to existing webhook instead use the Kubesphere Audit Embedded? It will be great and we can centralize it for the logs coming from kubectl and kubesphere.

As example, I have a existing webhook like http://mywebhoob.net/k8s-audit and I would to use some configuration in kubesphere to send all logs to their webhook

### Additional information

_No response_

Contributor guide

No contributing guide indexed for this repository

Research direction

No file or test is named. Start by tracing KubeKey's existing embedded audit configuration and the clusterconfiguration/YAML path; determine where an external webhook could be configured. Done means auditing can send Kubernetes and KubeSphere audit logs to an existing webhook without requiring the embedded audit stack.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.