From f3e4d7cce00792febf60b92e4d1940caebc0fadf Mon Sep 17 00:00:00 2001 From: Leo Di Donato Date: Fri, 24 May 2019 12:13:36 +0200 Subject: [PATCH] docs(examples): k8s audit config --- examples/k8s_audit_config/README.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/examples/k8s_audit_config/README.md b/examples/k8s_audit_config/README.md index 22f49efc..0d7ce3f2 100644 --- a/examples/k8s_audit_config/README.md +++ b/examples/k8s_audit_config/README.md @@ -1,8 +1,9 @@ # Introduction -This page describes how to get K8s Audit Logging working with Falco for either K8s 1.11, using static audit policies/sinks, or 1.13, with dynamic audit policies/sinks using AuditSink objects. +This page describes how to get [Kubernetes Auditing](https://kubernetes.io/docs/tasks/debug-application-cluster/audit) working with Falco. +Either using static audit backends in Kubernetes 1.11, or in Kubernetes 1.13 with dynamic sink which configures webhook backends through an AuditSink API object. -## K8s 1.11 Instructions +## Instructions for Kubernetes 1.11 The main steps are: @@ -56,7 +57,7 @@ $ K8s audit events will then be routed to the falco daemonset within the cluster, which you can observe via `kubectl logs -f $(kubectl get pods -l app=falco-example -o jsonpath={.items[0].metadata.name})`. -## K8s 1.13 Instructions +## Instructions for Kubernetes 1.13 The main steps are: