Study. uk . com
  1. Home
  2. All questions
  3. Question 938

CKA study material · question 938 of 1000

Auditing is configured on an API server running as a static Pod, and the records vanish on restart. What was forgotten?

  1. Setting --audit-log-maxbackup above zero
  2. Mounting the policy and log paths in as hostPath volumes
  3. Granting the API server RBAC access to write events
  4. Adding the audit.k8s.io group to --runtime-config
Show the answer

Answer: B. Mounting the policy and log paths in as hostPath volumes

A static Pod writes into its container filesystem unless host paths are mounted, so both the policy file and the log directory have to be mounted for the records to persist.

Source: Auditing (Kubernetes) — Audit backends › Log backend

Challenge yourself on this topic → Study as cards