Do you use Kubernetes and look for accessing your audits logs?

Public Cloud
1

Try our new integrated feature between ManagedKubernetes® Service and Logs Data Platform.

For the subscription to your ManagedKubernetes® cluster's service audit logs you will be charged at standard price for the use of Logs Data Platform services.

Customers looking for details about Logs Data Platform pricing can refer to the Logs Data Platform product page

What are Managed Kubernetes® Service Audit Logs?

Managed Kubernetes® Service Audit logs provides a security-relevant, chronological set of records documenting the sequence of actions in your cluster.

The cluster audits the activities generated by users, by applications that use the Kubernetes API, and by the control plane itself.

You will be able to audit:

  • Troubleshoot authentication issue
  • Monitor changes on configmap secrets and resources

By subscribing to your ManagedKubernetes® clusters Audit logs you can access them in a single place with our managed logs service "Logs Data Platform", agent-free, so you can:

  • define retention period of your choice,

  • explore your logs available in sub-second, create dashboards and alerts with fine grain access policies,

  • integrate your logs using OpenSearch API.

The goal of the BETA is to collect feedbacks on the format of audits logs.

Capture d’écran 2024-09-17 à 17.07.59.jpg844×461 75.3 KB

Note that this feature only concerns control plane (managed by OVHcloud). Customers looking to use Logs Data Platform to gather data-plane (pods related) logs can already do so following this tutorial.

🛠️ How it works?

Managed Kubernetes® Service Audit Logs are now accessible to customers thanks to an integration made between Managed Kubernetes® Service and Logs Data Platform.

It is fully managed by OVHcloud. You just have to subscribe from your ManagedKubernetes® clusters and define the target data stream of your Logs Data Platform service where you want to retrieve them.

When entering the Beta we will provide you with the user guide explaining how to:

  • Subscribe to the Service audit logs or a single ManagedKubernetes® cluster through the "Logs" in your cluster control plan or using OVHCloud Kube API,

  • Manage your service logs subscription per streams using OVHCloud Log Data Platform control plane or API,

  • Use your Managed Kubernetes® cluster's Service audit logs with Log Data Platform features for different use cases:

    • Search (query) through Graylog web interface on single or multiple clusters audit logs with multiple parameters to analyze

    • Design dashboards with Graylog web interface with multiple widgets so that important information is just a click away

    • Trigger an email alert when certain thresholds are exceeded, or suspicious patterns are emerging.

    • Generate a daily archive to keep your Managed Kubernetes audits logs files for years to comply with security audits, GDPR, connection history, etc...

    • Integrate your Managed Kubernetes audits logs with your observability stack or/and leverage OpenSearch ecosystem

Capture d’écran 2024-09-17 à 17.09.05.jpg935×880 241 KB

🚀 Start Now!

Follow this user guide.

🙋 How to get support and share your feedback?

A discord channel is available on the OVHcloud Discord to get assistance from Logs-Data-Platform team: # logs-data-platform channel.

Limitation for the Beta

The Managed Kubernetes® Service Audit logs are not available for cluster deployed in US region as Logs Data Platform is not deployed yet in this region. For more information please consult the LDP roadmap item here.