Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Complains that file does not exist... But it does #42

Closed
chrissound opened this issue Aug 1, 2018 · 3 comments
Closed

Complains that file does not exist... But it does #42

chrissound opened this issue Aug 1, 2018 · 3 comments

Comments

@chrissound
Copy link

osboxes@master:/var/log/pods$ sudo tail -f fdb932ada5768a1891d839f8cf2306a9/kube-apiserver/31.log 
{"log":"      --tls-private-key-file string                             File containing the default x509 private key matching --tls-cert-file.\n","stream":"stderr","time":"2018-08-01T17:04:12.869978989Z"}
{"log":"      --tls-sni-cert-key namedCertKey                           A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. If no domain patterns are provided, the names of the certificate are extracted. Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the --tls-sni-cert-key multiple times. Examples: \"example.crt,example.key\" or \"foo.crt,foo.key:*.foo.com,foo.com\". (default [])\n","stream":"stderr","time":"2018-08-01T17:04:12.869981784Z"}
{"log":"      --token-auth-file string                                  If set, the file that will be used to secure the secure port of the API server via token authentication.\n","stream":"stderr","time":"2018-08-01T17:04:12.869985782Z"}
{"log":"  -v, --v Level                                                 log level for V logs\n","stream":"stderr","time":"2018-08-01T17:04:12.869988586Z"}
{"log":"      --version version[=true]                                  Print version information and quit\n","stream":"stderr","time":"2018-08-01T17:04:12.869991231Z"}
{"log":"      --vmodule moduleSpec                                      comma-separated list of pattern=N settings for file-filtered logging\n","stream":"stderr","time":"2018-08-01T17:04:12.86999605Z"}
{"log":"      --watch-cache                                             Enable watch caching in the apiserver (default true)\n","stream":"stderr","time":"2018-08-01T17:04:12.869998906Z"}
{"log":"      --watch-cache-sizes strings                               List of watch cache sizes for every resource (pods, nodes, etc.), comma separated. The individual override format: resource[.group]#size, where resource is lowercase plural (no version), group is optional, and size is a number. It takes effect when watch-cache is enabled. Some resources (replicationcontrollers, endpoints, nodes, pods, services, apiservices.apiregistration.k8s.io) have system defaults set by heuristics, others default to default-watch-cache-size\n","stream":"stderr","time":"2018-08-01T17:04:12.870002021Z"}
{"log":"\n","stream":"stderr","time":"2018-08-01T17:04:12.870005608Z"}
{"log":"error: loading audit policy file: failed to read file path \"/etc/kubernetes/audit.yaml\": open /etc/kubernetes/audit.yaml: no such file or directory\n","stream":"stderr","time":"2018-08-01T17:04:12.870008063Z"}
jjjjjjjjjjj^C
osboxes@master:/var/log/pods$ ls -altr /etc/kubernetes/audit.yaml
-rwxrwxrwx 1 root root 113 Aug  1 11:34 /etc/kubernetes/audit.yaml

I've added the following line to the api-server manifest yaml config file thingamabob:
- --audit-policy-file=/etc/kubernetes/audit.yaml

@chrissound
Copy link
Author

The file must exist in the CONTAINER..................................

@sunlintong
Copy link

The file must exist in the CONTAINER..................................

Thank you man......... I make this stupid mistake too

@chrissound
Copy link
Author

Not a stupid mistake, docs + errors reporting is not clear. Have good day!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants