Audit Policy Docs

[gambol99]

• adding some documentation on the audit policy

[chrislovecnm]

We neee to start updating the new docs and spot using this document

[chrislovecnm]

/lgtm

[k8s-github-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: chrislovecnm

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these OWNERS Files:

• OWNERS [chrislovecnm]

You can indicate your approval by writing /approve in a comment
You can cancel your approval by writing /approve cancel in a comment

[k8s-github-robot]

/test all [submit-queue is verifying that this PR is safe to merge]

[k8s-github-robot]

Automatic merge from submit-queue.

[97turbotalon]

+Note: you could use the fileAssets feature to push an advanced audit policy file on the master nodes.

Tried using fileAssests for the audit-policy file on the master and receive the following error from KOPS v1.8.0 when saving the KOPS config
error parsing config: no kind "Policy" is registered for version "audit.k8s.io/v1beta1"

Additional Information:
spec:
kubeAPIServer:
auditLogPath: /var/log/kube-apiserver-audit.log
auditLogMaxAge: 30
auditLogMaxBackups: 1
auditLogMaxSize: 100
auditPolicyFile: /srv/kubernetes/audit-policy.conf

fileAssets:

• name: audit-policy.yaml
  path: /srv/kubernetes/audit-policy.yaml
  roles: [Master]
  content: |
  kind: Policy
  apiVersion: audit.k8s.io/v1beta1
  rules:
  - level: Metadata