Content

Target customers: 1. Kubernetes maintenance engineers that need to audit Kubernetes clusters operations. 2. Application developers that need to track changes. 3. Security engineers that need to monitor the status of clusters and detect attacks such as intrusions and private key leaks. Features released: 1. To guarantee the security of Kubernetes clusters, Alibaba Cloud Container Service for Kubernetes has enabled the audit log function for API servers by default. A audit log policy is also created. Visits from users that match the policy and visits from components to the API servers are logged. 2. The built-in component Logtail of Kubernetes clusters will automatically import audit logs of API servers to Alibaba Cloud Log Service. 3. Log Service then uses the audit logs to create indexes and charts. 4. The Container Service console is now connected to Log Service, allowing cluster administrators to directly log on to the console to view charts and metrics created from the audit logs. 5. Cluster administrators can also log on to the Log Service console to set alerts and customize log analysis.