All Products
Search
Document Center

ActionTrail:Auditable events of Container Service for Kubernetes

Last Updated:Nov 21, 2022

Container Service for Kubernetes (ACK) is integrated with ActionTrail. In the ActionTrail console, you can query the user-initiated events that are generated when you manage ACK resources. ActionTrail can deliver the user-initiated events to Logstores in Log Service or Object Storage Service (OSS) buckets. This way, you can audit the events in real time and troubleshoot issues.

ActionTrail records the user-initiated events that are generated when you manage cloud resources by calling API operations or in the Alibaba Cloud Management Console. The following table describes the user-initiated events of ACK that you can query in the ActionTrail console. The missing descriptions will be provided in the future.

Event

Description

AddOrUpdateAlertContact

An alert contact is updated.

AddOrUpdateAlertContactGroup

An alert group is updated.

AttachInstances

An existing instance is added to an ACK cluster.

CancelClusterUpgrade

The upgrade of an ACK cluster is canceled.

CancelComponentUpgrade

The upgrade of a component in an ACK cluster is canceled.

CancelTask

A task is canceled.

CancelWorkflow

A running workflow is canceled.

CreateAutoscalingConfig

Auto scaling configuration is created.

CreateCluster

An ACK cluster is created.

CreateClusterByResourcesGroup

An ACK cluster is created.

CreateClusterNodePool

A node pool is created.

CreateClusterToken

A token is created for an ACK cluster.

CreateEdasClusterRole

An Enterprise Distributed Application Service (EDAS) cluster role is created.

CreateEdasClusterRoleBinding

An EDAS cluster role binding is created.

CreateEdgeMachine

A cloud-native box is activated.

CreateKubernetesTrigger

A trigger is created.

CreatePSPBinding

A Pod Security Policy binding is created.

CreateResourcesSystemTags

System tags are added to resources.

CreateTemplate

A template is created.

CreateTrigger

A trigger is created.

CreateTriggerHook

An application trigger is generated.

DeleteAlertContact

An alert contact is deleted.

DeleteAlertContactGroup

An alert group is deleted.

DeleteCluster

An ACK cluster is deleted.

DeleteClusterNode

A node is deleted from an ACK cluster.

DeleteClusterNodepool

A node pool is deleted.

DeleteClusterNodes

Worker nodes are removed from an ACK cluster.

DeleteEdgeMachine

A cloud-native box is deleted.

DeleteKubernetesTrigger

A trigger is deleted.

DeletePolicyInstance

A policy instances is deleted from an ACK cluster.

DeleteTemplate

A template is deleted.

DeleteTrigger

A trigger is deleted.

DeleteTriggerHook

An application trigger is deleted.

DeployPolicyInstance

A policy instance is deployed in an ACK cluster.

DescirbeWorkflow

The information about all existing workflows is queried.

DescribeAddons

The details of the components that are installed in an ACK cluster are queried.

DescribeApiVersion

The API version is queried.

DescribeClusterAddonMetadata

The metadata of a component is queried.

DescribeClusterAddonsUpgradeStatus

The upgrade status of components in an ACK cluster is queried.

DescribeClusterAddonsVersion

The components that are installed in an ACK cluster are queried.

DescribeClusterAddonUpgradeStatus

The upgrade status of components in an ACK cluster is queried.

DescribeClusterAttachScripts

The scripts that are used to add nodes to an ACK cluster are queried.

DescribeClusterCerts

The certificates of an ACK cluster are queried.

DescribeClusterDetail

The details of an ACK cluster are queried.

DescribeClusterEndpoints

The access information of an ACK cluster is queried.

DescribeClusterEndpointsInner

The endpoints of an ACK cluster are queried.

DescribeClusterEvents

The events in an ACK cluster are queried.

DescribeClusterHosts

The hosts in an ACK cluster are queried.

DescribeClusterLogs

The logs of an ACK cluster are queried.

DescribeClusterNamespaces

The namespaces of an ACK cluster are queried.

DescribeClusterNodePoolDetail

The details of a node pool are queried.

DescribeClusterNodePools

The node pools in an ACK cluster are queried.

DescribeClusterNodes

The nodes in an ACK cluster are queried.

DescribeClusterResources

All resources in an ACK cluster are queried.

DescribeClusters

The details of all ACK clusters are queried.

DescribeClusterServices

The details of the current Services in an ACK cluster are queried.

DescribeClustersV1

The information about all clusters within your Alibaba Cloud account is queried, including Kubernetes clusters and Swarm clusters.

DescribeClusterTasks

The tasks in an ACK cluster are queried.

DescribeClusterTokens

The tokens of an ACK cluster are queried.

DescribeClusterUserKubeconfig

The kubeconfig file of an ACK cluster is queried. The kubeconfig file contains the details of the current user and is used to configure access to a cluster.

DescribeClusterV2UserKubeconfig

The access configurations of an ACK cluster are queried.

DescribeEdasClusterToken

The tokens of an EDAS cluster are queried.

DescribeEdgeMachineModels

The models of cloud-native boxes are queried.

DescribeEdgeMachines

Cloud-native boxes are queried.

DescribeEdgeMachineTunnelConfigDetail

The tunnel configurations of a cloud-native box are queried.

DescribeEvents

The operations performed by users are queried.

DescribeExternalAgent

The agent configurations of a registered cluster are queried.

DescribeImages

Available images are queried.

DescribeInnerClusterToken

The cluster access token of the current user is queried.

DescribeK8sResourceGroup

The information about a Kubernetes resource group is queried.

DescribeKubernetesClusterScaleMeta

The scale-out metadata of an ACK cluster is queried.

DescribeKubernetesTemplate

A Kubernetes template is queried.

DescribeKubernetesTemplates

Kubernetes templates are queried.

DescribeKubernetesVersionMetadata

The information about a Kubernetes version supported by ACK is queried.

DescribeNodePoolVuls

The vulnerabilities in a node pool are queried.

DescribePolicies

Policies are queried.

DescribePolicyDetails

The information about a policy is queried.

DescribePolicyGovernanceInCluster

The information about policies in an ACK cluster is queried.

DescribePolicyInstances

Policy instances are queried.

DescribePolicyInstancesStatus

The information about a policy instance in an ACK cluster is queried.

DescribeServiceContainers

Service containers are queried.

DescribeTaskInfo

The details of a task are queried.

DescribeTemplateAttribute

The details of an orchestration template are queried.

DescribeTemplates

Application deployment templates are queried.

DescribeTrigger

The information about a trigger is queried.

DescribeUserContainers

User containers are queried.

DescribeUserPermission

The permissions that are granted to a RAM user on an ACK cluster are queried.

DescribeUserQuota

Resource quotas are queried.

DescribeWorkflows

The details of a workflow are queried.

FixNodePoolVuls

Vulnerabilities in a node pool are fixed.

GetClusterProjects

Applications in an ACK cluster are queried

GetKubernetesTrigger

The information about a trigger is queried.

GetProjectEvents

The events that occur in a project are queried.

GetTriggerHook

The triggers of an application are queried.

GetUpgradeStatus

The upgrade status of an ACK cluster is queried.

GetUserInstanceResource

The instance resources within your Alibaba Cloud account are queried.

GrantPermissions

A RAM user is granted the permissions to manage ACK clusters.

InstallApplication

An application is installed.

InstallClusterAddons

Components are installed in an ACK cluster.

ListTagResources

The tags of specified resources are queried.

MigrateCluster

An ACK cluster is migrated.

ModifyCluster

The configurations of an ACK cluster are modified.

ModifyClusterAddon

The configurations of a component in an ACK cluster are modified.

ModifyClusterConfiguration

A control plane component in a managed cluster is modified.

ModifyClusterNodePool

The configurations of a node pool are modified.

ModifyClusterTags

The tags of the current ACK cluster are modified.

ModifyNodePoolNodeConfig

The configurations of nodes in a node pool are modified.

ModifyPolicyInstance

A policy instance in an ACK cluster is modified.

OpenAckService

ACK is activated.

OpenService

A service is activated.

PauseClusterUpgrade

The upgrade of an ACK cluster is paused.

PauseComponentUpgrade

The upgrade of a component is paused.

PauseTask

A task is paused.

QueryAlertContact

An alert contact is queried.

QueryAlertContactGroup

An alert group is queried.

QueryUserClusterResource

The cluster resources within your Alibaba Cloud account are queried.

RemoveClusterNodes

Nodes are removed from an ACK cluster.

RemoveWorkflow

A workflow is deleted.

RepairClusterNodePool

Issues on nodes in a node pool are fixed.

ResetClusterNode

A node is reset.

ResumeComponentUpgrade

The upgrade of a component is resumed.

ResumeTask

A task is resumed.

ResumeUpgradeCluster

The upgrade of an ACK cluster is resumed.

ScaleCluster

An ACK cluster is scaled out.

ScaleClusterNodePool

A node pool is scaled out.

ScaleOutCluster

Worker nodes are added to an ACK cluster that can be deployed across multiple zones.

StartAlert

An alert rule is enabled.

StartWorkflow

A workflow is created.

StopAlert

An alert rule is disabled.

SyncClusterNodePool

A node pool is synchronized.

TagResources

Tags are attached to resources.

TagResourcesSystemTags

System tags are attached to resources.

UninstallApplication

An application is uninstalled.

UnInstallClusterAddons

Components in an ACK cluster are uninstalled.

UntagResources

Tags are detached from resources.

UntagResourcesSystemTags

System tags are detached from resources.

UpdateContactGroupForAlert

An alert group is updated.

UpdateEdasClusterRoleBinding

An EDAS cluster role binding is updated.

UpdateK8sClusterUserConfigExpire

The expiration time of user-defined configurations is updated.

UpdateTemplate

An application deployment template is updated.

UpgradeCluster

An ACK cluster is upgraded.

UpgradeClusterAddons

Components in an ACK cluster are upgraded.

UpgradeClusterComponents

Components in an ACK cluster are upgraded.

UpgradeClusterNodepool

A node pool is upgraded.

ValidateClusterCreationRequest

A request for creating an ACK cluster is verified.

DescribeCluster

None

DescribeSubAccountHelmPermission

None

DescribeTasks

None

DescribeUserInstances

None

GetAlertHistory

None

QuerySubaccountPermissionResources

None