1.2.18 Ensure that the --audit-log-path argument is set

[scfast]

Profile Applicability:
• Level 1 - Master Node

Description:
Enable auditing on the Kubernetes API Server and set the desired audit log path.

Rationale:
Auditing the Kubernetes API Server provides a security-relevant chronological set of
records documenting the sequence of activities that have affected system by individual
users, administrators or other components of the system. Even though currently,
Kubernetes provides only basic audit capabilities, it should be enabled. You can enable
it by setting an appropriate audit log path.

Impact:
None

Audit:
Run the following command on the Control Plane node:
ps -ef | grep kube-apiserver
Verify that the --audit-log-path argument is set as appropriate.

Default Value:
By default, auditing is not enabled.

References:

1. https://kubernetes.io/docs/admin/kube-apiserver/
2. https://kubernetes.io/docs/concepts/cluster-administration/audit/
3. API Audit Logging kubernetes/enhancements#22