I have a Kubernetes cluster in OVH, and I need to send alerts if the API detects an authentication attempt. I know I could use a script to monitor Kubernetes audit log files and send emails if there are authentication attempts. However, the problem is that I don't have access to the master node.

So, I'm wondering if there is a solution for this.

I tried to configure my cluster to write audit logs in workers as well. I attempted to use Prometheus to send authentication alerts, but I couldn't find the right metrics to use.

Thank you.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.