API endpoints logging constraints¶

With regard to audit logging, for reasons having to do with system security a number of MKE API endpoints are either ignored or have their information redacted.

API endpoints ignored¶

The following API endpoints are ignored since they are not considered security events and can create a large amount of log entries:

/_ping
/ca
/auth
/trustedregistryca
/kubeauth
/metrics
/info
/version\*
/debug
/openid_keys
/apidocs
/kubernetesdocs
/manage

API endpoints information redacted¶

For security purposes, information for the following API endpoints is redacted from the audit logs:

/secrets/create (POST)
/secrets/{id}/update (POST)
/swarm/join (POST)
/swarm/update (POST) -/auth/login (POST)
Kubernetes secrets create/update endpoints