Dell ObjectScale 1.3 Administration Guide

View Management User audit entries on the Kubernetes command line

You can see the details of the original event on the Kubernetes command line.

1. Start a Kubernetes session and log in as a Management User.
2. List application names.

   $ kubectl get app
   NAME                  TYPE                  VERSION      OWNER   READY   AGE
   decks                 decks                 2.2.0                    6m18s
   kahm                  kahm                  2.2.0                    6m21s
   objectscale-manager   objectscale-manager   1.2.0                   18h

3. Set a variable for application name.

   APPNAME=objectscale-manager

4. Get an event.
   The event in this example shows that there was a failed login attempt for the root user.

   $ kubectl get event --field-selector involvedObject.name=$APPNAME,type=Normal -o yaml
   - apiVersion: v1
     count: 1
     eventTime: null
     firstTimestamp: "2023-02-21T18:00:21Z"
     involvedObject:
       apiVersion: app.k8s.io/v1beta1
       kind: Application
       name: objectscale-manager
       namespace: default
     kind: Event
     lastTimestamp: "2023-02-21T18:00:21Z"
     message: Management user root login failed
     metadata:
       annotations:
         eventId: urn:fedsvc:Audit:b48a3cb0-d2ac-4577-9eb9-db25211202c1
       creationTimestamp: "2023-02-21T18:00:21Z"
       generateName: fedsvc-
       labels:
         kahm/enabled: "true"
         resourceID: root
       name: fedsvc-4n5x4
       namespace: default
       resourceVersion: "5385"
       uid: d860fe1d-ed58-4b5c-a8ab-4313c046ad30
     reason: LoginFailed
     reportingComponent: ""
     reportingInstance: ""
     source:
       component: Management Service
     type: Normal