Tuesday, November 19 • 10:55am - 11:30am
Making the Most Out of Kubernetes Audit Logs - Laurent Bernaille & Robert Boll, Datadog

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
The Kubernetes audit logs are a rich source of information: all of the calls made to the API server are stored, along with additional metadata such as usernames, timings, and source IPs. They help to answer questions such as “What is overloading my control plane?” or “Which sequence of events led to this problematic situation?”. These questions are hard to answer otherwise—especially in large clusters. At Datadog, we have been running clusters with 1000+ nodes for more than a year and during that time, the audit logs have proved invaluable.

In this talk, we will first introduce the audit logs, explain how they are configured, and review the type of data they store. We will then demo a functioning setup and show a few different types of analysis techniques. Finally, we will describe in detail several scenarios where they have helped us to diagnose complex problems.


Laurent Bernaille

Staff Engineer, Datadog
Laurent Bernaille worked several years as a consultant specialized in cloud, containers, and automation and helped organizations migrate to the public cloud, adopt containers and improve their deployment pipelines. He is now Staff Engineer at Datadog and works in the Compute team... Read More →

Robert Boll

Engineering Manager, Runtime Platforms, Datadog
Rob is a software engineer with a keen interest in cloud infrastructure and delivery. He is currently an Engineering Manager at Datadog, working on the infrastructure platform and scaling global compute infrastructure built on Kubernetes.

Tuesday November 19, 2019 10:55am - 11:30am
Room 6C - San Diego Convention Center Upper Level