Description of problem: Config audit log in master-config.yaml, then restart openshift master service, the audit log file have not be created as expected. Setup audit in master-config file: auditConfig: auditFilePath: "/var/log/audit-ocp.log" enabled: true maximumFileRetentionDays: 10 maximumFileSizeMegabytes: 10 maximumRetainedFiles: 10 openshift v3.7.0-0.127.0 kubernetes v1.7.0+80709908fd etcd 3.2.1 How reproducible: Always Steps to Reproduce: As description above. Actual results: audit log have not be created. Expected results: audit log be created.
There was a bug that was resolved when enabling advanced audit [1]. You need to wait for a build with that in. [1] https://github.com/openshift/origin/pull/16128
Just checked builds starting from 3.7.0-0.128.0] should have that fix.
We will test it after puddle:3.7.0-0.128.0 ready for using.
Verified with ocp version: openshift v3.7.0-0.131.0 kubernetes v1.7.0+80709908fd etcd 3.2.1 Verified steps are following recreate steps.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:3188