Please reference https://bugzilla.redhat.com/show_bug.cgi?id=1565555#c5 for path.
And after specify 'auditFilePath' and 'policyFile' do not work, still use the default.
I just did:
1. access the master node directly:
oc debug node/<master-node>
chroot /host /bin/bash
2. ll /var/log/ which should return you kube-apiserver and openshift-apiserver directories
that contain audit logs.
Moving back to qa for re-verification, but I don't see a bug here.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.