Docs

Volcengine Kubernetes Engine

Observability

Auditing clusters

VKE supports recording operations performed within clusters through API Server audit logs, helping cluster administrators perform security audits of cluster actions to ensure that clusters run securely and stably. This topic describes how to configure the cluster audit feature.

Prerequisites

TLS has been activated. To activate this service, log in to the TLS console and activate the service based on the on-screen prompts.

(Optional) A log project has been created. For details, see Log projects.

Enable cluster audit

In the left navigation bar, click Cluster.

On the Cluster page, click the name of the target cluster.

In the left navigation bar of the cluster management page, click Cluster audit.

Click Enable cluster audit. In the dialog box, configure logging settings.

Parameter	Description
Log usage type	Select the method for saving cluster audit logs, including: Use existing log projects: Use an existing log project to save cluster audit logs. Automatically create new log projects: Create a new log project for saving cluster audit logs.
Project	Specify the log project to which logs belong. The log project allows you to manage operation and maintenance, authorization, and other actions on cluster resources at the project level. By default, the default project is selected. For more details, see Project management.
Log project	If you set Log usage type to Use existing log projects, select a log project where you want to save audit logs. tip The VKE cluster automatically creates a log topic within the specified log project. You do not need to manually create one.

Click Confirm.

View audit logs

After the cluster audit feature is configured, you can view its logs on the Cluster audit page.

Change the log project

You can change the log project specified in your cluster inspection configuration. To do so, follow the steps below:

On the cluster inspection page, click Change log project in the upper-right corner.

In the Log project drop-down menu, select the new log project.

warning

Changing the log project for cluster inspection will also change the log project for control plane add-ons (such as kube-apiserver and kube-scheduler). Exercise caution when you perform this operation. For details, see Control plane add-on logging.

Click Confirm.

Disable cluster audit

You can disable the cluster inspection feature. To do so, follow the steps below:

On the cluster inspection page, click Disable cluster audit in the upper-right corner.

In the confirmation dialog box, click Confirm.

Last updated: 2026.07.24 10:53:31