Skip to main content

ack audit

Manage ACK cluster API Server audit log

Run ecctl ack audit <action> -h for usage, or ecctl schema ack.audit.<action> --full for the complete, agent-readable spec of every parameter and behavior.

update

ecctl ack audit update [flags]

Update ACK cluster API Server audit log

  • Kind: mutation · Risk: medium
  • Synchronous: waits for success (waiter task_succeeded, timeout 600s); use --no-wait to skip.
APIWhen calledPurpose
UpdateClusterAuditLogConfigWhen --enabled equals true.Perform the resource operation.
DescribeTaskInfoWhen --enabled equals true and --no-wait is not specified.Poll until the resource reaches the target state. (repeated)
UpdateClusterAuditLogConfigWhen --enabled equals false.Perform the resource operation.
DescribeTaskInfoWhen --enabled equals false and --no-wait is not specified.Poll until the resource reaches the target state. (repeated)
UpdateClusterAuditLogConfigWhen --project is specified and --enabled is not explicitly specified.Perform the resource operation.
DescribeTaskInfoWhen --project is specified and --enabled is not explicitly specified and --no-wait is not specified.Poll until the resource reaches the target state. (repeated)
GetClusterAuditProjectWhen --no-wait is not specified.Read the resource view.
ParameterTypeRequiredDescription
--clusterstringACK cluster ID
--regionstringAlibaba Cloud region
--enabledbooleanenable or disable API Server audit logging
--projectstringSLS Project for API Server audit logs

get

ecctl ack audit get [flags]

Get ACK cluster API Server audit log configuration

  • Kind: read · Risk: low
APIWhen calledPurpose
GetClusterAuditProjectEvery time the command runs.Read the resource view.
ParameterTypeRequiredDescription
--clusterstringACK cluster ID
--regionstringAlibaba Cloud region
--fieldsstringcomma-separated resource fields to include