01 Run GET /clusters command (OSX/Linux/UNIX) to describe the configuration details for each Container Service for Kubernetes (ACK) cluster provisioned in your Alibaba Cloud account:
aliyun cs GET /clusters
--header "Content-Type=application/json;"
--body "{}"
02 The command output should return the configuration information available for each available ACK cluster (including the cluster ID, i.e. "cluster_id"):
[
{
"cluster_id": "abcd1234abcd1234abcd1234abcd1234a",
"cluster_spec": "ack.standard",
"cluster_type": "ManagedKubernetes",
"created": "2024-02-05T17:44:26+08:00",
"current_version": "1.28.3-aliyun.1",
"deletion_protection": false,
"init_version": "1.28.3-aliyun.1",
"profile": "Default",
"region_id": "eu-west-1",
"size": 1,
"state": "running",
"updated": "2024-02-05T17:46:49+08:00",
"zone_id": "eu-west-1a"
},
...
{
"cluster_id": "1234abcd1234abcd1234abcd1234abcd1",
"cluster_spec": "ack.standard",
"cluster_type": "ManagedKubernetes",
"created": "2024-02-05T16:40:31+08:00",
"current_version": "1.28.3-aliyun.1",
"deletion_protection": false,
"init_version": "1.28.3-aliyun.1",
"profile": "Default",
"region_id": "eu-west-1",
"size": 1,
"state": "running",
"subnet_cidr": "10.65.0.0/16",
"updated": "2024-02-05T16:42:53+08:00",
"zone_id": "eu-west-1a"
}
]
03 Run GET /clusters/[cluster_id] command (OSX/Linux/UNIX) with the ID of the ACK cluster that you want to examine as the identifier parameter, to describe the configuration metadata available for the selected cluster:
aliyun cs GET /clusters/abcd1234abcd1234abcd1234abcd1234a
--header "Content-Type=application/json;"
--body "{}"
--output cols=meta_data
04 The command output should return the configuration metadata available for the selected ACK resource:
{
"Addons": [
{
"name": "gateway-api",
"version": "1.0.1"
},
{
"name": "cloud-controller-manager",
"version": "v2.8.1-mgk"
},
{
"disabled": true,
"name": "nginx-ingress-controller"
},
{
"name": "ack-scheduler",
"version": "v1.28.3-aliyun-6.3.5b0d1234"
},
{
"config": "{\"ENITrunking\":\"false\",\"IPVlan\":\"false\",\"NetworkPolicy\":\"false\"}",
"name": "terway-eniip",
"version": "v1.6.3"
}
],
...
"AuditProjectName": "",
...
"CloudMonitorVersion": "",
"DockerVersion": "",
"EtcdVersion": "v3.5.9",
"ExtraCertSAN": null,
"HasSandboxRuntime": false,
"IPStack": "ipv4",
"ImageType": "AliyunLinux3",
"KubernetesVersion": "1.28.3-aliyun.1",
"Timezone": "",
"VSwitchIds": null,
"VersionSpec": null,
"alicloud-monitor-controllerVersion": "v1.8.4",
"cloud-controller-managerVersion": "v2.8.1",
"corednsVersion": "v1.9.3.10-7dfca203-aliyun",
"csi-pluginVersion": "v1.28.3-eb95171-aliyun",
"csi-provisionerVersion": "v1.28.3-eb95171-aliyun",
"gateway-apiVersion": "1.0.1",
"kube-apiserverVersion": "v1.28.3-aliyun.1",
"kube-controller-managerVersion": "v1.28.3-aliyun.1",
"metrics-serverVersion": "v0.3.9.7-85b3699-aliyun",
"storage-operatorVersion": "v1.28.2-be0cf84-aliyun",
"terway-eniipVersion": "v1.6.3"
}
Check the
"AuditProjectName" attribute value to identify the Simple Log Service project configured for cluster auditing. If the
"AuditProjectName" attribute has no value (i.e.
""), there is no Simple Log Service project configured to collect audit logs for the specified cluster, therefore cluster auditing with Simple Log Service is not enabled for the selected ACK cluster.
Security