本文档介绍 GKE Hub 的审核日志记录。 Google Cloud 服务会生成审核日志,以记录 Google Cloud 资源中的管理和访问活动。如需详细了解 Cloud Audit Logs,请参阅以下内容:
服务名称
GKE Hub 审核日志使用服务名称 gkehub.googleapis.com。
针对此服务的过滤条件:
protoPayload.serviceName="gkehub.googleapis.com"
方法(按权限类型)
每个 IAM 权限都有一个 type 属性,该属性的值是一个枚举,可以是以下四个值之一:ADMIN_READ、ADMIN_WRITE、DATA_READ 或 DATA_WRITE。在您调用某个方法时,GKE Hub 会生成一个审核日志,其类别取决于执行该方法所需权限的 type 属性。需要 IAM 权限且 type 属性值为 DATA_READ、DATA_WRITE 或 ADMIN_READ 的方法会生成数据访问审核日志。需要 IAM 权限且 type 属性值为 ADMIN_WRITE 的方法会生成管理员活动审核日志。
| 权限类型 | 方法 |
|---|---|
ADMIN_READ |
google.cloud.gkehub.v1.GkeHub.GenerateConnectManifestgoogle.cloud.gkehub.v1.GkeHub.GenerateMembershipRBACRoleBindingYAMLgoogle.cloud.gkehub.v1.GkeHub.GetFeaturegoogle.cloud.gkehub.v1.GkeHub.GetFleetgoogle.cloud.gkehub.v1.GkeHub.GetMembershipgoogle.cloud.gkehub.v1.GkeHub.GetMembershipBindinggoogle.cloud.gkehub.v1.GkeHub.GetMembershipRBACRoleBindinggoogle.cloud.gkehub.v1.GkeHub.GetScopegoogle.cloud.gkehub.v1.GkeHub.GetScopeNamespacegoogle.cloud.gkehub.v1.GkeHub.GetScopeRBACRoleBindinggoogle.cloud.gkehub.v1.GkeHub.ListBoundMembershipsgoogle.cloud.gkehub.v1.GkeHub.ListFeaturesgoogle.cloud.gkehub.v1.GkeHub.ListMembershipBindingsgoogle.cloud.gkehub.v1.GkeHub.ListMembershipRBACRoleBindingsgoogle.cloud.gkehub.v1.GkeHub.ListMembershipsgoogle.cloud.gkehub.v1.GkeHub.ListScopeNamespacesgoogle.cloud.gkehub.v1.GkeHub.ListScopeRBACRoleBindingsgoogle.cloud.gkehub.v1.GkeHub.ListScopesgoogle.cloud.gkehub.v1alpha.GkeHub.GenerateConnectManifestgoogle.cloud.gkehub.v1alpha.GkeHub.GenerateExclusivityManifestgoogle.cloud.gkehub.v1alpha.GkeHub.GenerateMembershipRBACRoleBindingYAMLgoogle.cloud.gkehub.v1alpha.GkeHub.GetFeaturegoogle.cloud.gkehub.v1alpha.GkeHub.GetFleetgoogle.cloud.gkehub.v1alpha.GkeHub.GetMembershipgoogle.cloud.gkehub.v1alpha.GkeHub.GetMembershipBindinggoogle.cloud.gkehub.v1alpha.GkeHub.GetMembershipRBACRoleBindinggoogle.cloud.gkehub.v1alpha.GkeHub.GetScopegoogle.cloud.gkehub.v1alpha.GkeHub.GetScopeNamespacegoogle.cloud.gkehub.v1alpha.GkeHub.GetScopeRBACRoleBindinggoogle.cloud.gkehub.v1alpha.GkeHub.ListAdminClusterMembershipsgoogle.cloud.gkehub.v1alpha.GkeHub.ListBoundMembershipsgoogle.cloud.gkehub.v1alpha.GkeHub.ListFeaturesgoogle.cloud.gkehub.v1alpha.GkeHub.ListMembershipBindingsgoogle.cloud.gkehub.v1alpha.GkeHub.ListMembershipRBACRoleBindingsgoogle.cloud.gkehub.v1alpha.GkeHub.ListMembershipsgoogle.cloud.gkehub.v1alpha.GkeHub.ListScopeNamespacesgoogle.cloud.gkehub.v1alpha.GkeHub.ListScopeRBACRoleBindingsgoogle.cloud.gkehub.v1alpha.GkeHub.ListScopesgoogle.cloud.gkehub.v1alpha.GkeHub.ValidateExclusivitygoogle.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.GetFeaturegoogle.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.ListFeaturesgoogle.cloud.gkehub.v1beta.GkeHub.GenerateConnectManifestgoogle.cloud.gkehub.v1beta.GkeHub.GenerateMembershipRBACRoleBindingYAMLgoogle.cloud.gkehub.v1beta.GkeHub.GetFeaturegoogle.cloud.gkehub.v1beta.GkeHub.GetFleetgoogle.cloud.gkehub.v1beta.GkeHub.GetMembershipgoogle.cloud.gkehub.v1beta.GkeHub.GetMembershipBindinggoogle.cloud.gkehub.v1beta.GkeHub.GetMembershipRBACRoleBindinggoogle.cloud.gkehub.v1beta.GkeHub.GetScopegoogle.cloud.gkehub.v1beta.GkeHub.GetScopeNamespacegoogle.cloud.gkehub.v1beta.GkeHub.GetScopeRBACRoleBindinggoogle.cloud.gkehub.v1beta.GkeHub.ListBoundMembershipsgoogle.cloud.gkehub.v1beta.GkeHub.ListFeaturesgoogle.cloud.gkehub.v1beta.GkeHub.ListMembershipBindingsgoogle.cloud.gkehub.v1beta.GkeHub.ListMembershipRBACRoleBindingsgoogle.cloud.gkehub.v1beta.GkeHub.ListMembershipsgoogle.cloud.gkehub.v1beta.GkeHub.ListScopeNamespacesgoogle.cloud.gkehub.v1beta.GkeHub.ListScopeRBACRoleBindingsgoogle.cloud.gkehub.v1beta.GkeHub.ListScopesgoogle.cloud.gkehub.v1beta1.GkeHubMembershipService.GenerateConnectManifestgoogle.cloud.gkehub.v1beta1.GkeHubMembershipService.GenerateExclusivityManifestgoogle.cloud.gkehub.v1beta1.GkeHubMembershipService.GetMembershipgoogle.cloud.gkehub.v1beta1.GkeHubMembershipService.ListMembershipsgoogle.cloud.gkehub.v1beta1.GkeHubMembershipService.ValidateExclusivitygoogle.cloud.gkehub.v2.GkeHubFeature.GetMembershipFeaturegoogle.cloud.gkehub.v2.GkeHubFeature.ListMembershipFeaturesgoogle.cloud.gkehub.v2alpha.GkeHubFeature.GetMembershipFeaturegoogle.cloud.gkehub.v2alpha.GkeHubFeature.ListMembershipFeaturesgoogle.cloud.gkehub.v2beta.GkeHubFeature.GetMembershipFeaturegoogle.cloud.gkehub.v2beta.GkeHubFeature.ListMembershipFeaturesGetIamPolicy |
ADMIN_WRITE |
google.cloud.gkehub.v1.GkeHub.CreateFeature(LRO)google.cloud.gkehub.v1.GkeHub.CreateFleet(LRO)google.cloud.gkehub.v1.GkeHub.CreateMembership(LRO)google.cloud.gkehub.v1.GkeHub.CreateMembershipBinding(LRO)google.cloud.gkehub.v1.GkeHub.CreateMembershipRBACRoleBinding(LRO)google.cloud.gkehub.v1.GkeHub.CreateScope(LRO)google.cloud.gkehub.v1.GkeHub.CreateScopeNamespace(LRO)google.cloud.gkehub.v1.GkeHub.CreateScopeRBACRoleBinding(LRO)google.cloud.gkehub.v1.GkeHub.DeleteFeature(LRO)google.cloud.gkehub.v1.GkeHub.DeleteFleet(LRO)google.cloud.gkehub.v1.GkeHub.DeleteMembership(LRO)google.cloud.gkehub.v1.GkeHub.DeleteMembershipBinding(LRO)google.cloud.gkehub.v1.GkeHub.DeleteMembershipRBACRoleBinding(LRO)google.cloud.gkehub.v1.GkeHub.DeleteScope(LRO)google.cloud.gkehub.v1.GkeHub.DeleteScopeNamespace(LRO)google.cloud.gkehub.v1.GkeHub.DeleteScopeRBACRoleBinding(LRO)google.cloud.gkehub.v1.GkeHub.UpdateFeature(LRO)google.cloud.gkehub.v1.GkeHub.UpdateFleet(LRO)google.cloud.gkehub.v1.GkeHub.UpdateMembership(LRO)google.cloud.gkehub.v1.GkeHub.UpdateMembershipBinding(LRO)google.cloud.gkehub.v1.GkeHub.UpdateMembershipRBACRoleBinding(LRO)google.cloud.gkehub.v1.GkeHub.UpdateScope(LRO)google.cloud.gkehub.v1.GkeHub.UpdateScopeNamespace(LRO)google.cloud.gkehub.v1.GkeHub.UpdateScopeRBACRoleBinding(LRO)google.cloud.gkehub.v1alpha.GkeHub.CreateFeature(LRO)google.cloud.gkehub.v1alpha.GkeHub.CreateFleet(LRO)google.cloud.gkehub.v1alpha.GkeHub.CreateMembership(LRO)google.cloud.gkehub.v1alpha.GkeHub.CreateMembershipBinding(LRO)google.cloud.gkehub.v1alpha.GkeHub.CreateMembershipRBACRoleBinding(LRO)google.cloud.gkehub.v1alpha.GkeHub.CreateScope(LRO)google.cloud.gkehub.v1alpha.GkeHub.CreateScopeNamespace(LRO)google.cloud.gkehub.v1alpha.GkeHub.CreateScopeRBACRoleBinding(LRO)google.cloud.gkehub.v1alpha.GkeHub.DeleteFeature(LRO)google.cloud.gkehub.v1alpha.GkeHub.DeleteFleet(LRO)google.cloud.gkehub.v1alpha.GkeHub.DeleteMembership(LRO)google.cloud.gkehub.v1alpha.GkeHub.DeleteMembershipBinding(LRO)google.cloud.gkehub.v1alpha.GkeHub.DeleteMembershipRBACRoleBinding(LRO)google.cloud.gkehub.v1alpha.GkeHub.DeleteScope(LRO)google.cloud.gkehub.v1alpha.GkeHub.DeleteScopeNamespace(LRO)google.cloud.gkehub.v1alpha.GkeHub.DeleteScopeRBACRoleBinding(LRO)google.cloud.gkehub.v1alpha.GkeHub.UpdateFeature(LRO)google.cloud.gkehub.v1alpha.GkeHub.UpdateFleet(LRO)google.cloud.gkehub.v1alpha.GkeHub.UpdateMembership(LRO)google.cloud.gkehub.v1alpha.GkeHub.UpdateMembershipBinding(LRO)google.cloud.gkehub.v1alpha.GkeHub.UpdateMembershipRBACRoleBinding(LRO)google.cloud.gkehub.v1alpha.GkeHub.UpdateScope(LRO)google.cloud.gkehub.v1alpha.GkeHub.UpdateScopeNamespace(LRO)google.cloud.gkehub.v1alpha.GkeHub.UpdateScopeRBACRoleBinding(LRO)google.cloud.gkehub.v1alpha.GkeHub.ValidateCreateMembershipgoogle.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.CreateFeature(LRO)google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.DeleteFeature(LRO)google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.UpdateFeature(LRO)google.cloud.gkehub.v1beta.GkeHub.CreateFeature(LRO)google.cloud.gkehub.v1beta.GkeHub.CreateFleet(LRO)google.cloud.gkehub.v1beta.GkeHub.CreateMembership(LRO)google.cloud.gkehub.v1beta.GkeHub.CreateMembershipBinding(LRO)google.cloud.gkehub.v1beta.GkeHub.CreateMembershipRBACRoleBinding(LRO)google.cloud.gkehub.v1beta.GkeHub.CreateScope(LRO)google.cloud.gkehub.v1beta.GkeHub.CreateScopeNamespace(LRO)google.cloud.gkehub.v1beta.GkeHub.CreateScopeRBACRoleBinding(LRO)google.cloud.gkehub.v1beta.GkeHub.DeleteFeature(LRO)google.cloud.gkehub.v1beta.GkeHub.DeleteFleet(LRO)google.cloud.gkehub.v1beta.GkeHub.DeleteMembership(LRO)google.cloud.gkehub.v1beta.GkeHub.DeleteMembershipBinding(LRO)google.cloud.gkehub.v1beta.GkeHub.DeleteMembershipRBACRoleBinding(LRO)google.cloud.gkehub.v1beta.GkeHub.DeleteScope(LRO)google.cloud.gkehub.v1beta.GkeHub.DeleteScopeNamespace(LRO)google.cloud.gkehub.v1beta.GkeHub.DeleteScopeRBACRoleBinding(LRO)google.cloud.gkehub.v1beta.GkeHub.UpdateFeature(LRO)google.cloud.gkehub.v1beta.GkeHub.UpdateFleet(LRO)google.cloud.gkehub.v1beta.GkeHub.UpdateMembership(LRO)google.cloud.gkehub.v1beta.GkeHub.UpdateMembershipBinding(LRO)google.cloud.gkehub.v1beta.GkeHub.UpdateMembershipRBACRoleBinding(LRO)google.cloud.gkehub.v1beta.GkeHub.UpdateScope(LRO)google.cloud.gkehub.v1beta.GkeHub.UpdateScopeNamespace(LRO)google.cloud.gkehub.v1beta.GkeHub.UpdateScopeRBACRoleBinding(LRO)google.cloud.gkehub.v1beta1.GkeHubMembershipService.CreateMembership(LRO)google.cloud.gkehub.v1beta1.GkeHubMembershipService.DeleteMembership(LRO)google.cloud.gkehub.v1beta1.GkeHubMembershipService.UpdateMembership(LRO)google.cloud.gkehub.v2.GkeHubFeature.CreateMembershipFeature(LRO)google.cloud.gkehub.v2.GkeHubFeature.DeleteMembershipFeature(LRO)google.cloud.gkehub.v2.GkeHubFeature.UpdateMembershipFeature(LRO)google.cloud.gkehub.v2alpha.GkeHubFeature.CreateMembershipFeature(LRO)google.cloud.gkehub.v2alpha.GkeHubFeature.DeleteMembershipFeature(LRO)google.cloud.gkehub.v2alpha.GkeHubFeature.UpdateMembershipFeature(LRO)google.cloud.gkehub.v2beta.GkeHubFeature.CreateMembershipFeature(LRO)google.cloud.gkehub.v2beta.GkeHubFeature.DeleteMembershipFeature(LRO)google.cloud.gkehub.v2beta.GkeHubFeature.UpdateMembershipFeature(LRO)SetIamPolicygoogle.longrunning.Operations.CancelOperationgoogle.longrunning.Operations.DeleteOperation |
API 接口审核日志
如需了解如何针对每种方法评估权限以及评估哪些权限,请参阅 GKE Hub 的 Identity and Access Management 文档。
google.cloud.gkehub.v1.GkeHub
以下审核日志与属于 google.cloud.gkehub.v1.GkeHub 的方法相关联。
CreateFeature
- 方法:
google.cloud.gkehub.v1.GkeHub.CreateFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.CreateFeature"
CreateFleet
- 方法:
google.cloud.gkehub.v1.GkeHub.CreateFleet - 审核日志类型:管理员活动
- 权限:
gkehub.fleet.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.CreateFleet"
CreateMembership
- 方法:
google.cloud.gkehub.v1.GkeHub.CreateMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.CreateMembership"
CreateMembershipBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.CreateMembershipBinding - 审核日志类型:管理员活动
- 权限:
gkehub.membershipbindings.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.CreateMembershipBinding"
CreateMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.CreateMembershipRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.CreateMembershipRBACRoleBinding"
CreateScope
- 方法:
google.cloud.gkehub.v1.GkeHub.CreateScope - 审核日志类型:管理员活动
- 权限:
gkehub.scopes.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.CreateScope"
CreateScopeNamespace
- 方法:
google.cloud.gkehub.v1.GkeHub.CreateScopeNamespace - 审核日志类型:管理员活动
- 权限:
gkehub.namespaces.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.CreateScopeNamespace"
CreateScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.CreateScopeRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.CreateScopeRBACRoleBinding"
DeleteFeature
- 方法:
google.cloud.gkehub.v1.GkeHub.DeleteFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.DeleteFeature"
DeleteFleet
- 方法:
google.cloud.gkehub.v1.GkeHub.DeleteFleet - 审核日志类型:管理员活动
- 权限:
gkehub.fleet.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.DeleteFleet"
DeleteMembership
- 方法:
google.cloud.gkehub.v1.GkeHub.DeleteMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.DeleteMembership"
DeleteMembershipBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.DeleteMembershipBinding - 审核日志类型:管理员活动
- 权限:
gkehub.membershipbindings.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.DeleteMembershipBinding"
DeleteMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.DeleteMembershipRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.DeleteMembershipRBACRoleBinding"
DeleteScope
- 方法:
google.cloud.gkehub.v1.GkeHub.DeleteScope - 审核日志类型:管理员活动
- 权限:
gkehub.scopes.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.DeleteScope"
DeleteScopeNamespace
- 方法:
google.cloud.gkehub.v1.GkeHub.DeleteScopeNamespace - 审核日志类型:管理员活动
- 权限:
gkehub.namespaces.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.DeleteScopeNamespace"
DeleteScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.DeleteScopeRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.DeleteScopeRBACRoleBinding"
GenerateConnectManifest
- 方法:
google.cloud.gkehub.v1.GkeHub.GenerateConnectManifest - 审核日志类型:数据访问
- 权限:
gkehub.memberships.generateConnectManifest - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.GenerateConnectManifest"
GenerateMembershipRBACRoleBindingYAML
- 方法:
google.cloud.gkehub.v1.GkeHub.GenerateMembershipRBACRoleBindingYAML - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.GenerateMembershipRBACRoleBindingYAML"
GetFeature
- 方法:
google.cloud.gkehub.v1.GkeHub.GetFeature - 审核日志类型:数据访问
- 权限:
gkehub.features.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.GetFeature"
GetFleet
- 方法:
google.cloud.gkehub.v1.GkeHub.GetFleet - 审核日志类型:数据访问
- 权限:
gkehub.fleet.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.GetFleet"
GetMembership
- 方法:
google.cloud.gkehub.v1.GkeHub.GetMembership - 审核日志类型:数据访问
- 权限:
gkehub.memberships.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.GetMembership"
GetMembershipBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.GetMembershipBinding - 审核日志类型:数据访问
- 权限:
gkehub.membershipbindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.GetMembershipBinding"
GetMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.GetMembershipRBACRoleBinding - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.GetMembershipRBACRoleBinding"
GetScope
- 方法:
google.cloud.gkehub.v1.GkeHub.GetScope - 审核日志类型:数据访问
- 权限:
gkehub.scopes.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.GetScope"
GetScopeNamespace
- 方法:
google.cloud.gkehub.v1.GkeHub.GetScopeNamespace - 审核日志类型:数据访问
- 权限:
gkehub.namespaces.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.GetScopeNamespace"
GetScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.GetScopeRBACRoleBinding - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.GetScopeRBACRoleBinding"
ListBoundMemberships
- 方法:
google.cloud.gkehub.v1.GkeHub.ListBoundMemberships - 审核日志类型:数据访问
- 权限:
gkehub.scopes.listBoundMemberships - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.ListBoundMemberships"
ListFeatures
- 方法:
google.cloud.gkehub.v1.GkeHub.ListFeatures - 审核日志类型:数据访问
- 权限:
gkehub.features.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.ListFeatures"
ListMembershipBindings
- 方法:
google.cloud.gkehub.v1.GkeHub.ListMembershipBindings - 审核日志类型:数据访问
- 权限:
gkehub.membershipbindings.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.ListMembershipBindings"
ListMembershipRBACRoleBindings
- 方法:
google.cloud.gkehub.v1.GkeHub.ListMembershipRBACRoleBindings - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.ListMembershipRBACRoleBindings"
ListMemberships
- 方法:
google.cloud.gkehub.v1.GkeHub.ListMemberships - 审核日志类型:数据访问
- 权限:
gkehub.memberships.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.ListMemberships"
ListScopeNamespaces
- 方法:
google.cloud.gkehub.v1.GkeHub.ListScopeNamespaces - 审核日志类型:数据访问
- 权限:
gkehub.namespaces.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.ListScopeNamespaces"
ListScopeRBACRoleBindings
- 方法:
google.cloud.gkehub.v1.GkeHub.ListScopeRBACRoleBindings - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.ListScopeRBACRoleBindings"
ListScopes
- 方法:
google.cloud.gkehub.v1.GkeHub.ListScopes - 审核日志类型:数据访问
- 权限:
gkehub.scopes.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.ListScopes"
UpdateFeature
- 方法:
google.cloud.gkehub.v1.GkeHub.UpdateFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.UpdateFeature"
UpdateFleet
- 方法:
google.cloud.gkehub.v1.GkeHub.UpdateFleet - 审核日志类型:管理员活动
- 权限:
gkehub.fleet.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.UpdateFleet"
UpdateMembership
- 方法:
google.cloud.gkehub.v1.GkeHub.UpdateMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.UpdateMembership"
UpdateMembershipBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.UpdateMembershipBinding - 审核日志类型:管理员活动
- 权限:
gkehub.membershipbindings.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.UpdateMembershipBinding"
UpdateMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.UpdateMembershipRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.UpdateMembershipRBACRoleBinding"
UpdateScope
- 方法:
google.cloud.gkehub.v1.GkeHub.UpdateScope - 审核日志类型:管理员活动
- 权限:
gkehub.scopes.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.UpdateScope"
UpdateScopeNamespace
- 方法:
google.cloud.gkehub.v1.GkeHub.UpdateScopeNamespace - 审核日志类型:管理员活动
- 权限:
gkehub.namespaces.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.UpdateScopeNamespace"
UpdateScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1.GkeHub.UpdateScopeRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1.GkeHub.UpdateScopeRBACRoleBinding"
google.cloud.gkehub.v1alpha.GkeHub
以下审核日志与属于 google.cloud.gkehub.v1alpha.GkeHub 的方法相关联。
CreateFeature
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.CreateFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.CreateFeature"
CreateFleet
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.CreateFleet - 审核日志类型:管理员活动
- 权限:
gkehub.fleet.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.CreateFleet"
CreateMembership
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.CreateMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.CreateMembership"
CreateMembershipBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.CreateMembershipBinding - 审核日志类型:管理员活动
- 权限:
gkehub.membershipbindings.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.CreateMembershipBinding"
CreateMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.CreateMembershipRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.CreateMembershipRBACRoleBinding"
CreateScope
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.CreateScope - 审核日志类型:管理员活动
- 权限:
gkehub.scopes.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.CreateScope"
CreateScopeNamespace
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.CreateScopeNamespace - 审核日志类型:管理员活动
- 权限:
gkehub.namespaces.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.CreateScopeNamespace"
CreateScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.CreateScopeRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.CreateScopeRBACRoleBinding"
DeleteFeature
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.DeleteFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.DeleteFeature"
DeleteFleet
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.DeleteFleet - 审核日志类型:管理员活动
- 权限:
gkehub.fleet.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.DeleteFleet"
DeleteMembership
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.DeleteMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.DeleteMembership"
DeleteMembershipBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.DeleteMembershipBinding - 审核日志类型:管理员活动
- 权限:
gkehub.membershipbindings.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.DeleteMembershipBinding"
DeleteMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.DeleteMembershipRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.DeleteMembershipRBACRoleBinding"
DeleteScope
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.DeleteScope - 审核日志类型:管理员活动
- 权限:
gkehub.scopes.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.DeleteScope"
DeleteScopeNamespace
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.DeleteScopeNamespace - 审核日志类型:管理员活动
- 权限:
gkehub.namespaces.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.DeleteScopeNamespace"
DeleteScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.DeleteScopeRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.DeleteScopeRBACRoleBinding"
GenerateConnectManifest
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.GenerateConnectManifest - 审核日志类型:数据访问
- 权限:
gkehub.memberships.generateConnectManifest - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.GenerateConnectManifest"
GenerateExclusivityManifest
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.GenerateExclusivityManifest - 审核日志类型:数据访问
- 权限:
gkehub.memberships.generateConnectManifest - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.GenerateExclusivityManifest"
GenerateMembershipRBACRoleBindingYAML
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.GenerateMembershipRBACRoleBindingYAML - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.GenerateMembershipRBACRoleBindingYAML"
GetFeature
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.GetFeature - 审核日志类型:数据访问
- 权限:
gkehub.features.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.GetFeature"
GetFleet
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.GetFleet - 审核日志类型:数据访问
- 权限:
gkehub.fleet.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.GetFleet"
GetMembership
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.GetMembership - 审核日志类型:数据访问
- 权限:
gkehub.memberships.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.GetMembership"
GetMembershipBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.GetMembershipBinding - 审核日志类型:数据访问
- 权限:
gkehub.membershipbindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.GetMembershipBinding"
GetMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.GetMembershipRBACRoleBinding - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.GetMembershipRBACRoleBinding"
GetScope
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.GetScope - 审核日志类型:数据访问
- 权限:
gkehub.scopes.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.GetScope"
GetScopeNamespace
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.GetScopeNamespace - 审核日志类型:数据访问
- 权限:
gkehub.namespaces.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.GetScopeNamespace"
GetScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.GetScopeRBACRoleBinding - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.GetScopeRBACRoleBinding"
ListAdminClusterMemberships
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.ListAdminClusterMemberships - 审核日志类型:数据访问
- 权限:
gkehub.memberships.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.ListAdminClusterMemberships"
ListBoundMemberships
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.ListBoundMemberships - 审核日志类型:数据访问
- 权限:
gkehub.scopes.listBoundMemberships - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.ListBoundMemberships"
ListFeatures
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.ListFeatures - 审核日志类型:数据访问
- 权限:
gkehub.features.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.ListFeatures"
ListMembershipBindings
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.ListMembershipBindings - 审核日志类型:数据访问
- 权限:
gkehub.membershipbindings.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.ListMembershipBindings"
ListMembershipRBACRoleBindings
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.ListMembershipRBACRoleBindings - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.ListMembershipRBACRoleBindings"
ListMemberships
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.ListMemberships - 审核日志类型:数据访问
- 权限:
gkehub.memberships.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.ListMemberships"
ListScopeNamespaces
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.ListScopeNamespaces - 审核日志类型:数据访问
- 权限:
gkehub.namespaces.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.ListScopeNamespaces"
ListScopeRBACRoleBindings
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.ListScopeRBACRoleBindings - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.ListScopeRBACRoleBindings"
ListScopes
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.ListScopes - 审核日志类型:数据访问
- 权限:
gkehub.scopes.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.ListScopes"
UpdateFeature
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.UpdateFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.UpdateFeature"
UpdateFleet
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.UpdateFleet - 审核日志类型:管理员活动
- 权限:
gkehub.fleet.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.UpdateFleet"
UpdateMembership
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.UpdateMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.UpdateMembership"
UpdateMembershipBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.UpdateMembershipBinding - 审核日志类型:管理员活动
- 权限:
gkehub.membershipbindings.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.UpdateMembershipBinding"
UpdateMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.UpdateMembershipRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.UpdateMembershipRBACRoleBinding"
UpdateScope
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.UpdateScope - 审核日志类型:管理员活动
- 权限:
gkehub.scopes.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.UpdateScope"
UpdateScopeNamespace
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.UpdateScopeNamespace - 审核日志类型:管理员活动
- 权限:
gkehub.namespaces.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.UpdateScopeNamespace"
UpdateScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.UpdateScopeRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.UpdateScopeRBACRoleBinding"
ValidateCreateMembership
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.ValidateCreateMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.ValidateCreateMembership"
ValidateExclusivity
- 方法:
google.cloud.gkehub.v1alpha.GkeHub.ValidateExclusivity - 审核日志类型:数据访问
- 权限:
gkehub.memberships.generateConnectManifest - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha.GkeHub.ValidateExclusivity"
google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService
以下审核日志与属于 google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService 的方法相关联。
CreateFeature
- 方法:
google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.CreateFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.CreateFeature"
DeleteFeature
- 方法:
google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.DeleteFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.DeleteFeature"
GetFeature
- 方法:
google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.GetFeature - 审核日志类型:数据访问
- 权限:
gkehub.features.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.GetFeature"
ListFeatures
- 方法:
google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.ListFeatures - 审核日志类型:数据访问
- 权限:
gkehub.features.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.ListFeatures"
UpdateFeature
- 方法:
google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.UpdateFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1alpha1.GkeHubDomainFeatureService.UpdateFeature"
google.cloud.gkehub.v1beta.GkeHub
以下审核日志与属于 google.cloud.gkehub.v1beta.GkeHub 的方法相关联。
CreateFeature
- 方法:
google.cloud.gkehub.v1beta.GkeHub.CreateFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.CreateFeature"
CreateFleet
- 方法:
google.cloud.gkehub.v1beta.GkeHub.CreateFleet - 审核日志类型:管理员活动
- 权限:
gkehub.fleet.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.CreateFleet"
CreateMembership
- 方法:
google.cloud.gkehub.v1beta.GkeHub.CreateMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.CreateMembership"
CreateMembershipBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.CreateMembershipBinding - 审核日志类型:管理员活动
- 权限:
gkehub.membershipbindings.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.CreateMembershipBinding"
CreateMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.CreateMembershipRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.CreateMembershipRBACRoleBinding"
CreateScope
- 方法:
google.cloud.gkehub.v1beta.GkeHub.CreateScope - 审核日志类型:管理员活动
- 权限:
gkehub.scopes.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.CreateScope"
CreateScopeNamespace
- 方法:
google.cloud.gkehub.v1beta.GkeHub.CreateScopeNamespace - 审核日志类型:管理员活动
- 权限:
gkehub.namespaces.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.CreateScopeNamespace"
CreateScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.CreateScopeRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.CreateScopeRBACRoleBinding"
DeleteFeature
- 方法:
google.cloud.gkehub.v1beta.GkeHub.DeleteFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.DeleteFeature"
DeleteFleet
- 方法:
google.cloud.gkehub.v1beta.GkeHub.DeleteFleet - 审核日志类型:管理员活动
- 权限:
gkehub.fleet.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.DeleteFleet"
DeleteMembership
- 方法:
google.cloud.gkehub.v1beta.GkeHub.DeleteMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.DeleteMembership"
DeleteMembershipBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.DeleteMembershipBinding - 审核日志类型:管理员活动
- 权限:
gkehub.membershipbindings.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.DeleteMembershipBinding"
DeleteMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.DeleteMembershipRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.DeleteMembershipRBACRoleBinding"
DeleteScope
- 方法:
google.cloud.gkehub.v1beta.GkeHub.DeleteScope - 审核日志类型:管理员活动
- 权限:
gkehub.scopes.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.DeleteScope"
DeleteScopeNamespace
- 方法:
google.cloud.gkehub.v1beta.GkeHub.DeleteScopeNamespace - 审核日志类型:管理员活动
- 权限:
gkehub.namespaces.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.DeleteScopeNamespace"
DeleteScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.DeleteScopeRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.DeleteScopeRBACRoleBinding"
GenerateConnectManifest
- 方法:
google.cloud.gkehub.v1beta.GkeHub.GenerateConnectManifest - 审核日志类型:数据访问
- 权限:
gkehub.memberships.generateConnectManifest - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.GenerateConnectManifest"
GenerateMembershipRBACRoleBindingYAML
- 方法:
google.cloud.gkehub.v1beta.GkeHub.GenerateMembershipRBACRoleBindingYAML - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.GenerateMembershipRBACRoleBindingYAML"
GetFeature
- 方法:
google.cloud.gkehub.v1beta.GkeHub.GetFeature - 审核日志类型:数据访问
- 权限:
gkehub.features.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.GetFeature"
GetFleet
- 方法:
google.cloud.gkehub.v1beta.GkeHub.GetFleet - 审核日志类型:数据访问
- 权限:
gkehub.fleet.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.GetFleet"
GetMembership
- 方法:
google.cloud.gkehub.v1beta.GkeHub.GetMembership - 审核日志类型:数据访问
- 权限:
gkehub.memberships.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.GetMembership"
GetMembershipBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.GetMembershipBinding - 审核日志类型:数据访问
- 权限:
gkehub.membershipbindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.GetMembershipBinding"
GetMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.GetMembershipRBACRoleBinding - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.GetMembershipRBACRoleBinding"
GetScope
- 方法:
google.cloud.gkehub.v1beta.GkeHub.GetScope - 审核日志类型:数据访问
- 权限:
gkehub.scopes.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.GetScope"
GetScopeNamespace
- 方法:
google.cloud.gkehub.v1beta.GkeHub.GetScopeNamespace - 审核日志类型:数据访问
- 权限:
gkehub.namespaces.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.GetScopeNamespace"
GetScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.GetScopeRBACRoleBinding - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.GetScopeRBACRoleBinding"
ListBoundMemberships
- 方法:
google.cloud.gkehub.v1beta.GkeHub.ListBoundMemberships - 审核日志类型:数据访问
- 权限:
gkehub.scopes.listBoundMemberships - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.ListBoundMemberships"
ListFeatures
- 方法:
google.cloud.gkehub.v1beta.GkeHub.ListFeatures - 审核日志类型:数据访问
- 权限:
gkehub.features.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.ListFeatures"
ListMembershipBindings
- 方法:
google.cloud.gkehub.v1beta.GkeHub.ListMembershipBindings - 审核日志类型:数据访问
- 权限:
gkehub.membershipbindings.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.ListMembershipBindings"
ListMembershipRBACRoleBindings
- 方法:
google.cloud.gkehub.v1beta.GkeHub.ListMembershipRBACRoleBindings - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.ListMembershipRBACRoleBindings"
ListMemberships
- 方法:
google.cloud.gkehub.v1beta.GkeHub.ListMemberships - 审核日志类型:数据访问
- 权限:
gkehub.memberships.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.ListMemberships"
ListScopeNamespaces
- 方法:
google.cloud.gkehub.v1beta.GkeHub.ListScopeNamespaces - 审核日志类型:数据访问
- 权限:
gkehub.namespaces.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.ListScopeNamespaces"
ListScopeRBACRoleBindings
- 方法:
google.cloud.gkehub.v1beta.GkeHub.ListScopeRBACRoleBindings - 审核日志类型:数据访问
- 权限:
gkehub.rbacrolebindings.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.ListScopeRBACRoleBindings"
ListScopes
- 方法:
google.cloud.gkehub.v1beta.GkeHub.ListScopes - 审核日志类型:数据访问
- 权限:
gkehub.scopes.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.ListScopes"
UpdateFeature
- 方法:
google.cloud.gkehub.v1beta.GkeHub.UpdateFeature - 审核日志类型:管理员活动
- 权限:
gkehub.features.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.UpdateFeature"
UpdateFleet
- 方法:
google.cloud.gkehub.v1beta.GkeHub.UpdateFleet - 审核日志类型:管理员活动
- 权限:
gkehub.fleet.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.UpdateFleet"
UpdateMembership
- 方法:
google.cloud.gkehub.v1beta.GkeHub.UpdateMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.UpdateMembership"
UpdateMembershipBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.UpdateMembershipBinding - 审核日志类型:管理员活动
- 权限:
gkehub.membershipbindings.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.UpdateMembershipBinding"
UpdateMembershipRBACRoleBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.UpdateMembershipRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.UpdateMembershipRBACRoleBinding"
UpdateScope
- 方法:
google.cloud.gkehub.v1beta.GkeHub.UpdateScope - 审核日志类型:管理员活动
- 权限:
gkehub.scopes.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.UpdateScope"
UpdateScopeNamespace
- 方法:
google.cloud.gkehub.v1beta.GkeHub.UpdateScopeNamespace - 审核日志类型:管理员活动
- 权限:
gkehub.namespaces.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.UpdateScopeNamespace"
UpdateScopeRBACRoleBinding
- 方法:
google.cloud.gkehub.v1beta.GkeHub.UpdateScopeRBACRoleBinding - 审核日志类型:管理员活动
- 权限:
gkehub.rbacrolebindings.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta.GkeHub.UpdateScopeRBACRoleBinding"
google.cloud.gkehub.v1beta1.GkeHubMembershipService
以下审核日志与属于 google.cloud.gkehub.v1beta1.GkeHubMembershipService 的方法相关联。
CreateMembership
- 方法:
google.cloud.gkehub.v1beta1.GkeHubMembershipService.CreateMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta1.GkeHubMembershipService.CreateMembership"
DeleteMembership
- 方法:
google.cloud.gkehub.v1beta1.GkeHubMembershipService.DeleteMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta1.GkeHubMembershipService.DeleteMembership"
GenerateConnectManifest
- 方法:
google.cloud.gkehub.v1beta1.GkeHubMembershipService.GenerateConnectManifest - 审核日志类型:数据访问
- 权限:
gkehub.memberships.generateConnectManifest - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta1.GkeHubMembershipService.GenerateConnectManifest"
GenerateExclusivityManifest
- 方法:
google.cloud.gkehub.v1beta1.GkeHubMembershipService.GenerateExclusivityManifest - 审核日志类型:数据访问
- 权限:
gkehub.memberships.generateConnectManifest - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta1.GkeHubMembershipService.GenerateExclusivityManifest"
GetMembership
- 方法:
google.cloud.gkehub.v1beta1.GkeHubMembershipService.GetMembership - 审核日志类型:数据访问
- 权限:
gkehub.memberships.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta1.GkeHubMembershipService.GetMembership"
ListMemberships
- 方法:
google.cloud.gkehub.v1beta1.GkeHubMembershipService.ListMemberships - 审核日志类型:数据访问
- 权限:
gkehub.memberships.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta1.GkeHubMembershipService.ListMemberships"
UpdateMembership
- 方法:
google.cloud.gkehub.v1beta1.GkeHubMembershipService.UpdateMembership - 审核日志类型:管理员活动
- 权限:
gkehub.memberships.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta1.GkeHubMembershipService.UpdateMembership"
ValidateExclusivity
- 方法:
google.cloud.gkehub.v1beta1.GkeHubMembershipService.ValidateExclusivity - 审核日志类型:数据访问
- 权限:
gkehub.memberships.generateConnectManifest - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v1beta1.GkeHubMembershipService.ValidateExclusivity"
google.cloud.gkehub.v2.GkeHubFeature
以下审核日志与属于 google.cloud.gkehub.v2.GkeHubFeature 的方法相关联。
CreateMembershipFeature
- 方法:
google.cloud.gkehub.v2.GkeHubFeature.CreateMembershipFeature - 审核日志类型:管理员活动
- 权限:
gkehub.membershipfeatures.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2.GkeHubFeature.CreateMembershipFeature"
DeleteMembershipFeature
- 方法:
google.cloud.gkehub.v2.GkeHubFeature.DeleteMembershipFeature - 审核日志类型:管理员活动
- 权限:
gkehub.membershipfeatures.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2.GkeHubFeature.DeleteMembershipFeature"
GetMembershipFeature
- 方法:
google.cloud.gkehub.v2.GkeHubFeature.GetMembershipFeature - 审核日志类型:数据访问
- 权限:
gkehub.membershipfeatures.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2.GkeHubFeature.GetMembershipFeature"
ListMembershipFeatures
- 方法:
google.cloud.gkehub.v2.GkeHubFeature.ListMembershipFeatures - 审核日志类型:数据访问
- 权限:
gkehub.membershipfeatures.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2.GkeHubFeature.ListMembershipFeatures"
UpdateMembershipFeature
- 方法:
google.cloud.gkehub.v2.GkeHubFeature.UpdateMembershipFeature - 审核日志类型:管理员活动
- 权限:
gkehub.membershipfeatures.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2.GkeHubFeature.UpdateMembershipFeature"
google.cloud.gkehub.v2alpha.GkeHubFeature
以下审核日志与属于 google.cloud.gkehub.v2alpha.GkeHubFeature 的方法相关联。
CreateMembershipFeature
- 方法:
google.cloud.gkehub.v2alpha.GkeHubFeature.CreateMembershipFeature - 审核日志类型:管理员活动
- 权限:
gkehub.membershipfeatures.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2alpha.GkeHubFeature.CreateMembershipFeature"
DeleteMembershipFeature
- 方法:
google.cloud.gkehub.v2alpha.GkeHubFeature.DeleteMembershipFeature - 审核日志类型:管理员活动
- 权限:
gkehub.membershipfeatures.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2alpha.GkeHubFeature.DeleteMembershipFeature"
GetMembershipFeature
- 方法:
google.cloud.gkehub.v2alpha.GkeHubFeature.GetMembershipFeature - 审核日志类型:数据访问
- 权限:
gkehub.membershipfeatures.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2alpha.GkeHubFeature.GetMembershipFeature"
ListMembershipFeatures
- 方法:
google.cloud.gkehub.v2alpha.GkeHubFeature.ListMembershipFeatures - 审核日志类型:数据访问
- 权限:
gkehub.membershipfeatures.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2alpha.GkeHubFeature.ListMembershipFeatures"
UpdateMembershipFeature
- 方法:
google.cloud.gkehub.v2alpha.GkeHubFeature.UpdateMembershipFeature - 审核日志类型:管理员活动
- 权限:
gkehub.membershipfeatures.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2alpha.GkeHubFeature.UpdateMembershipFeature"
google.cloud.gkehub.v2beta.GkeHubFeature
以下审核日志与属于 google.cloud.gkehub.v2beta.GkeHubFeature 的方法相关联。
CreateMembershipFeature
- 方法:
google.cloud.gkehub.v2beta.GkeHubFeature.CreateMembershipFeature - 审核日志类型:管理员活动
- 权限:
gkehub.membershipfeatures.create - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2beta.GkeHubFeature.CreateMembershipFeature"
DeleteMembershipFeature
- 方法:
google.cloud.gkehub.v2beta.GkeHubFeature.DeleteMembershipFeature - 审核日志类型:管理员活动
- 权限:
gkehub.membershipfeatures.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2beta.GkeHubFeature.DeleteMembershipFeature"
GetMembershipFeature
- 方法:
google.cloud.gkehub.v2beta.GkeHubFeature.GetMembershipFeature - 审核日志类型:数据访问
- 权限:
gkehub.membershipfeatures.get - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2beta.GkeHubFeature.GetMembershipFeature"
ListMembershipFeatures
- 方法:
google.cloud.gkehub.v2beta.GkeHubFeature.ListMembershipFeatures - 审核日志类型:数据访问
- 权限:
gkehub.membershipfeatures.list - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2beta.GkeHubFeature.ListMembershipFeatures"
UpdateMembershipFeature
- 方法:
google.cloud.gkehub.v2beta.GkeHubFeature.UpdateMembershipFeature - 审核日志类型:管理员活动
- 权限:
gkehub.membershipfeatures.update - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:长时间运行的操作
- 此方法的过滤条件:
protoPayload.methodName="google.cloud.gkehub.v2beta.GkeHubFeature.UpdateMembershipFeature"
google.iam.v1.IAMPolicy
以下审核日志与属于 google.iam.v1.IAMPolicy 的方法相关联。
GetIamPolicy
- 方法:
GetIamPolicy - 审核日志类型:数据访问
- 权限:
gkehub.features.getIamPolicy - ADMIN_READgkehub.memberships.getIamPolicy - ADMIN_READ
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="GetIamPolicy"
SetIamPolicy
- 方法:
SetIamPolicy - 审核日志类型:管理员活动
- 权限:
gkehub.features.setIamPolicy - ADMIN_WRITEgkehub.memberships.setIamPolicy - ADMIN_WRITEgkehub.scopes.setIamPolicy - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="SetIamPolicy"
google.longrunning.Operations
以下审核日志与属于 google.longrunning.Operations 的方法相关联。
CancelOperation
- 方法:
google.longrunning.Operations.CancelOperation - 审核日志类型:管理员活动
- 权限:
gkehub.operations.cancel - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.longrunning.Operations.CancelOperation"
DeleteOperation
- 方法:
google.longrunning.Operations.DeleteOperation - 审核日志类型:管理员活动
- 权限:
gkehub.operations.delete - ADMIN_WRITE
- 方法是长时间运行的操作或流式传输操作:否。
- 此方法的过滤条件:
protoPayload.methodName="google.longrunning.Operations.DeleteOperation"
Kubernetes 审核日志记录
除了 Cloud Audit Logs 之外,通过 Kubernetes 审核日志记录,管理员可对已注册集群中发生的事件执行保留、查询、处理和提醒操作。管理员可以使用日志中记录的信息执行取证分析、实时提醒,或者对一组集群的使用方式和用户进行编目。
Connect Agent 会与已注册集群中运行的本地 API 服务器通信,并且每个集群都有自己的一组 Kubernetes 审核日志。用户通过 Connect 在界面中执行的所有操作均由该集群记录。