kops-cluster-config-audit-logging.yaml

spec:
  fileAssets:
  — name: kubernetes-audit
    path: /srv/kubernetes/audit.yaml
    # which type of instances to appy the file
    roles: [Master]
    content: |
      <audit policy here>
      
  kubeAPIServer:
   auditLogPath: /var/log/kube-apiserver-audit.log
   auditLogMaxAge: 10 # num days
   auditLogMaxBackups: 1 # the num of audit logs to retain
   auditLogMaxSize: 100 # the max size in MB to retain
   auditPolicyFile: /srv/kubernetes/audit.yaml