Enable auditd (#722)

* Enable auditd * Fix s3 modules * Revert s3 change Signed-off-by: QuentinBisson <[email protected]> --------- Signed-off-by: QuentinBisson <[email protected]>
giantswarm · Jul 10, 2023 · 4087a94 · 4087a94
1 parent 6f13db8
commit 4087a94
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- Enable auditd.
+
 ## [14.16.1] - 2023-07-04
 
 ### Changed

diff --git a/templates/bastion.yaml.tmpl b/templates/bastion.yaml.tmpl
@@ -130,6 +130,8 @@ systemd:
         [Install]
         WantedBy=multi-user.target
     {{ end }}
+    - name: auditd.service
+      enabled: true
 storage:
   files:
 

diff --git a/templates/master.yaml.tmpl b/templates/master.yaml.tmpl
@@ -1251,6 +1251,8 @@ systemd:
       ExecStart=/opt/install-debug-tools
       [Install]
       WantedBy=multi-user.target
+  - name: auditd.service
+    enabled: true
 {{ if .LogentriesEnabled }}
   - name: logentries.service
     enabled: true

diff --git a/templates/worker.yaml.tmpl b/templates/worker.yaml.tmpl
@@ -713,7 +713,8 @@ systemd:
         $KUBECTL label nodes --overwrite $(hostname | tr '[:upper:]' '[:lower:]') kubernetes.io/role=worker'
       [Install]
       WantedBy=multi-user.target
-
+  - name: auditd.service
+    enabled: true
 {{ if .LogentriesEnabled }}
   - name: logentries.service
     enabled: true