Binding
| Operation | Description | Sample | Rule |
|---|---|---|---|
| create-bindings | Y | N | |
| any-bindings | Synthetic aggregation for rules that filter the bindings resource with no specific verb. Not a distinct audit record; hosts rule listings that key on objectRef.resource alone. | N | N |
create bindings
#Example Audit Event #
{
"kind": "Event",
"apiVersion": "audit.k8s.io/v1",
"level": "RequestResponse",
"auditID": "00000000-0000-0000-0000-000000000000",
"stage": "ResponseComplete",
"requestURI": "/api/v1/namespaces/dw-harn/bindings",
"verb": "create",
"user": {
"username": "kubernetes-admin",
"groups": [
"kubeadm:cluster-admins",
"system:authenticated"
],
"extra": {
"authentication.kubernetes.io/credential-id": [
"X509SHA256=2f9bb39ae9e6831406f8ad02206bf46e69b5760f7adffe5feb860da290b80a7e"
]
}
},
"sourceIPs": [
"203.0.113.10"
],
"userAgent": "kubectl/v1.36.2 (linux/amd64) kubernetes/24e2b02",
"objectRef": {
"resource": "bindings",
"namespace": "dw-harn",
"name": "dw-harn-bindings",
"apiVersion": "v1"
},
"responseStatus": {
"metadata": {},
"status": "Success",
"code": 201
},
"requestObject": {
"kind": "Binding",
"apiVersion": "v1",
"metadata": {
"name": "dw-harn-bindings",
"namespace": "dw-harn"
},
"target": {
"kind": "Node",
"name": "node-control-plane",
"apiVersion": "v1"
}
},
"responseObject": {
"kind": "Status",
"apiVersion": "v1",
"metadata": {},
"status": "Success",
"code": 201
},
"requestReceivedTimestamp": "2026-07-03T00:17:53.375693Z",
"stageTimestamp": "2026-07-03T00:17:53.379522Z",
"annotations": {
"authorization.k8s.io/decision": "allow",
"authorization.k8s.io/reason": "RBAC: allowed by ClusterRoleBinding \"kubeadm:cluster-admins\" of ClusterRole \"cluster-admin\" to Group \"kubeadm:cluster-admins\""
}
}
References #
any verb on bindings (synthetic aggregation)
#Description
Synthetic aggregation for rules that filter the bindings resource with no specific verb. Not a distinct audit record; hosts rule listings that key on objectRef.resource alone.