Yandex Audit Trails event reference

Written by

Updated at January 29, 2026

Audit Trails supports tracking control plane and data plane events for Yandex Managed Service for Kubernetes.

The general format of the event_type field value is as follows:

yandex.cloud.audit.k8s.<event_name>

Control plane event reference

Event name	Description
`AutoUpgradeCluster`	Performing cluster auto-updates
`AutoUpgradeNodeGroup`	Performing node group auto-updates
`CreateCluster`	Creating a cluster
`CreateNodeGroup`	Creating a node group
`DeleteCluster`	Deleting a cluster
`DeleteNodeGroup`	Deleting a node group
`DeleteStoppedCluster`	Deleting a stopped cluster
`InstallHelmRelease`	Installing a Helm version
`SetClusterAccessBindings`	Assigning access permissions for a cluster
`StartCluster`	Starting a cluster
`StopCluster`	Stopping a cluster
`UninstallHelmRelease`	Destroying a Helm version
`UpdateCluster`	Updating a cluster
`UpdateClusterAccessBindings`	Updating access permissions for a cluster
`UpdateClusterCertificate`	Updating a cluster certificate
`UpdateHelmRelease`	Updating a Helm version
`UpdateNodeGroup`	Updating a node group

Event name	Description
`apiserver.ApiServerApprove`	Confirming a request
`apiserver.ApiServerBind`	Linking a role
`apiserver.ApiServerCreate`	Creating a resource
`apiserver.ApiServerDelete`	Deleting a resource
`apiserver.ApiServerDeleteCollection`	Deleting a resource collection
`apiserver.ApiServerEscalate`	Escalating privileges
`apiserver.ApiServerGet`	Getting information about a resource
`apiserver.ApiServerHead`	Getting resource metadata
`apiserver.ApiServerImpersonate`	Impersonation
`apiserver.ApiServerList`	Getting information about a resource collection
`apiserver.ApiServerNonstandardVerb`	The event is generated if the Managed Service for Kubernetes audit log contains a non-standard value in the `verb` field
`apiserver.ApiServerOptions`	Configuring a resource
`apiserver.ApiServerPatch`	Changing a resource
`apiserver.ApiServerPost`	Creating a resource
`apiserver.ApiServerPut`	Updating a resource
`apiserver.ApiServerUpdate`	Updating a query
`apiserver.ApiServerWatch`	Tracking resources