How to enable debug level logging for the kube-auth-api DaemonSet in Rancher v2.3+ provisioned Kubernetes clusters

This document (000020055) is provided subject to the disclaimer at the end of this document.



The kube-auth-api DaemonSet is deployed to controlplane nodes, in Rancher v2.3+ provisioned Kubernetes clusters, to provide user authentication functionality for the authorized cluster endpoint. When troubleshooting an issue with authorized cluster endpoint authentication, it may be helpful to analyse the kube-auth-api logs at debug level, and this article details how to enable debug logging.



  1. Navigate to the workloads view of the System project, within the Rancher UI, for the relevant Rancher provisioned cluster.

  2. Locate the kube-api-auth DaemonSet, within the cattle-system namespace, click the vertial elipses and select Edit, per the following screenshot:

    Edit the kube-api-auth daemonset

  3. Click Show advanced options in the bottom left.

  4. Expand the Command section, enter /usr/bin/kube-api-auth --debug serve in the Command field, per the following screenshat, and click Save:

    Replace the command with --debug option

  5. The kube-api-auth pod(s) will restart with the new debug logging configuration. Viewing the kube-api-auth logs you should now obeserve log messages with level=debug.

Further reading


This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:000020055
  • Creation Date: 06-May-2021
  • Modified Date:06-May-2021
    • SUSE Rancher

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

Join Our Community

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.

SUSE Customer Support Quick Reference Guide SUSE Technical Support Handbook Update Advisories
Support FAQ

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.

Go to Customer Center