Add example audit config file

Signed-off-by: Silvio Moioli <silvio@moioli.net>
This commit is contained in:
Silvio Moioli 2023-10-27 14:12:56 +02:00
parent cd79b8a88b
commit 92a052469f
No known key found for this signature in database
1 changed files with 14 additions and 0 deletions

View File

@ -0,0 +1,14 @@
apiVersion: audit.k8s.io/v1
kind: Policy
# Prevent requests in the RequestReceived stage from generating audit events.
omitStages:
- "RequestReceived"
rules:
# Log all resources in core and extensions at the Metadata level.
- level: Metadata
# Long-running requests like watches that fall under this rule will not
# generate an audit event in RequestReceived.
omitStages:
- "RequestReceived"