chore: add audit-policy for kubernetes

2025-01-20 05:30:58 +00:00 · 2025-01-20 05:30:58 +00:00 · 4862afc4da
commit 4862afc4da
parent 8bec74aba0
1 changed files with 12 additions and 0 deletions
--- a/audit-policy.yaml
+++ b/audit-policy.yaml
@ -0,0 +1,12 @@
+apiVersion: audit.k8s.io/v1 # This is required.
+kind: Policy
+# Don't generate audit events for all requests in RequestReceived stage.
+omitStages:
+  - "RequestReceived"
+rules:
+  # A catch-all rule to log all other requests at the Metadata level.
+  - level: Metadata
+    # Long-running requests like watches that fall under this rule will not
+    # generate an audit event in RequestReceived.
+    omitStages:
+      - "RequestReceived"