diff --git a/audit-policy.yaml b/audit-policy.yaml new file mode 100644 index 0000000..b8b3d85 --- /dev/null +++ b/audit-policy.yaml @@ -0,0 +1,12 @@ +apiVersion: audit.k8s.io/v1 # This is required. +kind: Policy +# Don't generate audit events for all requests in RequestReceived stage. +omitStages: + - "RequestReceived" +rules: + # A catch-all rule to log all other requests at the Metadata level. + - level: Metadata + # Long-running requests like watches that fall under this rule will not + # generate an audit event in RequestReceived. + omitStages: + - "RequestReceived" \ No newline at end of file