Merge pull request #1819 from p0lyn0mial/audit-livez

audit: do not log requests to /livez
openshift · Oct 7, 2024 · 45b605e · 45b605e
2 parents 65e0327 + ce17046
commit 45b605e
Show file tree

Hide file tree

Showing 7 changed files with 7 additions and 0 deletions.
diff --git a/pkg/operator/apiserver/audit/manifests/base-policy.yaml b/pkg/operator/apiserver/audit/manifests/base-policy.yaml
@@ -14,6 +14,7 @@
       - "/version"
       - "/healthz"
       - "/readyz"
+      - "/livez"
     # Don't log requests by "system:apiserver" on apirequestcounts
     - level: None
       users: ["system:apiserver"]

diff --git a/pkg/operator/apiserver/audit/testdata/allrequestbodies.yaml b/pkg/operator/apiserver/audit/testdata/allrequestbodies.yaml
@@ -16,6 +16,7 @@ rules:
   - "/version"
   - "/healthz"
   - "/readyz"
+  - "/livez"
 # Don't log requests by "system:apiserver" on apirequestcounts
 - level: None
   users: ["system:apiserver"]

diff --git a/pkg/operator/apiserver/audit/testdata/default.yaml b/pkg/operator/apiserver/audit/testdata/default.yaml
@@ -16,6 +16,7 @@
       - "/version"
       - "/healthz"
       - "/readyz"
+      - "/livez"
       # Don't log requests by "system:apiserver" on apirequestcounts
     - level: None
       users: ["system:apiserver"]

diff --git a/pkg/operator/apiserver/audit/testdata/multipleCr.yaml b/pkg/operator/apiserver/audit/testdata/multipleCr.yaml
@@ -16,6 +16,7 @@ rules:
   - "/version"
   - "/healthz"
   - "/readyz"
+  - "/livez"
 # Don't log requests by "system:apiserver" on apirequestcounts
 - level: None
   users: ["system:apiserver"]

diff --git a/pkg/operator/apiserver/audit/testdata/none.yaml b/pkg/operator/apiserver/audit/testdata/none.yaml
@@ -16,6 +16,7 @@ rules:
   - "/version"
   - "/healthz"
   - "/readyz"
+  - "/livez"
 # Don't log requests by "system:apiserver" on apirequestcounts
 - level: None
   users: ["system:apiserver"]

diff --git a/pkg/operator/apiserver/audit/testdata/oauth.yaml b/pkg/operator/apiserver/audit/testdata/oauth.yaml
@@ -16,6 +16,7 @@ rules:
   - "/version"
   - "/healthz"
   - "/readyz"
+  - "/livez"
 # Don't log requests by "system:apiserver" on apirequestcounts
 - level: None
   users: ["system:apiserver"]

diff --git a/pkg/operator/apiserver/audit/testdata/writerequestbodies.yaml b/pkg/operator/apiserver/audit/testdata/writerequestbodies.yaml
@@ -16,6 +16,7 @@ rules:
   - "/version"
   - "/healthz"
   - "/readyz"
+  - "/livez"
 # Don't log requests by "system:apiserver" on apirequestcounts
 - level: None
   users: ["system:apiserver"]