add audit log test cases for cross-group subresource

This commit is contained in:
njuptlzf
2021-06-03 23:46:31 +08:00
parent 15c4d579f0
commit 7b0fbb7292
3 changed files with 238 additions and 4 deletions

View File

@@ -460,12 +460,12 @@ rules:
verbs: ["deletecollection"]
omitStages:
- "RequestReceived"
# Secrets, ConfigMaps, and TokenReviews can contain sensitive & binary data,
# Secrets, ConfigMaps, TokenRequest and TokenReviews can contain sensitive & binary data,
# so only log at the Metadata level.
- level: Metadata
resources:
- group: "" # core
resources: ["secrets", "configmaps"]
resources: ["secrets", "configmaps", "serviceaccounts/token"]
- group: authentication.k8s.io
resources: ["tokenreviews"]
omitStages: