github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-10-21 22:49:31 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #54267 from ericchiang/audit-policy-file-without-kind-or-version

Browse Source 
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

audit policy: reject audit policy files without apiVersion and kind

Closes https://github.com/kubernetes/kubernetes/issues/54254

/cc @sttts @CaoShuFeng @crassirostris @tallclair

/sig auth
/kind cleanup

```release-note
Audit policy files without apiVersion and kind are treated as invalid.
```
This commit is contained in:
Kubernetes Submit Queue
2017-11-08 22:56:34 -08:00
committed by GitHub
parent 3e315aa0f8 393ac3cc55
commit ab44ec9d77
4 changed files with 53 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG-1.8.md
View File

@@ -582,7 +582,7 @@ Consider the following changes, limitations, and guidelines before you upgrade:
* The `--audit-policy-file` option is required if the `AdvancedAudit` feature is not explicitly turned off (`--feature-gates=AdvancedAudit=false`) on the API server.
* The audit log file defaults to JSON encoding when using the advanced auditing feature gate.
* The `--audit-policy-file` option requires `kind` and `apiVersion` fields specifying what format version the `Policy` is using.
* An audit policy file without either an `apiVersion` or a `kind` field may be treated as invalid.
* The webhook and log file now output the `v1beta1` event format.
For more details, see [Advanced audit](https://kubernetes.io/docs/tasks/debug-application-cluster/audit/#advanced-audit).