mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-23 22:49:43 -05:00
34 lines
761 B
Go
34 lines
761 B
Go
|
package resources
|
||
|
|
|
||
|
|
import (
|
||
|
|
v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
||
|
|
auditv1 "k8s.io/apiserver/pkg/apis/audit/v1"
|
||
|
|
)
|
||
|
|
|
||
|
|
// AuditPolicy defines rulesets for what should be logged in the kube-apiserver audit log.
|
||
|
|
// reference: https://kubernetes.io/docs/tasks/debug/debug-cluster/audit/ .
|
||
|
|
type AuditPolicy struct {
|
||
|
|
Policy auditv1.Policy
|
||
|
|
}
|
||
|
|
|
||
|
|
func NewDefaultAuditPolicy() *AuditPolicy {
|
||
|
|
return &AuditPolicy{
|
||
|
|
Policy: auditv1.Policy{
|
||
|
|
TypeMeta: v1.TypeMeta{
|
||
|
|
APIVersion: "audit.k8s.io/v1",
|
||
|
|
Kind: "Policy",
|
||
|
|
},
|
||
|
|
Rules: []auditv1.PolicyRule{
|
||
|
|
{
|
||
|
|
Level: auditv1.LevelMetadata,
|
||
|
|
},
|
||
|
|
},
|
||
|
|
},
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// Marshal marshals the audit policy as a YAML document.
|
||
|
|
func (p *AuditPolicy) Marshal() ([]byte, error) {
|
||
|
|
return MarshalK8SResources(p)
|
||
|
|
}
|