File tree Expand file tree Collapse file tree 1 file changed +4
-0
lines changed
keps/sig-auth/3221-structured-authorization-configuration Expand file tree Collapse file tree 1 file changed +4
-0
lines changed Original file line number Diff line number Diff line change @@ -422,6 +422,10 @@ to the authz webhook for which the expression has been defined. The user would h
422
422
to a `request` variable containing a `SubjectAccessReview` object in the version specified
423
423
by `subjectAccessReviewVersion`.
424
424
425
+ When no matchConditions are satisfied for a request, the webhook would be skipped. In such
426
+ situations, the decision is logged in the audit log with the `webhook_skipped` annotation.
427
+ Benefit of this is that resource and user info will also be logged.
428
+
425
429
The code path for enabling the above will only be triggered if the feature flag is enabled until
426
430
the feature flag is removed and this feature graduates to GA.
427
431
You can’t perform that action at this time.
0 commit comments