Skip to content

Commit 1ffc47b

Browse files
committed
fixup! KEP-3221: update kep
Signed-off-by: Nabarun Pal <[email protected]>
1 parent feca317 commit 1ffc47b

File tree

1 file changed

+4
-0
lines changed
  • keps/sig-auth/3221-structured-authorization-configuration

1 file changed

+4
-0
lines changed

keps/sig-auth/3221-structured-authorization-configuration/README.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -422,6 +422,10 @@ to the authz webhook for which the expression has been defined. The user would h
422422
to a `request` variable containing a `SubjectAccessReview` object in the version specified
423423
by `subjectAccessReviewVersion`.
424424

425+
When no matchConditions are satisfied for a request, the webhook would be skipped. In such
426+
situations, the decision is logged in the audit log with the `webhook_skipped` annotation.
427+
Benefit of this is that resource and user info will also be logged.
428+
425429
The code path for enabling the above will only be triggered if the feature flag is enabled until
426430
the feature flag is removed and this feature graduates to GA.
427431

0 commit comments

Comments
 (0)