File tree Expand file tree Collapse file tree 1 file changed +2
-2
lines changed
keps/sig-auth/3221-structured-authorization-configuration Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -89,7 +89,7 @@ is unreachable.
89
89
Authorization chain.
90
90
- Allow ordered definition of authorization modes.
91
91
- Allow definition of multiple webhooks in the authorization chain while all
92
- other types of authorizers should only be specified once.
92
+ other types of authorizers should at most be specified once.
93
93
- Allow resource/user based pre-filtering of webhooks using CEL to prevent unnecessary
94
94
invocations.
95
95
- Enable user to define the policy when a webhook can't be reached due to
@@ -425,7 +425,7 @@ to a `request` variable containing a `SubjectAccessReview` object in the version
425
425
by `subjectAccessReviewVersion`.
426
426
427
427
When no matchConditions are satisfied for a request, the webhook would be skipped. In such
428
- situations, the decision is logged in the audit log with the `webhookskipped .k8s.io` annotation.
428
+ situations, the decision is logged in the audit log with the `authorization .k8s.io/webhook-skipped ` annotation.
429
429
Benefit of this is that resource and user info will also be logged.
430
430
431
431
The code path for enabling the above will only be triggered if the feature flag is enabled
You can’t perform that action at this time.
0 commit comments