File tree Expand file tree Collapse file tree 1 file changed +2
-2
lines changed
keps/sig-auth/3221-structured-authorization-configuration Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -89,7 +89,7 @@ is unreachable.
8989Authorization chain.
9090- Allow ordered definition of authorization modes.
9191- Allow definition of multiple webhooks in the authorization chain while all
92- other types of authorizers should only be specified once.
92+ other types of authorizers should at most be specified once.
9393- Allow resource/user based pre-filtering of webhooks using CEL to prevent unnecessary
9494invocations.
9595- Enable user to define the policy when a webhook can't be reached due to
@@ -425,7 +425,7 @@ to a `request` variable containing a `SubjectAccessReview` object in the version
425425by `subjectAccessReviewVersion`.
426426
427427When no matchConditions are satisfied for a request, the webhook would be skipped. In such
428- situations, the decision is logged in the audit log with the `webhookskipped .k8s.io` annotation.
428+ situations, the decision is logged in the audit log with the `authorization .k8s.io/webhook-skipped ` annotation.
429429Benefit of this is that resource and user info will also be logged.
430430
431431The code path for enabling the above will only be triggered if the feature flag is enabled
You can’t perform that action at this time.
0 commit comments