k8s-idm-lab

k8s-idm-lab copied to clipboard

Audit policy metadata-only rule should include `serviceaccounts/token` resource

1

The following files reference a metadata-only audit policy in order to prevent logging request/response contents for sensitive resources: * https://github.com/TremoloSecurity/k8s-idm-lab/blob/master/k8s-audit-policy.yaml A recent Kubernetes [bugfix](https://github.com/kubernetes/kubernetes/pull/102040) means that audit-logging of subresource requests...

liggitt