Add Audit Action for rules
Describe the problem/challenge you have Currently, there is no way to write a network policy without enforcing it or simulate policy matches for auditing or statistical purposes. The ability to create rules solely for gathering metrics over time or to stage policies before enforcement is currently lacking.
Describe the solution you'd like Add "Audit" or "Stage" to the list of possible actions for a rule so it will show up in the flow exporter as such and not enforce anything.
Anything else you would like to add? Calico and Cilium have a very similiar feature
Thanks for submitting this. It seems that for Calico at least, this is an enterprise feature only (i.e., not available in the open-source version)?
Thanks for submitting this. It seems that for Calico at least, this is an enterprise feature only (i.e., not available in the open-source version)?
It previously was, it's now in the open source version aswell.
This issue is stale because it has been open 90 days with no activity. Remove stale label or comment, or this will be closed in 90 days. You can add a label "lifecycle/frozen" to skip stale checking.