-
Feature Request
-
Resolution: Unresolved
-
Normal
-
None
-
openshift-4.12.z
-
None
Cx wants to apply audit_policy on the **rosa** cluster, more information in the doc[1].
[1] https://docs.openshift.com/container-platform/4.12/security/audit-log-policy-config.html
As this is a managed cluster, it was prohibited to do so:
ClusterID: 704579e6-29c8-4370-8aa7-80a621f0a438
~~~
admission webhook "
regular-user-validation.managed.openshift.io
" denied the request: Prevented from accessing Red Hat managed resources. This is in an effort to prevent harmful actions that may cause unintended consequences or affect the stability of the cluster. If you have any questions about this, please reach out to Red Hat support at
https://access.redhat.com/support
~~~
Based on the doc[1], cx wants to enable "AllRequestBodies" profile on audit_policy, for the rosa cluster.
Cx mentions the principal objective to enable "AllRequestBodies" profile it`s because they need to monitor all of the actions on the cluster by the users in order to give then more permissions to the developer to do your tasks.
Thanks in advance