Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-5267

apply audit_policy on rosa cluster

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • openshift-4.12.z
    • API
    • None
    • 0
    • 0% 0%

      Cx wants to apply audit_policy on the **rosa** cluster, more information in the doc[1].

      [1] https://docs.openshift.com/container-platform/4.12/security/audit-log-policy-config.html

      As this is a managed cluster, it was prohibited to do so:

      ClusterID: 704579e6-29c8-4370-8aa7-80a621f0a438

      ~~~

      admission webhook "

      regular-user-validation.managed.openshift.io

      " denied the request: Prevented from accessing Red Hat managed resources. This is in an effort to prevent harmful actions that may cause unintended consequences or affect the stability of the cluster. If you have any questions about this, please reach out to Red Hat support at

      https://access.redhat.com/support
      ~~~

      Based on the doc[1], cx wants to enable "AllRequestBodies" profile on audit_policy,  for the rosa cluster.

      Cx mentions the principal objective to enable "AllRequestBodies" profile it`s because they need to monitor all of the actions on the cluster by the users in order to give then more permissions to the developer to do your tasks.

      Thanks in advance

            wcabanba@redhat.com William Caban
            rhn-support-uwagh Utkarsh Wagh
            Utkarsh Wagh
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: