Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-5267

apply audit_policy on rosa cluster

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • openshift-4.12.z
    • API
    • None

      Cx wants to apply audit_policy on the **rosa** cluster, more information in the doc[1].

      [1] https://docs.openshift.com/container-platform/4.12/security/audit-log-policy-config.html

      As this is a managed cluster, it was prohibited to do so:

      ClusterID: 704579e6-29c8-4370-8aa7-80a621f0a438

      ~~~

      admission webhook "

      regular-user-validation.managed.openshift.io

      " denied the request: Prevented from accessing Red Hat managed resources. This is in an effort to prevent harmful actions that may cause unintended consequences or affect the stability of the cluster. If you have any questions about this, please reach out to Red Hat support at

      https://access.redhat.com/support
      ~~~

      Based on the doc[1], cx wants to enable "AllRequestBodies" profile on audit_policy,  for the rosa cluster.

      Cx mentions the principal objective to enable "AllRequestBodies" profile it`s because they need to monitor all of the actions on the cluster by the users in order to give then more permissions to the developer to do your tasks.

      Thanks in advance

              rhn-engineering-abhgupta Abhishek Gupta
              rhn-support-uwagh Utkarsh Wagh
              Utkarsh Wagh
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: