Merge pull request #1288 from tkashem/audit

audit: use API to drop managed fields

pkg/operator/apiserver/audit/manifests/base-policy.yaml

@@ -1,5 +1,7 @@
     apiVersion: audit.k8s.io/v1
     kind: Policy
+    # drop managed fields from audit, this is at global scope.
+    omitManagedFields: true
     # Don't generate audit events for all requests in RequestReceived stage.
     omitStages:
     - "RequestReceived"

pkg/operator/apiserver/audit/testdata/allrequestbodies.yaml

@@ -2,6 +2,8 @@ apiVersion: audit.k8s.io/v1
 kind: Policy
 metadata:
   name: policy
+# drop managed fields from audit, this is at global scope.
+omitManagedFields: true
 # Don't generate audit events for all requests in RequestReceived stage.
 omitStages:
 - "RequestReceived"

pkg/operator/apiserver/audit/testdata/audit-policies-cm-scenario-1.yaml

@@ -9,6 +9,8 @@ data:
     kind: Policy
     metadata:
       name: policy
+    # drop managed fields from audit, this is at global scope.
+    omitManagedFields: true
     # Don't generate audit events for all requests in RequestReceived stage.
     omitStages:
     - "RequestReceived"
@@ -47,6 +49,8 @@ data:
     kind: Policy
     metadata:
       name: policy
+    # drop managed fields from audit, this is at global scope.
+    omitManagedFields: true
     # Don't generate audit events for all requests in RequestReceived stage.
     omitStages:
     - "RequestReceived"
@@ -94,6 +98,8 @@ data:
     kind: Policy
     metadata:
       name: policy
+    # drop managed fields from audit, this is at global scope.
+    omitManagedFields: true
     # Don't generate audit events for all requests in RequestReceived stage.
     omitStages:
     - "RequestReceived"

pkg/operator/apiserver/audit/testdata/default.yaml

@@ -2,6 +2,8 @@
     kind: Policy
     metadata:
       name: policy
+    # drop managed fields from audit, this is at global scope.
+    omitManagedFields: true
     # Don't generate audit events for all requests in RequestReceived stage.
     omitStages:
     - "RequestReceived"

pkg/operator/apiserver/audit/testdata/multipleCr.yaml

@@ -2,6 +2,8 @@ apiVersion: audit.k8s.io/v1
 kind: Policy
 metadata:
   name: policy
+# drop managed fields from audit, this is at global scope.
+omitManagedFields: true
 # Don't generate audit events for all requests in RequestReceived stage.
 omitStages:
   - "RequestReceived"

pkg/operator/apiserver/audit/testdata/none.yaml

@@ -2,6 +2,8 @@ apiVersion: audit.k8s.io/v1
 kind: Policy
 metadata:
   name: policy
+# drop managed fields from audit, this is at global scope.
+omitManagedFields: true
 # Don't generate audit events for all requests in RequestReceived stage.
 omitStages:
 - "RequestReceived"

pkg/operator/apiserver/audit/testdata/oauth.yaml

@@ -2,6 +2,8 @@ apiVersion: audit.k8s.io/v1
 kind: Policy
 metadata:
   name: policy
+# drop managed fields from audit, this is at global scope.
+omitManagedFields: true
 # Don't generate audit events for all requests in RequestReceived stage.
 omitStages:
 - "RequestReceived"

pkg/operator/apiserver/audit/testdata/writerequestbodies.yaml

@@ -2,6 +2,8 @@ apiVersion: audit.k8s.io/v1
 kind: Policy
 metadata:
   name: policy
+# drop managed fields from audit, this is at global scope.
+omitManagedFields: true
 # Don't generate audit events for all requests in RequestReceived stage.
 omitStages:
 - "RequestReceived"