From be278f9dba162bfb4e84bd1bcc8ac57f6a22f39e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Necatican=20Y=C4=B1ld=C4=B1r=C4=B1m?= Date: Mon, 5 Apr 2021 23:51:19 +0300 Subject: [PATCH] Add documentation for audit webhook variables (#7434) * Add documentation for audit webhook variables * Enclose the value of audit_webhook_server_url in a codeblock * Add default value for audit_webhook_batch_max_wait --- docs/vars.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/vars.md b/docs/vars.md index 1cdfd9438..c3120be53 100644 --- a/docs/vars.md +++ b/docs/vars.md @@ -164,6 +164,14 @@ node_taints: * `audit_policy_file`: "{{ kube_config_dir }}/audit-policy/apiserver-audit-policy.yaml" By default, the `audit_policy_file` contains [default rules](https://github.com/kubernetes-sigs/kubespray/blob/master/roles/kubernetes/control-plane/templates/apiserver-audit-policy.yaml.j2) that can be overridden with the `audit_policy_custom_rules` variable. +* *kubernetes_audit_webhook* - When set to `true`, enables the webhook audit backend. + The webhook parameters can be tuned via the following variables (which default values are shown below): + * `audit_webhook_config_file`: "{{ kube_config_dir }}/audit-policy/apiserver-audit-webhook-config.yaml" + * `audit_webhook_server_url`: `"https://audit.app"` + * `audit_webhook_server_extra_args`: {} + * `audit_webhook_mode`: batch + * `audit_webhook_batch_max_size`: 100 + * `audit_webhook_batch_max_wait`: 1s ### Custom flags for Kube Components