Completed upto lesson 35

2026-08-26 19:37:55 +06:00
parent 639e69484c
commit eaef1c17a7
20 changed files with 1586 additions and 0 deletions
--- a/lab/lesson-35-audit-policy.yaml
+++ b/lab/lesson-35-audit-policy.yaml
@@ -0,0 +1,26 @@
+apiVersion: audit.k8s.io/v1 # This is required.
+kind: Policy
+omitStages:
+  - "RequestReceived"
+rules:
+  - level: RequestResponse
+    namespaces: ["payments","orders-prod"]
+    resources:
+    - group: ""
+      resources: ["secrets"]
+
+
+  - level: Metadata
+    verbs: ["create","update","patch","delete","deletecollection"]
+    resources:
+    - group: "rbac.authorization.k8s.io"
+      resources: ["roles","rolebindings","clusterroles","clusterrolebindings"]
+
+  - level: Request
+    resources:
+    - group: ""
+      resources: ["pods/exec"]
+
+  - level: Metadata
+    omitStages: 
+    - "RequestReceived"