apiVersion: audit.k8s.io/v1 # This is required.
kind: Policy
omitStages:
  - "RequestReceived"
rules:
  - level: RequestResponse
    namespaces: ["payments","orders-prod"]
    resources:
    - group: ""
      resources: ["secrets"]


  - level: Metadata
    verbs: ["create","update","patch","delete","deletecollection"]
    resources:
    - group: "rbac.authorization.k8s.io"
      resources: ["roles","rolebindings","clusterroles","clusterrolebindings"]

  - level: Request
    resources:
    - group: ""
      resources: ["pods/exec"]

  - level: Metadata
    omitStages: 
    - "RequestReceived"