AuditPolicy.spec

AdditionalRedactions details additional informatino to be redacted. If there are any Filers defined in the same policy, these Redactions will only be applied to logs that are Allowed by those filters. If there are no Filters, the redactions will be applied to all logs.

No description provided.

Filters described what logs are explicitly allowed and denied. Leave empty if all logs should be allowed. The Allow action has higher precedence than Deny. So if there are multiple filters that match a log and at least one Allow, the log will be allowed.

Verbosity defines how much data to collect from each log. The end verbosity for a log is calculated as a merge of each policy that Allows a log (including plicies with no Filters). For example, take the two policie specs below: AuditPolicySpec { Enabled: True, Verbosity: LogVerbosity { Request: Verbosity { Body: True, }, }, } AuditPolicySpec { Enabled: True, Filters: []Filters{ { Action: "allow", RequestURI: "/foo" }, }, Verbosity: LogVerbosity { Response: Verbosity { Body: True, }, }, } A request to the "/foo" endpoint will log both the request and response bodies, but a request to "/bar" will only log the request body.