update unit tests

openshift · Feb 2, 2022 · 0a143d8 · 0a143d8
1 parent d87f3fe
commit 0a143d8
Show file tree

Hide file tree

Showing 6 changed files with 42 additions and 0 deletions.
diff --git a/pkg/operator/apiserver/audit/testdata/allrequestbodies.yaml b/pkg/operator/apiserver/audit/testdata/allrequestbodies.yaml
@@ -21,6 +21,13 @@ rules:
   - "/version"
   - "/healthz"
   - "/readyz"
+# Don't log requests by "system:apiserver" on apirequestcounts
+- level: None
+  users: ["system:apiserver"]
+  resources:
+    - group: "apiserver.openshift.io"
+      resources: ["apirequestcounts", "apirequestcounts/*"]
+  namespaces: [""]
 # exclude resources where the body is security-sensitive
 - level: Metadata
   resources:

diff --git a/pkg/operator/apiserver/audit/testdata/default.yaml b/pkg/operator/apiserver/audit/testdata/default.yaml
@@ -21,6 +21,13 @@
       - "/version"
       - "/healthz"
       - "/readyz"
+      # Don't log requests by "system:apiserver" on apirequestcounts
+    - level: None
+      users: ["system:apiserver"]
+      resources:
+        - group: "apiserver.openshift.io"
+          resources: ["apirequestcounts", "apirequestcounts/*"]
+      namespaces: [""]
     # Log the full Identity API resource object so that the audit trail
     # allows us to match the username with the IDP identity.
     - level: RequestResponse

diff --git a/pkg/operator/apiserver/audit/testdata/multipleCr.yaml b/pkg/operator/apiserver/audit/testdata/multipleCr.yaml
@@ -21,6 +21,13 @@ rules:
   - "/version"
   - "/healthz"
   - "/readyz"
+# Don't log requests by "system:apiserver" on apirequestcounts
+- level: None
+  users: ["system:apiserver"]
+  resources:
+    - group: "apiserver.openshift.io"
+      resources: ["apirequestcounts", "apirequestcounts/*"]
+  namespaces: [""]
 # exclude resources where the body is security-sensitive
 - level: Metadata
   resources:

diff --git a/pkg/operator/apiserver/audit/testdata/none.yaml b/pkg/operator/apiserver/audit/testdata/none.yaml
@@ -21,4 +21,11 @@ rules:
   - "/version"
   - "/healthz"
   - "/readyz"
+# Don't log requests by "system:apiserver" on apirequestcounts
+- level: None
+  users: ["system:apiserver"]
+  resources:
+    - group: "apiserver.openshift.io"
+      resources: ["apirequestcounts", "apirequestcounts/*"]
+  namespaces: [""]
 - level: None
diff --git a/pkg/operator/apiserver/audit/testdata/oauth.yaml b/pkg/operator/apiserver/audit/testdata/oauth.yaml
@@ -21,6 +21,13 @@ rules:
   - "/version"
   - "/healthz"
   - "/readyz"
+# Don't log requests by "system:apiserver" on apirequestcounts
+- level: None
+  users: ["system:apiserver"]
+  resources:
+    - group: "apiserver.openshift.io"
+      resources: ["apirequestcounts", "apirequestcounts/*"]
+  namespaces: [""]
 # exclude resources where the body is security-sensitive
 - level: Metadata
   resources:

diff --git a/pkg/operator/apiserver/audit/testdata/writerequestbodies.yaml b/pkg/operator/apiserver/audit/testdata/writerequestbodies.yaml
@@ -21,6 +21,13 @@ rules:
   - "/version"
   - "/healthz"
   - "/readyz"
+# Don't log requests by "system:apiserver" on apirequestcounts
+- level: None
+  users: ["system:apiserver"]
+  resources:
+    - group: "apiserver.openshift.io"
+      resources: ["apirequestcounts", "apirequestcounts/*"]
+  namespaces: [""]
 # exclude resources where the body is security-sensitive
 - level: Metadata
   resources: