log violations

Azure · Jul 4, 2023 · 810c14f · 810c14f
1 parent 71703bd
commit 810c14f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/pkg/operator/controllers/guardrails/staticresources/gk_audit_controller_deployment.yaml b/pkg/operator/controllers/guardrails/staticresources/gk_audit_controller_deployment.yaml
@@ -41,6 +41,7 @@ spec:
         - --operation=audit
         - --operation=status
         - --operation=mutation-status
+        - --log-denies=true
         - --logtostderr
         - --disable-opa-builtin={http.send}
         - --disable-cert-rotation

diff --git a/pkg/operator/controllers/guardrails/staticresources/gk_controller_manager_deployment.yaml b/pkg/operator/controllers/guardrails/staticresources/gk_controller_manager_deployment.yaml
@@ -52,6 +52,7 @@ spec:
       containers:
       - args:
         - --port=8443
+        - --log-denies=true
         - --logtostderr
         # - --exempt-namespace={{.Namespace}} # remove this line to allow policy to be enforced in the ns
         - --operation=webhook