From aa1640ee6985df331b06e34e4a207700294dd27f Mon Sep 17 00:00:00 2001 From: dfitzmau Date: Tue, 16 Sep 2025 12:35:46 +0100 Subject: [PATCH] OSDOCS-16161: Refined the note on Configuring the audit log policy with custom rules --- modules/nodes-nodes-audit-policy-custom.adoc | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/modules/nodes-nodes-audit-policy-custom.adoc b/modules/nodes-nodes-audit-policy-custom.adoc index e7c6bd52f8..2c3cf24c96 100644 --- a/modules/nodes-nodes-audit-policy-custom.adoc +++ b/modules/nodes-nodes-audit-policy-custom.adoc @@ -12,7 +12,7 @@ These custom rules take precedence over the top-level profile field. The custom [IMPORTANT] ==== -Custom rules are ignored if the top-level profile field is set to `None`. +If you set the top-level profile field to `None`, an API server, such as the Kubernetes API server, ignores custom rules and disables audit logging. ==== .Prerequisites @@ -47,11 +47,6 @@ spec: ---- <1> Add one or more groups and specify the profile to use for that group. These custom rules take precedence over the top-level profile field. The custom rules are evaluated from top to bottom, and the first that matches is applied. <2> Set to `Default`, `WriteRequestBodies`, or `AllRequestBodies`. If you do not set this top-level profile field, it defaults to the `Default` profile. -+ -[WARNING] -==== -Do not set the top-level profile field to `None` if you want to use custom rules. Custom rules are ignored if the top-level profile field is set to `None`. -==== . Save the file to apply the changes.