From be278f9dba162bfb4e84bd1bcc8ac57f6a22f39e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Necatican=20Y=C4=B1ld=C4=B1r=C4=B1m?=
<necaticanyildirim@gmail.com>
Date: Mon, 5 Apr 2021 23:51:19 +0300
Subject: [PATCH] Add documentation for audit webhook variables (#7434)
* Add documentation for audit webhook variables
* Enclose the value of audit_webhook_server_url in a codeblock
* Add default value for audit_webhook_batch_max_wait
---
docs/vars.md | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/docs/vars.md b/docs/vars.md
index 1cdfd9438..c3120be53 100644
--- a/docs/vars.md
+++ b/docs/vars.md
@@ -164,6 +164,14 @@ node_taints:
* `audit_policy_file`: "{{ kube_config_dir }}/audit-policy/apiserver-audit-policy.yaml"
By default, the `audit_policy_file` contains [default rules](https://github.com/kubernetes-sigs/kubespray/blob/master/roles/kubernetes/control-plane/templates/apiserver-audit-policy.yaml.j2) that can be overridden with the `audit_policy_custom_rules` variable.
+* *kubernetes_audit_webhook* - When set to `true`, enables the webhook audit backend.
+ The webhook parameters can be tuned via the following variables (which default values are shown below):
+ * `audit_webhook_config_file`: "{{ kube_config_dir }}/audit-policy/apiserver-audit-webhook-config.yaml"
+ * `audit_webhook_server_url`: `"https://audit.app"`
+ * `audit_webhook_server_extra_args`: {}
+ * `audit_webhook_mode`: batch
+ * `audit_webhook_batch_max_size`: 100
+ * `audit_webhook_batch_max_wait`: 1s
### Custom flags for Kube Components
--
GitLab