fix: ns exclusion audit from cache (open-policy-agent#3129)

Signed-off-by: Alex Pana <[email protected]> Signed-off-by: alex <[email protected]> Signed-off-by: Sertaç Özercan <[email protected]> Co-authored-by: Sertaç Özercan <[email protected]> Signed-off-by: Dale Haiducek <[email protected]>
dhaiducek · Feb 20, 2024 · d4bf5c5 · d4bf5c5
1 parent 9d3cbcd
commit d4bf5c5
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/pkg/audit/manager.go b/pkg/audit/manager.go
@@ -475,6 +475,17 @@ func (am *Manager) auditFromCache(ctx context.Context) ([]Result, []error) {
 			ns = nil
 		}
 
+		excluded, err := am.skipExcludedNamespace(&obj)
+		if err != nil {
+			am.log.Error(err, "Unable to exclude object namespace for audit from cache %v %s/%s", obj.GroupVersionKind().String(), obj.GetNamespace(), obj.GetName())
+			continue
+		}
+
+		if excluded {
+			am.log.V(logging.DebugLevel).Info("excluding object from audit from cache %v %s/%s", obj.GroupVersionKind().String(), obj.GetNamespace(), obj.GetName())
+			continue
+		}
+
 		au := &target.AugmentedUnstructured{
 			Object:    obj,
 			Namespace: ns,