Merge pull request #57177 from liggitt/rbac-log

Automatic merge from submit-queue (batch tested with PRs 56386, 57204, 55692, 57107, 57177). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>. Raise RBAC DENY log level Fixes #46877 Fixes https://github.com/kubernetes/kubernetes/issues/55821 Can still be logged verbosely with `--vmodule=rbac*=5` if desired ```release-note NONE ```

Merge pull request #57177 from liggitt/rbac-log
7a23bbb0 · Kubernetes Submit Queue · GitHub · 45b5c0ec · 13854c46 · 7a23bbb0
Unverified Commit 7a23bbb0 authored Dec 17, 2017 by Kubernetes Submit Queue Committed by GitHub Dec 17, 2017
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

rbac.go plugin/pkg/auth/authorizer/rbac/rbac.go +1 -1

No files found.
--- a/plugin/pkg/auth/authorizer/rbac/rbac.go
+++ b/plugin/pkg/auth/authorizer/rbac/rbac.go
@@ -79,7 +79,7 @@ func (r *RBACAuthorizer) Authorize(requestAttributes authorizer.Attributes) (aut

 	// Build a detailed log of the denial.
 	// Make the whole block conditional so we don't do a lot of string-building we won't use.
-	if glog.V(2) {
+	if glog.V(5) {
 		var operation string
 		if requestAttributes.IsResourceRequest() {
 			b := &bytes.Buffer{}