feat: add logs for admission which aren't allowed (#6086)

Signed-off-by: David Weber <david.weber@w3tec.ch>
Co-authored-by: Jakub Warczarek <jakub.warczarek@konghq.com>

CHANGELOG.md

@@ -244,6 +244,10 @@ Adding a new version? You'll need three changes:
   Service, KongConsumer, KongConsumerGroup object to allow plugins to be associated with combinations
   of those objects.
   [#6252](https://github.com/Kong/kubernetes-ingress-controller/pull/6252)
+
+### Added
+- Add `INFO` log when admission result is not allowed
+  [#6084](https://github.com/Kong/kubernetes-ingress-controller/issues/6084)
 
 ## 3.2.0
 

internal/admission/handler.go

@@ -63,6 +63,17 @@ func (h RequestHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 		http.Error(w, err.Error(), http.StatusInternalServerError)
 		return
 	}
+
+	if !response.Allowed {
+		h.Logger.Info(
+			"Object admission request not allowed",
+			"name", review.Request.Name,
+			"kind", review.Request.Kind.Kind,
+			"namespace", review.Request.Namespace,
+			"message", response.Result.Message,
+		)
+	}
+
 	review.Response = response
 
 	if err := json.NewEncoder(w).Encode(&review); err != nil {