diff --git a/CHANGELOG.md b/CHANGELOG.md index 40cce60b9e..36c76d7c42 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -244,6 +244,10 @@ Adding a new version? You'll need three changes: Service, KongConsumer, KongConsumerGroup object to allow plugins to be associated with combinations of those objects. [#6252](https://github.com/Kong/kubernetes-ingress-controller/pull/6252) + +### Added +- Add `INFO` log when admission result is not allowed + [#6084](https://github.com/Kong/kubernetes-ingress-controller/issues/6084) ## 3.2.0 diff --git a/internal/admission/handler.go b/internal/admission/handler.go index 396563b36d..b8630b6853 100644 --- a/internal/admission/handler.go +++ b/internal/admission/handler.go @@ -63,6 +63,17 @@ func (h RequestHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) { http.Error(w, err.Error(), http.StatusInternalServerError) return } + + if !response.Allowed { + h.Logger.Info( + "Object admission request not allowed", + "name", review.Request.Name, + "kind", review.Request.Kind.Kind, + "namespace", review.Request.Namespace, + "message", response.Result.Message, + ) + } + review.Response = response if err := json.NewEncoder(w).Encode(&review); err != nil {