🌱 Enable audit logs for envtest-based unit tests if ARTIFACTS env var is set (#12847)

* add ability to enable audit logs for envtest

* cleanup

* dir format

* fix lint

Author: ivelichkovich

internal/test/envtest/environment.go

@@ -296,6 +296,37 @@ func newEnvironment(scheme *runtime.Scheme, additionalCRDDirectoryPaths []string
 		WebhookInstallOptions: initWebhookInstallOptions(),
 	}
 
+	// if ARTIFACTS is setup, configure apiserver audit logs to log to ARTIFACTS dir
+	if os.Getenv("ARTIFACTS") != "" {
+		_, packageFileName, _, _ := goruntime.Caller(2)
+		relativePathPackageCallerFile, err := filepath.Rel(root, packageFileName)
+		if err != nil {
+			klog.Fatalf("unable to get relative path of calling package %+v", err)
+		}
+
+		relativePathPackageCallerDir := filepath.Dir(relativePathPackageCallerFile)
+		auditLogsDir := filepath.Join(os.Getenv("ARTIFACTS"), relativePathPackageCallerDir)
+		auditLogsFilePath := filepath.Join(auditLogsDir, "apiserver-audit-logs")
+
+		if err = os.MkdirAll(auditLogsDir, 0750); err != nil {
+			klog.Fatalf("failed to create audit logs dir: %+v", err)
+		}
+
+		auditPolicyPath, err := writeAuditPolicy(auditLogsDir)
+		if err != nil {
+			klog.Fatalf("failed to write audit logs policy file: %+v", err)
+		}
+
+		env.ControlPlane = envtest.ControlPlane{}
+		env.ControlPlane.APIServer = &envtest.APIServer{}
+		env.ControlPlane.APIServer.Configure().Set("audit-log-path", auditLogsFilePath)
+		env.ControlPlane.APIServer.Configure().Set("audit-log-format", "json")
+		env.ControlPlane.APIServer.Configure().Set("audit-policy-file", auditPolicyPath)
+		env.ControlPlane.APIServer.Configure().Set("audit-log-maxage", "0")
+		env.ControlPlane.APIServer.Configure().Set("audit-log-maxbackup", "0")
+		env.ControlPlane.APIServer.Configure().Set("audit-log-maxsize", "0")
+	}
+
 	if _, err := env.Start(); err != nil {
 		err = kerrors.NewAggregate([]error{err, env.Stop()})
 		panic(err)
@@ -405,6 +436,24 @@ func newEnvironment(scheme *runtime.Scheme, additionalCRDDirectoryPaths []string
 	}
 }
 
+func writeAuditPolicy(dir string) (string, error) {
+	policyFile := filepath.Join(dir, "audit-policy.yaml")
+
+	policyYAML := []byte(`
+apiVersion: audit.k8s.io/v1
+kind: Policy
+rules:
+  - level: RequestResponse
+    resources:
+      - resources: ["*"]
+`)
+
+	if err := os.WriteFile(policyFile, policyYAML, 0600); err != nil {
+		return "", err
+	}
+	return policyFile, nil
+}
+
 // start starts the manager.
 func (e *Environment) start(ctx context.Context) {
 	go func() {