reopen PR #12580 (#13162)

roles/kubernetes/control-plane/defaults/main/main.yml

@@ -80,6 +80,11 @@ audit_policy_file: "{{ kube_config_dir }}/audit-policy/apiserver-audit-policy.ya
 #     verbs: []
 #     resources: []
 
+# audit global omit stages
+# Set this variable to a list of audit stages to omit globally in the audit policy.
+# e.g. audit_policy_global_omit_stages: ["RequestReceived"]
+audit_policy_global_omit_stages: []
+
 # audit log hostpath
 audit_log_name: audit-logs
 audit_log_hostpath: /var/log/kubernetes/audit

roles/kubernetes/control-plane/templates/apiserver-audit-policy.yaml.j2

@@ -1,5 +1,6 @@
 apiVersion: audit.k8s.io/v1
 kind: Policy
+omitStages: {{ audit_policy_global_omit_stages | to_yaml(default_flow_style=True) | trim }}
 rules:
 {% if audit_policy_custom_rules is defined and audit_policy_custom_rules != "" %}
 {{ audit_policy_custom_rules | indent(2, true) }}