diff --git a/content/en/docs/reference/access-authn-authz/authorization.md b/content/en/docs/reference/access-authn-authz/authorization.md index 292bf6f8ae4e8..204ac36bf473a 100644 --- a/content/en/docs/reference/access-authn-authz/authorization.md +++ b/content/en/docs/reference/access-authn-authz/authorization.md @@ -219,11 +219,23 @@ authorizers: # Same as setting `--authorization-webhook-cache-authorized-ttl` flag # Default: 5m0s authorizedTTL: 30s + # If set to false, 'authorized' responses from the webhook are not cached + # and the specified authorizedTTL is ignored/has no effect. + # Same as setting `--authorization-webhook-cache-authorized-ttl` flag to `0`. + # Note: Setting authorizedTTL to `0` results in its default value being used. + # Default: true + cacheAuthorizedRequests: true # The duration to cache 'unauthorized' responses from the webhook # authorizer. # Same as setting `--authorization-webhook-cache-unauthorized-ttl` flag # Default: 30s unauthorizedTTL: 30s + # If set to false, 'unauthorized' responses from the webhook are not cached + # and the specified unauthorizedTTL is ignored/has no effect. + # Same as setting `--authorization-webhook-cache-unauthorized-ttl` flag to `0`. + # Note: Setting unauthorizedTTL to `0` results in its default value being used. + # Default: true + cacheUnauthorizedRequests: true # Timeout for the webhook request # Maximum allowed is 30s. # Required, with no default.