apiVersion: audit.k8s.io/v1
kind: Policy
rules:
  - level: Metadata
    resources:
    - group: ""
      resources: ["pods"]
  - level: RequestResponse
    verbs: ["create", "update", "patch"]
    resources:
    - group: "apps"
      resources: ["deployments"]
  - level: None
    users: ["system:kube-proxy"]