docs: update features.audit.method desc

Author: francesco-furlan

charts/shield/README.md

@@ -105,7 +105,7 @@ The following table lists the configurable parameters of the `shield` chart and
 | features.detections.malware_control.enabled                                                                                            |                                                                                                                                                                                                                                                                                                                                                                                                                  | <code>false</code>                                                                                                                                                                                                                                                                                                                                                                                                                           |
 | features.detections.ml_policies.enabled                                                                                                |                                                                                                                                                                                                                                                                                                                                                                                                                  | <code>false</code>                                                                                                                                                                                                                                                                                                                                                                                                                           |
 | features.detections.kubernetes_audit.enabled                                                                                           | Enable the Kubernetes Audit feature on cluster shield                                                                                                                                                                                                                                                                                                                                                            | <code>false</code>                                                                                                                                                                                                                                                                                                                                                                                                                           |
-| features.detections.kubernetes_audit.method                                                                                            | Method to use: validating_webhook (emulated) or audit_backend (real audit logs)                                                                                                                                                                                                                                                                                                                                  | <code>validating_webhook</code>                                                                                                                                                                                                                                                                                                                                                                                                              |
+| features.detections.kubernetes_audit.method                                                                                            | Method used to collect Kubernetes audit events. Use validating_webhook to intercept requests through the admission webhook, or audit_backend when using the Kubernetes audit backend integration.                                                                                                                                                                                                                | <code>validating_webhook</code>                                                                                                                                                                                                                                                                                                                                                                                                              |
 | features.detections.kubernetes_audit.timeout                                                                                           | The timeout for the audit feature                                                                                                                                                                                                                                                                                                                                                                                | <code>10</code>                                                                                                                                                                                                                                                                                                                                                                                                                              |
 | features.detections.kubernetes_audit.http_port                                                                                         | The port that will be used to expose the audit endpoints                                                                                                                                                                                                                                                                                                                                                         | <code>6443</code>                                                                                                                                                                                                                                                                                                                                                                                                                            |
 | features.detections.kubernetes_audit.excluded_namespaces                                                                               | The list of namespaces that will be excluded from the audit feature                                                                                                                                                                                                                                                                                                                                              | <code>[]</code>                                                                                                                                                                                                                                                                                                                                                                                                                              |

charts/shield/values.yaml

@@ -120,7 +120,7 @@ features:
     kubernetes_audit:
       # Enable the Kubernetes Audit feature on cluster shield
       enabled: false
-      # Method to use: validating_webhook (emulated) or audit_backend (real audit logs)
+      # Method used to collect Kubernetes audit events. Use validating_webhook to intercept requests through the admission webhook, or audit_backend when using the Kubernetes audit backend integration.
       method: validating_webhook
       # The timeout for the audit feature
       timeout: 10