authorizer.DecisionAllow,
				"RBAC: allowed to patch pod",
				nil,
			},
			want: `
			# HELP authorization_attempts_total [ALPHA] Counter of authorization attempts broken down by result. It can be either 'allowed', 'denied', 'no-opinion' or 'error'.
			# TYPE authorization_attempts_total counter
			authorization_attempts_total{result="allowed"} 1
				`,
		},
		{
			desc: "decision forbid",
			authorizer: fakeAuthorizer{

			StabilityLevel: metrics.ALPHA,
		},
		[]string{"result"},
	)

	authorizationAttemptsCounter = metrics.NewCounterVec(
		&metrics.CounterOpts{
			Name:           "authorization_attempts_total",
			Help:           "Counter of authorization attempts broken down by result. It can be either 'allowed', 'denied', 'no-opinion' or 'error'.",
			StabilityLevel: metrics.ALPHA,
		},
		[]string{"result"},
	)

- `kube-apiserver` added two new metrics `authorization_attempts_total` and `authorization_duration_seconds`