-
Notifications
You must be signed in to change notification settings - Fork 138
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CBG-3924: Add mocked config and API for audit logging #6874
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, is this worth adding to openapi docs?
8403859
to
cd58f85
Compare
@JRascagneres should I wait until you've tried this toy build before I merge? |
@bbrks Up to you, might be a 'bit' away yet before I can test out all the endpoints. |
Can you at least review then to make sure the config and endpoints are as you'd expect? |
type: boolean | ||
default: false | ||
enabled_events: | ||
description: List of enabled audit events |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should this say that certain events will be enabled by default and have to be explicitly disabled?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Had discussions with PM earlier this week. The plan is to have this represent the full set of enabled events. It contains the set of default events, and you can disable by removing from this list.
|
||
Required Sync Gateway RBAC roles: | ||
|
||
* TODO |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we have a ticket to decide RBAC roles?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Following up in PRD
* Add config fields for audit logging * Support all flag types and pointers in fillConfigWithFlags * tweak comment * wip * rebase fix for rotation_interval * Move uint map key to string for JSON * Add API specs * make GET API actually return the data... * Add placeholder audit log config for runtime server config * Add db/global audit log API changes * unindent
* Add config fields for audit logging * Support all flag types and pointers in fillConfigWithFlags * tweak comment * wip * rebase fix for rotation_interval * Move uint map key to string for JSON * Add API specs * make GET API actually return the data... * Add placeholder audit log config for runtime server config * Add db/global audit log API changes * unindent
* Add config fields for audit logging * Support all flag types and pointers in fillConfigWithFlags * tweak comment * wip * rebase fix for rotation_interval * Move uint map key to string for JSON * Add API specs * make GET API actually return the data... * Add placeholder audit log config for runtime server config * Add db/global audit log API changes * unindent
* Add config fields for audit logging * Support all flag types and pointers in fillConfigWithFlags * tweak comment * wip * rebase fix for rotation_interval * Move uint map key to string for JSON * Add API specs * make GET API actually return the data... * Add placeholder audit log config for runtime server config * Add db/global audit log API changes * unindent
* Add config fields for audit logging * Support all flag types and pointers in fillConfigWithFlags * tweak comment * wip * rebase fix for rotation_interval * Move uint map key to string for JSON * Add API specs * make GET API actually return the data... * Add placeholder audit log config for runtime server config * Add db/global audit log API changes * unindent
* Add config fields for audit logging * Support all flag types and pointers in fillConfigWithFlags * tweak comment * wip * rebase fix for rotation_interval * Move uint map key to string for JSON * Add API specs * make GET API actually return the data... * Add placeholder audit log config for runtime server config * Add db/global audit log API changes * unindent
* Add config fields for audit logging * Support all flag types and pointers in fillConfigWithFlags * tweak comment * wip * rebase fix for rotation_interval * Move uint map key to string for JSON * Add API specs * make GET API actually return the data... * Add placeholder audit log config for runtime server config * Add db/global audit log API changes * unindent
CBG-3924
Unblocks Capella work since they can set the new config and reference new API endpoints.
SGAuditEvents
for visibility from handler.Toy build
https://mobile.jenkins.couchbase.com/view/Sync_Gateway/job/sgw-toy-build/258/
Integration Tests
GSI=true,xattrs=true
https://jenkins.sgwdev.com/job/SyncGateway-Integration/000/