scottk/vault
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/vault.git synced 2025-11-01 19:17:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

Pipe MountPoint to audit logs (#20411) (#20413)

Browse Source 
* MountPoint piped to audit logs
---------
Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
This commit is contained in:
hc-github-team-secure-vault-core
2023-04-28 15:37:43 -04:00
committed by GitHub
parent 268655c0ec
commit afc3a90e5a
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
audit/format.go
View File

@@ -114,6 +114,7 @@ func (f *AuditFormatter) FormatRequest(ctx context.Context, w io.Writer, config
ClientToken: req.ClientToken, ClientToken: req.ClientToken,
ClientTokenAccessor: req.ClientTokenAccessor, ClientTokenAccessor: req.ClientTokenAccessor,
Operation: req.Operation, Operation: req.Operation,
MountPoint: req.MountPoint,
MountType: req.MountType, MountType: req.MountType,
MountAccessor: req.MountAccessor, MountAccessor: req.MountAccessor,
Namespace: &AuditNamespace{ Namespace: &AuditNamespace{
@@ -313,6 +314,7 @@ func (f *AuditFormatter) FormatResponse(ctx context.Context, w io.Writer, config
ClientTokenAccessor: req.ClientTokenAccessor, ClientTokenAccessor: req.ClientTokenAccessor,
ClientID: req.ClientID, ClientID: req.ClientID,
Operation: req.Operation, Operation: req.Operation,
MountPoint: req.MountPoint,
MountType: req.MountType, MountType: req.MountType,
MountAccessor: req.MountAccessor, MountAccessor: req.MountAccessor,
Namespace: &AuditNamespace{ Namespace: &AuditNamespace{
@@ -330,6 +332,7 @@ func (f *AuditFormatter) FormatResponse(ctx context.Context, w io.Writer, config
}, },
Response: &AuditResponse{ Response: &AuditResponse{
MountPoint: req.MountPoint,
MountType: req.MountType, MountType: req.MountType,
MountAccessor: req.MountAccessor, MountAccessor: req.MountAccessor,
Auth: respAuth, Auth: respAuth,
@@ -394,6 +397,7 @@ type AuditRequest struct {
ClientID string `json:"client_id,omitempty"` ClientID string `json:"client_id,omitempty"`
ReplicationCluster string `json:"replication_cluster,omitempty"` ReplicationCluster string `json:"replication_cluster,omitempty"`
Operation logical.Operation `json:"operation,omitempty"` Operation logical.Operation `json:"operation,omitempty"`
MountPoint string `json:"mount_point,omitempty"`
MountType string `json:"mount_type,omitempty"` MountType string `json:"mount_type,omitempty"`
MountAccessor string `json:"mount_accessor,omitempty"` MountAccessor string `json:"mount_accessor,omitempty"`
ClientToken string `json:"client_token,omitempty"` ClientToken string `json:"client_token,omitempty"`
@@ -411,6 +415,7 @@ type AuditRequest struct {
type AuditResponse struct { type AuditResponse struct {
Auth *AuditAuth `json:"auth,omitempty"` Auth *AuditAuth `json:"auth,omitempty"`
MountPoint string `json:"mount_point,omitempty"`
MountType string `json:"mount_type,omitempty"` MountType string `json:"mount_type,omitempty"`
MountAccessor string `json:"mount_accessor,omitempty"` MountAccessor string `json:"mount_accessor,omitempty"`
Secret *AuditSecret `json:"secret,omitempty"` Secret *AuditSecret `json:"secret,omitempty"`

3
changelog/20411.txt Normal file
View File

@@ -0,0 +1,3 @@
```release-note:improvement
audit: add a `mount_point` field to audit requests and response entries
```