Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

audit logs for auth tokens and secrets #372

Merged
merged 2 commits into from
Jan 31, 2024
Merged

Conversation

irshadaj
Copy link
Contributor

Added audit logging for database handlers:

  • UpdateAuthSecret
  • CreateAuthSecret
  • CreateAuthToken
  • DeleteAuthToken

@rvazarkar
Copy link
Contributor

Is any of this audit logging under test right now?

@superlinkx
Copy link
Contributor

Is any of this audit logging under test right now?

We have an integration test that exercises the audit log and ensures data is being written and read properly. There haven't been many other e2e tests that end up exercising the audit log that we've found so far, and that's a gap we want to close, but for now that's going to be out of scope given our sensitive timeline. Additional testing is planned before the final merge of our feature branch, but we've gotta get code complete first and see how much time we have to add tests

Copy link
Contributor

@superlinkx superlinkx left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Only found one minor issue with a miscopied action name. Everything else looks solid

cmd/api/src/database/auth.go Outdated Show resolved Hide resolved
@irshadaj irshadaj merged commit 0482b61 into populate-audit-log-fields Jan 31, 2024
3 checks passed
@irshadaj irshadaj deleted the 15_16 branch January 31, 2024 17:21
@github-actions github-actions bot locked and limited conversation to collaborators Jan 31, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants