luxolus
/
open-consul
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity

Add OSS changes for specifying audit log permission mode

This commit is contained in:
Blake Covarrubias 2021-07-29 15:44:27 -07:00 committed by Blake Covarrubias
parent ba24a39f0c
commit f97e843c61
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
agent/config/config.go
View File

@ -786,6 +786,7 @@ type AuditSink struct {
Format *string `mapstructure:"format"` Format *string `mapstructure:"format"`
Path *string `mapstructure:"path"` Path *string `mapstructure:"path"`
DeliveryGuarantee *string `mapstructure:"delivery_guarantee"` DeliveryGuarantee *string `mapstructure:"delivery_guarantee"`
Mode *string `mapstructure:"mode"`
RotateBytes *int `mapstructure:"rotate_bytes"` RotateBytes *int `mapstructure:"rotate_bytes"`
RotateDuration *string `mapstructure:"rotate_duration"` RotateDuration *string `mapstructure:"rotate_duration"`
RotateMaxFiles *int `mapstructure:"rotate_max_files"` RotateMaxFiles *int `mapstructure:"rotate_max_files"`

1
website/content/docs/agent/options.mdx
View File

@ -867,6 +867,7 @@ Valid time units are 'ns', 'us' (or 'µs'), 'ms', 's', 'm', 'h'."
the rules governing how audit events are written. the rules governing how audit events are written.
The following keys are valid: The following keys are valid:
- `best-effort` - Consul only supports `best-effort` event delivery. - `best-effort` - Consul only supports `best-effort` event delivery.
- `mode` - The permissions to set on the audit log files.
- `rotate_duration` - Specifies the - `rotate_duration` - Specifies the
interval by which the system rotates to a new log file. At least one of `rotate_duration` or `rotate_bytes` interval by which the system rotates to a new log file. At least one of `rotate_duration` or `rotate_bytes`
must be configured to enable audit logging. must be configured to enable audit logging.