Skip to content

[Rails] Openbao HTTP Audit log collection for raw_secret_operation

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

Context

  • See this Slack Thread
  • As per our ADR for audit logging, we need to define a raw_secret_operation audit event type
  • This will be used to capture all the logs from Openbao that are NOT logs corresponding to explicitly captured logs - i.e CRUD actions on Project and Group Secrets
  • In this MR we have implemented the logic to capture audit logs for Project Secret
  • In this issue we will tackle capturing the audit logs for group level secrets
  • Both the above tasks ☝️ ONLY deals with capturing the CRUD actions on secrets
  • Open Question - Do we need to define 2 new audit event types for raw_secret_operation - one for Group Secrets and one for Project Secrets
Edited by 🤖 GitLab Bot 🤖