Add audit event for duo_foundational_flows_enabled changes

SAM FIGUEROArequested to merge
sf/feature/duo-foundational-flows-audit-g2 into master

What does this MR do and why?

Add audit event for duo_foundational_flows_enabled changes

Add duo_foundational_flows_enabled_updated audit event type to track when the Duo foundational flows enabled setting is changed on a group. This ensures group owners have an audit trail when foundational flows availability is modified.

  • Create audit event type YAML definition
  • Register column in NamespaceSettingChangesAuditor
  • Add spec coverage for the new audited setting

References

Screenshots or screen recordings

image

How to set up and validate locally

  1. Start a GDK instance with EE license features enabled
  2. As a group owner, navigate to a group's settings
  3. Toggle setting duo_foundational_flows_enabled
  4. Check the audit events log for the group (Group > Security & Compliance > Audit Events)
  5. Verify an audit event was created with:
    • Correct event type name for duo_foundational_flows_enabled_updated
    • from and to values reflecting the change (e.g., false -> true)
    • target_details showing the group's full path
  6. Verify the event is also streamed if external audit event streaming is configured

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports