Add denylist for group audit event streaming filters

Harsimar Sandhurequested to merge
feature/audit-event-type-denylist into master

What does this MR do and why?

Add denylist for group audit event streaming filters

Introduce a denylist mode for group-level audit event type filters on external streaming destinations. Adds a kind column (allow/deny) to the filter table, GraphQL mutations to manage denylist entries, and service classes for create/destroy. Denylisted event types are blocked at stream time when the audit_event_type_denylist feature flag is on.

Changelog: added EE: true

References

Screenshots or screen recordings

Before After

Query commands

https://console.postgres.ai/gitlab/gitlab-production-main/sessions/52192/commands/153717 https://console.postgres.ai/gitlab/gitlab-production-main/sessions/52192/commands/153718

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Harsimar Sandhu

Merge request reports