Skip to content

Event type info in group deploy token audit events

What does this MR do and why?

Add event type information in streaming audit event while creation and revoking group deploy token

action event type
creation group_deploy_token_created
revoke group_deploy_token_revoked
delete group_deploy_token_destroyed
creation failed group_deploy_token_creation_failed

How to set up and validate locally

  1. Create a deploy token from Group -> Settings -> Repository.
  2. Check streamed audit event contains correct event type information both in payload and headers.
  3. Check audit event is saved in database and is visible at {{base url}}/admin/audit_logs.
  4. Revoke a deploy token from UI.
  5. Repeat step 2 and 3.
  6. Create Deploy token using API https://docs.gitlab.com/ee/api/deploy_tokens.html#create-a-group-deploy-token
  7. Repeat step 2 and 3
  8. Delete Deploy token using API https://docs.gitlab.com/ee/api/deploy_tokens.html#delete-a-group-deploy-token
  9. Repeat step 2 and 3

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #363087 (closed)

Edited by Harsimar Sandhu

Merge request reports