Skip to content

Enable modsecurity logging sidecar for ingress controller

What does this MR do?

Enable modsecurity logging sidecar for ingress controller

Enables a sidecar container within the ingress controller pod for streaming the modsecurity audit log.

To properly handle the multiline datastream the logging format has been changed to JSON.

This work contributes to #14707 (closed) in setting up initial logging infrastructure

Screenshots

By exposing log file as a separate container's stdout we automagically stream to kibana via #33782 (closed). Example of output log queried in kibana:

Image_2019-11-04_at_16.54.35

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Lucas Charles

Merge request reports