Data plane audit plugin
Sending data plane logs to the Cloud Audit service is enabled and configured using the vkcloudaudit-fluent-bit-plugin logging plugin. It works with the Golang plugin interface provided by the Fluent Bit service.
Examples of event sources for the data plane:
- Kubernetes (Kubernetes auditing);
- PostgreSQL (pgAudit extension);
- Operating system (auditd service).
Event collection from some sources, such as Kubernetes, is already integrated into the audit service. You can add any other sources by installing and configuring the plugin yourself.
Parameter | Required | Description | Where to find |
|---|---|---|---|
|
| Authentication type:
Default: | |
|
| Keystone service endpoint | Auth URL parameter in the VK Cloud management console |
|
| Maximum time the application waits for a response from the authentication service when validating the user's credentials. Default: | |
|
| ID of the VK Cloud project where logs will be written | Project ID parameter in the VK Cloud management console. Example: Do not confuse it with a Project Name like |
|
| User ID on whose behalf logs will be written | |
|
| Username on whose behalf logs will be written | Username parameter in the VK Cloud management console |
|
| Password of the user on whose behalf logs will be written | For |
|
| JSON file that contains the |
Allowed ways to specify user credentials:
user_idandpassword;key_file;user_nameandpassword(for example, your username and password for signing in to the VK Cloud management console).
Parameter | Required | Description |
|---|---|---|
|
| API endpoint for receiving audit data:
|
|
| Audit event source ID (for example, |
|
| Maximum request timeout. Default: |
|
| Time after which an inactive keepalive connection will be closed. Default: |
|
| Maximum number of connections. Default: |