From cf2689aea0567c0208d7147ac6ac7060ce72d2b3 Mon Sep 17 00:00:00 2001 From: emelinda Date: Sat, 7 Nov 2026 16:00:24 +0300 Subject: [PATCH] =?UTF-8?q?security-audit:=20fix=20filter/audit=20config?= =?UTF-8?q?=20key=20=E2=80=94=20log=5Frecord=20(singular),=20filterprocess?= =?UTF-8?q?or=200.121?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The processor rejected "log_records": LogFilters.LogConditions is mapstructure "log_record" in v0.121 (collector failed to start: failed to get config). --- infrastructure/security-audit/base/helmrelease-collector.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/infrastructure/security-audit/base/helmrelease-collector.yaml b/infrastructure/security-audit/base/helmrelease-collector.yaml index 061f592..a1ffa7f 100644 --- a/infrastructure/security-audit/base/helmrelease-collector.yaml +++ b/infrastructure/security-audit/base/helmrelease-collector.yaml @@ -159,7 +159,9 @@ spec: filter/audit: error_mode: ignore logs: - log_records: + # Ключ именно log_record (singular) — так в filterprocessor 0.121 (config.go). + # Запись отбрасывается, если любое условие истинно. + log_record: - 'IsMatch(body["user"]["username"], "^system:serviceaccount:flux-system:") and (body["verb"] == "get" or body["verb"] == "list" or body["verb"] == "watch")' transform/audit: error_mode: ignore