sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security-audit: fix filter/audit config key — log_record (singular), filterprocessor 0.121

Browse Source 
The processor rejected "log_records": LogFilters.LogConditions is mapstructure
"log_record" in v0.121 (collector failed to start: failed to get config).
This commit is contained in:
emelinda 2026-11-07 16:00:24 +03:00
parent 0b8318f547
commit cf2689aea0
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
infrastructure/security-audit/base/helmrelease-collector.yaml
View File

@ -159,7 +159,9 @@ spec:
filter/audit: filter/audit:
error_mode: ignore error_mode: ignore
logs: logs:
log_records: # Ключ именно log_record (singular) — так в filterprocessor 0.121 (config.go).
# Запись отбрасывается, если любое условие истинно.
log_record:
- 'IsMatch(body["user"]["username"], "^system:serviceaccount:flux-system:") and (body["verb"] == "get" or body["verb"] == "list" or body["verb"] == "watch")' - 'IsMatch(body["user"]["username"], "^system:serviceaccount:flux-system:") and (body["verb"] == "get" or body["verb"] == "list" or body["verb"] == "watch")'
transform/audit: transform/audit:
error_mode: ignore error_mode: ignore