Pipe MountPoint to audit logs (hashicorp#20411)

* MountPoint piped to audit logs --------- Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
fopina · Apr 27, 2023 · ce96236 · ce96236
1 parent c585a45
commit ce96236
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/audit/format.go b/audit/format.go
@@ -117,6 +117,7 @@ func (f *AuditFormatter) FormatRequest(ctx context.Context, w io.Writer, config
 			ClientToken:           req.ClientToken,
 			ClientTokenAccessor:   req.ClientTokenAccessor,
 			Operation:             req.Operation,
+			MountPoint:            req.MountPoint,
 			MountType:             req.MountType,
 			MountAccessor:         req.MountAccessor,
 			MountRunningVersion:   req.MountRunningVersion(),
@@ -320,6 +321,7 @@ func (f *AuditFormatter) FormatResponse(ctx context.Context, w io.Writer, config
 			ClientTokenAccessor:   req.ClientTokenAccessor,
 			ClientID:              req.ClientID,
 			Operation:             req.Operation,
+			MountPoint:            req.MountPoint,
 			MountType:             req.MountType,
 			MountAccessor:         req.MountAccessor,
 			MountRunningVersion:   req.MountRunningVersion(),
@@ -341,6 +343,7 @@ func (f *AuditFormatter) FormatResponse(ctx context.Context, w io.Writer, config
 		},
 
 		Response: &AuditResponse{
+			MountPoint:            req.MountPoint,
 			MountType:             req.MountType,
 			MountAccessor:         req.MountAccessor,
 			MountRunningVersion:   req.MountRunningVersion(),
@@ -409,6 +412,7 @@ type AuditRequest struct {
 	ClientID                      string                 `json:"client_id,omitempty"`
 	ReplicationCluster            string                 `json:"replication_cluster,omitempty"`
 	Operation                     logical.Operation      `json:"operation,omitempty"`
+	MountPoint                    string                 `json:"mount_point,omitempty"`
 	MountType                     string                 `json:"mount_type,omitempty"`
 	MountAccessor                 string                 `json:"mount_accessor,omitempty"`
 	MountRunningVersion           string                 `json:"mount_running_version,omitempty"`
@@ -430,6 +434,7 @@ type AuditRequest struct {
 
 type AuditResponse struct {
 	Auth                  *AuditAuth             `json:"auth,omitempty"`
+	MountPoint            string                 `json:"mount_point,omitempty"`
 	MountType             string                 `json:"mount_type,omitempty"`
 	MountAccessor         string                 `json:"mount_accessor,omitempty"`
 	MountRunningVersion   string                 `json:"mount_running_plugin_version,omitempty"`

diff --git a/changelog/20411.txt b/changelog/20411.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+audit: add a `mount_point` field to audit requests and response entries
+```