Pipe MountPoint to audit logs (#20411) (#20412)

* MountPoint piped to audit logs --------- Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
hashicorp · Apr 28, 2023 · 5a71abf · 5a71abf
1 parent 0c249cb
commit 5a71abf
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/audit/format.go b/audit/format.go
@@ -114,6 +114,7 @@ func (f *AuditFormatter) FormatRequest(ctx context.Context, w io.Writer, config
 			ClientToken:         req.ClientToken,
 			ClientTokenAccessor: req.ClientTokenAccessor,
 			Operation:           req.Operation,
+			MountPoint:          req.MountPoint,
 			MountType:           req.MountType,
 			MountAccessor:       req.MountAccessor,
 			Namespace: &AuditNamespace{
@@ -294,6 +295,7 @@ func (f *AuditFormatter) FormatResponse(ctx context.Context, w io.Writer, config
 			ClientTokenAccessor: req.ClientTokenAccessor,
 			ClientID:            req.ClientID,
 			Operation:           req.Operation,
+			MountPoint:          req.MountPoint,
 			MountType:           req.MountType,
 			MountAccessor:       req.MountAccessor,
 			Namespace: &AuditNamespace{
@@ -311,6 +313,7 @@ func (f *AuditFormatter) FormatResponse(ctx context.Context, w io.Writer, config
 		},
 
 		Response: &AuditResponse{
+			MountPoint:    req.MountPoint,
 			MountType:     req.MountType,
 			MountAccessor: req.MountAccessor,
 			Auth:          respAuth,
@@ -375,6 +378,7 @@ type AuditRequest struct {
 	ClientID                      string                 `json:"client_id,omitempty"`
 	ReplicationCluster            string                 `json:"replication_cluster,omitempty"`
 	Operation                     logical.Operation      `json:"operation,omitempty"`
+	MountPoint                    string                 `json:"mount_point,omitempty"`
 	MountType                     string                 `json:"mount_type,omitempty"`
 	MountAccessor                 string                 `json:"mount_accessor,omitempty"`
 	ClientToken                   string                 `json:"client_token,omitempty"`
@@ -392,6 +396,7 @@ type AuditRequest struct {
 
 type AuditResponse struct {
 	Auth          *AuditAuth             `json:"auth,omitempty"`
+	MountPoint    string                 `json:"mount_point,omitempty"`
 	MountType     string                 `json:"mount_type,omitempty"`
 	MountAccessor string                 `json:"mount_accessor,omitempty"`
 	Secret        *AuditSecret           `json:"secret,omitempty"`

diff --git a/changelog/20411.txt b/changelog/20411.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+audit: add a `mount_point` field to audit requests and response entries
+```