Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add missing audit log fields for k8s sessions #4057

Merged
merged 1 commit into from
Jul 17, 2020
Merged

Conversation

awly
Copy link
Contributor

@awly awly commented Jul 15, 2020

Added interactive as needed.
Added server_hostname and server_addr referring to the k8s endpoint.

Screenshot_2020-07-15 a local • Audit Log

Fixes #4055

@alex-kovoy
Copy link
Contributor

@awly I just realized that it misses below fields as well.

session_start: string;
session_stop: string;
participants?: string[];

Added `interactive` as needed.
Added `server_hostname` and `server_addr` referring to the k8s endpoint.
Added `session_start` and `session_end` for timestamps.
Added `participants` to mimic SSH sessions.

Fixes #4055
@awly awly force-pushed the andrew/k8s-session-events branch from 0024d6c to f924493 Compare July 15, 2020 22:22
@awly
Copy link
Contributor Author

awly commented Jul 15, 2020

@alex-kovoy thanks for catching this, added.
participants will only have 1 entry, since today you can't join k8s exec sessions.

@awly
Copy link
Contributor Author

awly commented Jul 16, 2020

retest this please

3 similar comments
@awly
Copy link
Contributor Author

awly commented Jul 16, 2020

retest this please

@awly
Copy link
Contributor Author

awly commented Jul 17, 2020

retest this please

@awly
Copy link
Contributor Author

awly commented Jul 17, 2020

retest this please

@awly awly merged commit abdb970 into master Jul 17, 2020
@awly awly deleted the andrew/k8s-session-events branch July 17, 2020 21:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Unable to Replay Interactive k8s Sessions, Web UI due to missing event field
3 participants