Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(minio): emit MinIO audit logs to artifact-backend #1177

Conversation

jvallesm
Copy link
Collaborator

@jvallesm jvallesm commented Feb 14, 2025

Because

  • To improve user data protection, we need to trace who performed each action on MinIO objects.

This commit

  • Exposes a private endpoint on artifact-backend to ingest MinIO's audit logs and log the relevant information.

@jvallesm jvallesm self-assigned this Feb 14, 2025
Copy link

linear bot commented Feb 14, 2025

@jvallesm jvallesm force-pushed the jvalles/ins-7319-log-requirements-for-ephi-data-access-and-modifications branch from 4a65ac3 to b666cd4 Compare February 14, 2025 15:30
@jvallesm jvallesm marked this pull request as ready for review February 14, 2025 15:45
@@ -1585,6 +1585,9 @@ milvus:
timeoutSeconds: 1
successThreshold: 1
failureThreshold: 5
environment:
MINIO_AUDIT_WEBHOOK_ENABLE_ARTIFACT: "on"
MINIO_AUDIT_WEBHOOK_ENDPOINT_ARTIFACT: "http://core-artifact-backend:3082/v1alpha/minio-audit"
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ℹ️ It'd be great to read the host and port from _helpers.tpl but I didn't manage to make that work. We plan to extract the minio definition from the Milvus child chart so this isn't critical now.

@jvallesm jvallesm merged commit 1574988 into main Feb 17, 2025
12 of 13 checks passed
@jvallesm jvallesm deleted the jvalles/ins-7319-log-requirements-for-ephi-data-access-and-modifications branch February 17, 2025 06:35
jvallesm pushed a commit that referenced this pull request Feb 25, 2025
🤖 I have created a release *beep* *boop*
---


##
[0.49.0-beta](v0.48.1-beta...v0.49.0-beta)
(2025-02-25)


### Features

* **minio:** emit MinIO audit logs to artifact-backend
([#1177](#1177))
([1574988](1574988))


### Bug Fixes

* **test:** inject dummy OAuth values in integration tests
([#1172](#1172))
([2540997](2540997))
* **workflow:** fix release helm chart github action workflow
([#1169](#1169))
([616c6f1](616c6f1))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
No open projects
Status: No status
Development

Successfully merging this pull request may close these issues.

2 participants