-
Notifications
You must be signed in to change notification settings - Fork 558
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
audit: Replaced __audit with __audit_log #15326
Conversation
ducktape was retried in https://buildkite.com/redpanda/redpanda/builds/42305#018c3cda-0565-498e-acc2-aceba3482484 |
__audit was the original name of the audit log topic that was added long before the audit feature was designed and developed. By replacing all __audit with __audit_log, the audit log will no longer be part of billing. Fixes: redpanda-data#15324 Signed-off-by: Michael Boquard <michael@redpanda.com>
ec4100f
to
50b3be6
Compare
Force push Removed |
unit test failure: #13275 |
{"__audit"}, | ||
{}, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
is exclusion of the audit topic implemented somewhere else? i looked around but didn't see it.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
yes this is handled in the produce handler
redpanda/src/v/kafka/server/handlers/produce.cc
Lines 522 to 536 in 2915bc8
const bool audit_produce_restricted | |
= !octx.rctx.authorized_auditor() | |
&& topic.name == model::kafka_audit_logging_topic(); | |
// Need to make an exception here in case the audit log topic is in the | |
// noproduce topics list | |
const bool is_audit_produce | |
= octx.rctx.authorized_auditor() | |
&& topic.name == model::kafka_audit_logging_topic(); | |
if ( | |
(is_noproduce_topic || audit_produce_restricted) | |
&& !is_audit_produce) { | |
push_error_response(error_code::topic_authorization_failed); | |
continue; | |
} |
__audit was the original name of the audit log topic that was added
long before the audit feature was designed and developed. By
replacing all __audit with __audit_log, the audit log will no longer
be part of billing.
Fixes: #15324
Signed-off-by: Michael Boquard michael@redpanda.com
Backports Required
Release Notes