Revert custom_fields_by_lua on audit-log: broke logging entirely
kong.request.get_raw_body()/kong.response.get_raw_body() cannot be called from the log phase (confirmed via dataplane error logs: "function cannot be called in log phase") — this silently killed log_by_lua for every plugin on the request, not just body capture. Back to metadata-only logging while body capture gets redone properly (pre-function/post-function storing into kong.ctx.shared, read back in custom_fields_by_lua).
This commit is contained in:
@@ -4,12 +4,9 @@ metadata:
|
|||||||
name: ${NAME}-catalog-mcp-audit-log
|
name: ${NAME}-catalog-mcp-audit-log
|
||||||
namespace: ${NAMESPACE}
|
namespace: ${NAMESPACE}
|
||||||
plugin: http-log
|
plugin: http-log
|
||||||
# dev only: request/response bodies and the raw Authorization (JWT) header
|
# dev only: the raw Authorization (JWT) header is captured in clear text,
|
||||||
# are captured in clear text. Not acceptable as-is for a non-dev environment.
|
# not acceptable as-is for a non-dev environment.
|
||||||
config:
|
config:
|
||||||
http_endpoint: ${AUDIT_LOG_ENDPOINT}
|
http_endpoint: ${AUDIT_LOG_ENDPOINT}
|
||||||
method: POST
|
method: POST
|
||||||
content_type: application/json
|
content_type: application/json
|
||||||
custom_fields_by_lua:
|
|
||||||
request_body: "return kong.request.get_raw_body()"
|
|
||||||
response_body: "return kong.response.get_raw_body()"
|
|
||||||
|
|||||||
@@ -4,12 +4,9 @@ metadata:
|
|||||||
name: ${NAME}-catalog-api-audit-log
|
name: ${NAME}-catalog-api-audit-log
|
||||||
namespace: ${NAMESPACE}
|
namespace: ${NAMESPACE}
|
||||||
plugin: http-log
|
plugin: http-log
|
||||||
# dev only: request/response bodies and the raw Authorization (JWT) header
|
# dev only: the raw Authorization (JWT) header is captured in clear text,
|
||||||
# are captured in clear text. Not acceptable as-is for a non-dev environment.
|
# not acceptable as-is for a non-dev environment.
|
||||||
config:
|
config:
|
||||||
http_endpoint: ${AUDIT_LOG_ENDPOINT}
|
http_endpoint: ${AUDIT_LOG_ENDPOINT}
|
||||||
method: POST
|
method: POST
|
||||||
content_type: application/json
|
content_type: application/json
|
||||||
custom_fields_by_lua:
|
|
||||||
request_body: "return kong.request.get_raw_body()"
|
|
||||||
response_body: "return kong.response.get_raw_body()"
|
|
||||||
|
|||||||
Reference in New Issue
Block a user