stt/kong-payments-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Route gateway audit logs to Loki

Browse Source 
Post http-log to /payments instead of /logs. Fluent Bit's http input derives the
record tag from the request URI, so the path is what identifies this domain
in the collector and becomes the Loki label domain=payments.

The collector keeps writing every domain to the on-disk audit trail as
well, so this is reversible by restoring the previous path.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
Stéphane Tailland
2026-08-25 07:25:43 +02:00
parent 028a0be2a6
commit 2ae60d724e
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dev/flux-kustomization.yaml
+3 -1
View File
@@ -24,7 +24,9 @@ spec:
BACKEND_AUDIENCE: '["classic-models-api"]'
BACKEND_SCOPES: '[]'
API_RATE_LIMIT_MINUTE: "60"
AUDIT_LOG_ENDPOINT: http://audit-log-collector.observability.svc.cluster.local/logs
# The URI path is the collector's routing key: Fluent Bit tags the
# record `payments` and turns that into the Loki label domain=payments.
AUDIT_LOG_ENDPOINT: http://audit-log-collector.observability.svc.cluster.local/payments
REST_HOSTNAME: payments-dev.sttlab.local
TOKEN_EXCHANGE_CLIENT_ID: kong-token-exchange-broker
substituteFrom: