stt/kong-workforce-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Route gateway audit logs to Loki

Browse Source 
Post http-log to /workforce instead of /logs. Fluent Bit's http input derives the
record tag from the request URI, so the path is what identifies this domain
in the collector and becomes the Loki label domain=workforce.

The collector keeps writing every domain to the on-disk audit trail as
well, so this is reversible by restoring the previous path.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
Stéphane Tailland
2026-08-25 07:25:43 +02:00
parent 2880e21ef1
commit 372a1824bf
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dev/flux-kustomization.yaml
+3 -1
View File
@@ -24,7 +24,9 @@ spec:
BACKEND_AUDIENCE: '["classic-models-api"]' BACKEND_AUDIENCE: '["classic-models-api"]'
BACKEND_SCOPES: '[]' BACKEND_SCOPES: '[]'
API_RATE_LIMIT_MINUTE: "60" API_RATE_LIMIT_MINUTE: "60"
AUDIT_LOG_ENDPOINT: http://audit-log-collector.observability.svc.cluster.local/logs # The URI path is the collector's routing key: Fluent Bit tags the
# record `workforce` and turns that into the Loki label domain=workforce.
AUDIT_LOG_ENDPOINT: http://audit-log-collector.observability.svc.cluster.local/workforce
REST_HOSTNAME: workforce-dev.sttlab.local REST_HOSTNAME: workforce-dev.sttlab.local
TOKEN_EXCHANGE_CLIENT_ID: kong-token-exchange-broker TOKEN_EXCHANGE_CLIENT_ID: kong-token-exchange-broker
substituteFrom: substituteFrom: