toki
e051f7ca5b
- packages/go/audit: AuditEntry 구조체 및 검증 로직 구현 - agent-task: m-policy-history-audit 작업 아카이브 추가 - agent-roadmap: 정책 이력감시 마일스톤 상태 갱신 - README: 프로젝트 구조 문서 업데이트
92 lines
2.7 KiB
Go
92 lines
2.7 KiB
Go
package audit
|
|
|
|
import (
|
|
"errors"
|
|
"time"
|
|
)
|
|
|
|
type Source string
|
|
type EventType string
|
|
type PolicyDecision string
|
|
|
|
const (
|
|
SourceControlPlane Source = "control_plane"
|
|
SourceEdge Source = "edge"
|
|
SourceNode Source = "node"
|
|
|
|
DecisionAllow PolicyDecision = "allow"
|
|
DecisionDeny PolicyDecision = "deny"
|
|
DecisionWarn PolicyDecision = "warn"
|
|
|
|
DefaultEdgeLocalRetentionDays = 30
|
|
DefaultControlPlaneMetadataRetentionDays = 90
|
|
MetadataRedactionMarker = "redaction_marker"
|
|
MetadataCredentialReference = "credential_ref"
|
|
)
|
|
|
|
const (
|
|
TypeExecutionRequested EventType = "execution.requested"
|
|
TypeExecutionPolicyEvaluated EventType = "execution.policy_evaluated"
|
|
TypeExecutionDispatched EventType = "execution.dispatched"
|
|
TypeExecutionStarted EventType = "execution.started"
|
|
TypeExecutionCompleted EventType = "execution.completed"
|
|
TypeExecutionFailed EventType = "execution.failed"
|
|
TypeExecutionCanceled EventType = "execution.canceled"
|
|
|
|
TypeTerminalSessionRequested EventType = "terminal.session_requested"
|
|
TypeTerminalSessionStarted EventType = "terminal.session_started"
|
|
TypeTerminalCommandSubmitted EventType = "terminal.command_submitted"
|
|
TypeTerminalCommandCompleted EventType = "terminal.command_completed"
|
|
TypeTerminalSessionClosed EventType = "terminal.session_closed"
|
|
|
|
TypeBootstrapEnrollmentRequested EventType = "bootstrap.enrollment_requested"
|
|
TypeBootstrapCredentialIssued EventType = "bootstrap.credential_issued"
|
|
TypeBootstrapNodeRegistered EventType = "bootstrap.node_registered"
|
|
TypeBootstrapEnrollmentFailed EventType = "bootstrap.enrollment_failed"
|
|
TypeBootstrapRevoked EventType = "bootstrap.revoked"
|
|
)
|
|
|
|
type Event struct {
|
|
EventID string
|
|
Type EventType
|
|
Source Source
|
|
ActorID string
|
|
RequestID string
|
|
RunID string
|
|
SessionID string
|
|
EdgeID string
|
|
NodeID string
|
|
Adapter string
|
|
Target string
|
|
CredentialRef string
|
|
PolicyDecision PolicyDecision
|
|
PolicyRule string
|
|
Timestamp time.Time
|
|
Status string
|
|
Error string
|
|
Metadata map[string]string
|
|
}
|
|
|
|
func (e Event) Validate() error {
|
|
if e.Type == "" {
|
|
return errors.New("audit event type is required")
|
|
}
|
|
if e.Source == "" {
|
|
return errors.New("audit event source is required")
|
|
}
|
|
if e.Timestamp.IsZero() {
|
|
return errors.New("audit event timestamp is required")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (e Event) CopyMetadata() map[string]string {
|
|
if e.Metadata == nil {
|
|
return nil
|
|
}
|
|
out := make(map[string]string, len(e.Metadata))
|
|
for k, v := range e.Metadata {
|
|
out[k] = v
|
|
}
|
|
return out
|
|
}
|