-
Notifications
You must be signed in to change notification settings - Fork 4.3k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'main' into peteski22/dependency/swap-armon-go-metrics-t…
…o-hashicorp-go-metrics
- Loading branch information
Showing
580 changed files
with
17,575 additions
and
2,795 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,91 @@ | ||
| // Copyright (c) HashiCorp, Inc. | ||
| // SPDX-License-Identifier: BUSL-1.1 | ||
|
|
||
| package audit | ||
|
|
||
| import ( | ||
| "context" | ||
| "fmt" | ||
| "strings" | ||
|
|
||
| "github.com/hashicorp/eventlogger" | ||
| "github.com/hashicorp/go-bexpr" | ||
| "github.com/hashicorp/vault/helper/namespace" | ||
| "github.com/hashicorp/vault/internal/observability/event" | ||
| ) | ||
|
|
||
| var _ eventlogger.Node = (*EntryFilter)(nil) | ||
|
|
||
| // NewEntryFilter should be used to create an EntryFilter node. | ||
| // The filter supplied should be in bexpr format and reference fields from logical.LogInputBexpr. | ||
| func NewEntryFilter(filter string) (*EntryFilter, error) { | ||
| const op = "audit.NewEntryFilter" | ||
|
|
||
| filter = strings.TrimSpace(filter) | ||
| if filter == "" { | ||
| return nil, fmt.Errorf("%s: cannot create new audit filter with empty filter expression: %w", op, event.ErrInvalidParameter) | ||
| } | ||
|
|
||
| eval, err := bexpr.CreateEvaluator(filter) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("%s: cannot create new audit filter: %w", op, err) | ||
| } | ||
|
|
||
| return &EntryFilter{evaluator: eval}, nil | ||
| } | ||
|
|
||
| // Reopen is a no-op for the filter node. | ||
| func (*EntryFilter) Reopen() error { | ||
| return nil | ||
| } | ||
|
|
||
| // Type describes the type of this node (filter). | ||
| func (*EntryFilter) Type() eventlogger.NodeType { | ||
| return eventlogger.NodeTypeFilter | ||
| } | ||
|
|
||
| // Process will attempt to parse the incoming event data and decide whether it | ||
| // should be filtered or remain in the pipeline and passed to the next node. | ||
| func (f *EntryFilter) Process(ctx context.Context, e *eventlogger.Event) (*eventlogger.Event, error) { | ||
| const op = "audit.(EntryFilter).Process" | ||
|
|
||
| select { | ||
| case <-ctx.Done(): | ||
| return nil, ctx.Err() | ||
| default: | ||
| } | ||
|
|
||
| if e == nil { | ||
| return nil, fmt.Errorf("%s: event is nil: %w", op, event.ErrInvalidParameter) | ||
| } | ||
|
|
||
| a, ok := e.Payload.(*AuditEvent) | ||
| if !ok { | ||
| return nil, fmt.Errorf("%s: cannot parse event payload: %w", op, event.ErrInvalidParameter) | ||
| } | ||
|
|
||
| // If we don't have data to process, then we're done. | ||
| if a.Data == nil { | ||
| return nil, nil | ||
| } | ||
|
|
||
| ns, err := namespace.FromContext(ctx) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("%s: cannot obtain namespace: %w", op, err) | ||
| } | ||
|
|
||
| datum := a.Data.BexprDatum(ns.Path) | ||
|
|
||
| result, err := f.evaluator.Evaluate(datum) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("%s: unable to evaluate filter: %w", op, err) | ||
| } | ||
|
|
||
| if result { | ||
| // Allow this event to carry on through the pipeline. | ||
| return e, nil | ||
| } | ||
|
|
||
| // End process of this pipeline. | ||
| return nil, nil | ||
| } |
Oops, something went wrong.