diff options
author | Divya <dikonoor@in.ibm.com> | 2015-08-11 13:17:15 +0200 |
---|---|---|
committer | Divya <dikonoor@in.ibm.com> | 2015-08-26 20:23:29 +0200 |
commit | 6a532111bc4b1c94304d94892a2c25b1e295a91b (patch) | |
tree | 5698168258a28f5ee2ab60399b58e260f844804d /etc | |
parent | c18d69a800ce1ffb252dc2216bb24a546bef90d7 (diff) | |
download | ceilometer-6a532111bc4b1c94304d94892a2c25b1e295a91b.tar.gz |
Add user_id,project_id traits to audit events
The ceilometer audit events stored at the ceilometer database
currently don't have user_id/project_id associated with them
even though this information is available as part of the event
message payload. The user_id and project_id information has to
be stored as traits so that there's user/project context for each
event and these traits are required to apply RBAC-based rules
and filters on events. For eg., presence of these traits enable
db queries - like get all events for a project/user against events.
The audit event definition in the events yaml file already stores
payload.initiator.id as initiator_id but the initiator_id trait
is not a common trait across all events and thus this trait cannot
be used to apply RBAC filter against events.This changeset will
thus add user_id and project_id traits to the audit events namely
*.http.* and add useri_id and project_id as default traits for all
events.
DocImpact
Change-Id: If4034342c4e60d519f0ec96ae8895dcf78f8ad3b
blueprint: events-rbac
Diffstat (limited to 'etc')
-rw-r--r-- | etc/ceilometer/event_definitions.yaml | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/ceilometer/event_definitions.yaml b/etc/ceilometer/event_definitions.yaml index ed47fe0f..5a1ae7f5 100644 --- a/etc/ceilometer/event_definitions.yaml +++ b/etc/ceilometer/event_definitions.yaml @@ -331,6 +331,10 @@ fields: ['payload.ipsec_site_connection.id', 'payload.id'] - event_type: '*http.*' traits: &http_audit + project_id: + fields: payload.initiator.project_id + user_id: + fields: payload.initiator.id typeURI: fields: payload.typeURI eventType: |