-
Bug
-
Resolution: Not a Bug
-
Major
-
1.2.2, 1.3
-
None
-
True
-
-
False
-
RHIDP-227 - Audit Log
-
-
Description of problem:
Permissions checks are causing too many catalog audit log events to be logged. For example, simply loading the catalog page generates ~300-400 audit log events which is ~100-200KB if logged to a file when running locally on backstage-showcase. Reloading the page causes another ~300-400 audit log event burst, with ~90-95% of the logs being called by the RBAC plugin. However, running in an image still results in 50 audit log events to be generated when loading the catalog page which is still alot.
Prerequisites (if any, like setup, operators/versions):
- Enable the RBAC backend plugin
- Enable audit logging (preferably to file to isolate the audit logs) (audit log to file only available on 1.3)
- To observe increase in number, search for `isAuditLog` in the console logs and see the increase in the number of search results
Steps to Reproduce
- Log in as a user (any user is fine)
- Navigate to the catalog page
- Observe 300+ audit logs be generated in the audit log file
- In container builds, it seems to be 50 audit logs which is still alot
Actual results:
After loading the catalog page (or reloading it) locally:
Expected results:
Significantly less audit logs being generated
Reproducibility (Always/Intermittent/Only Once):
Always
Build Details:
RHDH Version: 1.3.0
Backstage Version: 1.27.7
Upstream: https://github.com/janus-idp/backstage-showcase/tree/main @ 1e002edd
Midstream: https://gitlab.cee.redhat.com/rhidp/rhdh/-/commits/rhdh-1-rhel-9 @ c139fd50
Build Time: 2024-08-01T02:36:08Z
quay.io/rhdh/rhdh-hub-rhel9:1.3-50 (sha256:59269c27c8f14918e267ef91f59091bf1375432c3c85ea0a18d216ca561717d9)
1.2.2 Build: registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:9709e056f194a24c809dd82b4ab10aa05a9c31574e68ae8d1a5e91de19237045