Uploaded image for project: 'Red Hat Internal Developer Platform'
  1. Red Hat Internal Developer Platform
  2. RHIDP-3491

Too many catalog audit log events being generated by permission checks

Prepare for Y ReleasePrepare for Z ReleaseRemove QuarterXMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Major Major
    • 1.4
    • 1.2.2, 1.3
    • Audit Log, RBAC Plugin
    • None
    • True
    • Hide

      None

      Show
      None
    • False
    • RHIDP-227 - Audit Log

      Description of problem:

      Permissions checks are causing too many catalog audit log events to be logged. For example, simply loading the catalog page generates ~300-400 audit log events which is ~100-200KB if logged to a file when running locally on backstage-showcase. Reloading the page causes another ~300-400 audit log event burst, with ~90-95% of the logs being called by the RBAC plugin. However, running in an image still results in 50 audit log events to be generated when loading the catalog page which is still alot.

      Prerequisites (if any, like setup, operators/versions):

      • Enable the RBAC backend plugin
      • Enable audit logging (preferably to file to isolate the audit logs) (audit log to file only available on 1.3)
        • To observe increase in number, search for `isAuditLog` in the console logs and see the increase in the number of search results

      Steps to Reproduce

      1. Log in as a user (any user is fine)
      2. Navigate to the catalog page
      3. Observe 300+ audit logs be generated in the audit log file
        1. In container builds, it seems to be 50 audit logs which is still alot

      Actual results:

      After loading the catalog page (or reloading it) locally:

      catalog-page-audit-log.log

      Expected results:

      Significantly less audit logs being generated

      Reproducibility (Always/Intermittent/Only Once):

      Always

      Build Details:

      1.3-50 Build: https://quay.io/repository/rhdh/rhdh-hub-rhel9/manifest/sha256:59269c27c8f14918e267ef91f59091bf1375432c3c85ea0a18d216ca561717d9 

      RHDH Version: 1.3.0
      Backstage Version: 1.27.7
      Upstream: https://github.com/janus-idp/backstage-showcase/tree/main @ 1e002edd
      Midstream: https://gitlab.cee.redhat.com/rhidp/rhdh/-/commits/rhdh-1-rhel-9 @ c139fd50
      Build Time: 2024-08-01T02:36:08Z

      quay.io/rhdh/rhdh-hub-rhel9:1.3-50 (sha256:59269c27c8f14918e267ef91f59091bf1375432c3c85ea0a18d216ca561717d9)

       

      1.2.2 Build: registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:9709e056f194a24c809dd82b4ab10aa05a9c31574e68ae8d1a5e91de19237045 

      RHDH Version: 1.2.2
      Backstage Version: 1.26.5
      Upstream: janus-idp/backstage-showcase 1.2.x @ c14d6dac
      Midstream: gitlab.cee.redhat.com/rhidp/rhdh rhdh-1.2-rhel-9 @ 01df3afc
      Build Time: 2024-07-26T10:06:37Z

      Additional info (Such as Logs, Screenshots, etc):

              Unassigned Unassigned
              rh-ee-frkong Frank Kong (Inactive)
              RHIDP - Plugins
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: