Skip to content

Commit 3a99a59

Browse files
committed
proto/types: Add AccessGraphAWSSyncEKSAuditLogs message
Add the `AccessGraphAWSSyncEKSAuditLogs` message used by new field in `AccessGraphAWSSync` for specifying which EKS clusters should have apiserver audit logs fetched and sent to Access Graph.
1 parent 176b231 commit 3a99a59

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

api/proto/teleport/legacy/types/types.proto

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9130,6 +9130,17 @@ message AccessGraphAWSSyncCloudTrailLogs {
91309130
string SQSQueue = 2 [(gogoproto.jsontag) = "sqs_queue,omitempty"];
91319131
}
91329132

9133+
// AccessGraphAWSSyncEKSAuditLogs defines the settings for ingesting Kubernetes apiserver
9134+
// audit logs from EKS clusters.
9135+
message AccessGraphAWSSyncEKSAuditLogs {
9136+
// The tags of EKS clusters for which apiserver audit logs should be fetched.
9137+
wrappers.LabelValues Tags = 1 [
9138+
(gogoproto.nullable) = false,
9139+
(gogoproto.jsontag) = "tags,omitempty",
9140+
(gogoproto.customtype) = "Labels"
9141+
];
9142+
}
9143+
91339144
// AccessGraphAWSSync is a configuration for AWS Access Graph service poll service.
91349145
message AccessGraphAWSSync {
91359146
// Regions are AWS regions to import resources from.
@@ -9140,6 +9151,7 @@ message AccessGraphAWSSync {
91409151
string Integration = 4 [(gogoproto.jsontag) = "integration,omitempty"];
91419152
// Configuration settings for collecting AWS CloudTrail logs via an SQS queue.
91429153
AccessGraphAWSSyncCloudTrailLogs cloud_trail_logs = 5 [(gogoproto.jsontag) = "cloud_trail_logs,omitempty"];
9154+
AccessGraphAWSSyncEKSAuditLogs eks_audit_logs = 6 [(gogoproto.jsontag) = "eks_audit_logs,omitempty"];
91439155
}
91449156

91459157
// AccessGraphAzureSync is a configuration for Azure Access Graph service poll service.

0 commit comments

Comments
 (0)