Skip to content

Commit 87cf024

Browse files
committed
proto/types: Add AccessGraphAWSSyncEKSAuditLogs message
Add the `AccessGraphAWSSyncEKSAuditLogs` message used by new field in `AccessGraphAWSSync` for specifying which EKS clusters should have apiserver audit logs fetched and sent to Access Graph.
1 parent 384d194 commit 87cf024

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

api/proto/teleport/legacy/types/types.proto

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9124,6 +9124,17 @@ message AccessGraphAWSSyncCloudTrailLogs {
91249124
string SQSQueue = 2 [(gogoproto.jsontag) = "sqs_queue,omitempty"];
91259125
}
91269126

9127+
// AccessGraphAWSSyncEKSAuditLogs defines the settings for ingesting Kubernetes apiserver
9128+
// audit logs from EKS clusters.
9129+
message AccessGraphAWSSyncEKSAuditLogs {
9130+
// The tags of EKS clusters for which apiserver audit logs should be fetched.
9131+
wrappers.LabelValues Tags = 1 [
9132+
(gogoproto.nullable) = false,
9133+
(gogoproto.jsontag) = "tags,omitempty",
9134+
(gogoproto.customtype) = "Labels"
9135+
];
9136+
}
9137+
91279138
// AccessGraphAWSSync is a configuration for AWS Access Graph service poll service.
91289139
message AccessGraphAWSSync {
91299140
// Regions are AWS regions to import resources from.
@@ -9134,6 +9145,7 @@ message AccessGraphAWSSync {
91349145
string Integration = 4 [(gogoproto.jsontag) = "integration,omitempty"];
91359146
// Configuration settings for collecting AWS CloudTrail logs via an SQS queue.
91369147
AccessGraphAWSSyncCloudTrailLogs cloud_trail_logs = 5 [(gogoproto.jsontag) = "cloud_trail_logs,omitempty"];
9148+
AccessGraphAWSSyncEKSAuditLogs eks_audit_logs = 6 [(gogoproto.jsontag) = "eks_audit_logs,omitempty"];
91379149
}
91389150

91399151
// AccessGraphAzureSync is a configuration for Azure Access Graph service poll service.

0 commit comments

Comments
 (0)