Enable secure logs for inntekt-api

navikt/dagpenger#404

Author: geiralund

nais/base/nais.yaml

@@ -26,3 +26,5 @@ spec:
       memory: 256Mi
   vault:
     enabled: true
+  secureLogs:
+    enabled: true

src/main/kotlin/no/nav/dagpenger/inntekt/InntektApi.kt

@@ -63,6 +63,7 @@ import no.nav.dagpenger.oidc.StsOidcClient
 import org.slf4j.event.Level
 
 private val LOGGER = KotlinLogging.logger {}
+private val sikkerLogg = KotlinLogging.logger("tjenestekall")
 val config = Configuration()
 
 fun main() = runBlocking {
@@ -222,7 +223,8 @@ fun Application.inntektApi(
                 if (HttpStatusCode.fromValue(cause.status).isSuccess()) HttpStatusCode.InternalServerError else HttpStatusCode.fromValue(
                     cause.status
                 )
-            LOGGER.error("Request failed against inntektskomponenten", cause)
+            sikkerLogg.error(cause) { "Request failed against inntektskomponenten" }
+            LOGGER.error("Request failed against inntektskomponenten")
             val error = Problem(
                 type = URI("urn:dp:error:inntektskomponenten"),
                 title = "Innhenting av inntekt mot a-inntekt feilet. Prøv igjen senere",

src/main/resources/log4j2.xml

@@ -8,8 +8,22 @@
                             stackTraceEnabled="true"/>
         </Console>
         <Prometheus name="metrics"/>
+
+        <RollingFile name="securelog" filename="/Users/l153963/secure-logs/secure.log" filePattern="/Users/l153963/secure-logs/secure.log.%i" append="true">
+            <LogstashLayout dateTimeFormatPattern="yyyy-MM-dd'T'HH:mm:ss.SSSZZZ"
+                            eventTemplateUri="classpath:LogstashJsonEventLayoutV1.json"
+                            prettyPrintEnabled="false"
+                            stackTraceEnabled="true"/>
+            <ThresholdFilter level="debug" onMatch="ACCEPT" onMismatch="DENY"/>
+            <Policies>
+                <SizeBasedTriggeringPolicy size="50MB" />
+            </Policies>
+        </RollingFile>
     </Appenders>
     <Loggers>
+        <Logger name="tjenestekall" level="debug" includeLocation="true">
+            <AppenderRef ref="securelog"/>
+        </Logger>
         <Root level="info">
             <AppenderRef ref="ConsoleAppender"/>
             <AppenderRef ref="metrics"/>