search

suxess-it / sx-cnp-oss

7 stars 1 forks source link

[vault] not enough sink nodes - no space left on device #519

Closed phac008 closed 3 weeks ago

phac008 commented 1 month ago
When audit.log dir get full - vault isn't working any more: ... 2 errors occurred: \t* event not processed by enough 'sink' nodes \t* error writing file for sink "/vault/audit/audit.log": unable to re-write to file for sink "/vault/audit/audit.log": write /vault/audit/audit.log: no space left on device

2024-08-29T08:29:14.499Z [ERROR] core: failed to audit request: path=auth/kubernetes/role/crossplane error= ...

phac008 commented 1 month ago

logrotation needed for demo environment - investigating how to bring this into auto-deployment

in production environment data should be logged outside into SIEM or equivalent system...

phac008 commented 1 month ago

cronjob with truncate works fine in dev, currently unsure how audit logging works in HA mode - investigating further for this

phac008 commented 3 weeks ago

audit log write on active leader, to cleanup temp. corncobs are defined: https://github.com/suxess-it/sx-cnp-oss/commit/bc9e61a1461fe1a8e93be69e3ff36bbd2920ed81

for production use-> #557