Add ability to enable ucp audit logs
Allow to configure audit logs, by default - level is "" - means
disabled. More details https://docs.mirantis.com/mke/3.7/ops/administer-cluster/mke-audit-logging/logging-levels.html
All logs are written to ucp-controller container log. Which is rotated
currently as follows - 3 log files at 1Gb each.
Related-Prod: https://mirantis.jira.com/browse/PRODX-44797
Change-Id: Ib73b30cf874ae119aef8842ea797de42e50b9a40
diff --git a/de/heat-templates/scripts/functions.sh b/de/heat-templates/scripts/functions.sh
index 132d975..f3d5e39 100644
--- a/de/heat-templates/scripts/functions.sh
+++ b/de/heat-templates/scripts/functions.sh
@@ -59,6 +59,7 @@
PUBLIC_INTERFACE=${PUBLIC_INTERFACE:-ens4}
UCP_MASTER_HOST=${UCP_MASTER_HOST:-${CONTROL_IP_ADDRESS}}
UCP_IP_ADDRESS=${UCP_IP_ADDRESS:-$CONTROL_IP_ADDRESS}
+UCP_AUDIT_LOG_LEVEL=${UCP_AUDIT_LOG_LEVEL:-''}
# Change default VXLAN port, need for https://mirantis.jira.com/browse/PRODX-11679
UCP_DOCKER_SWARM_DATA_PORT=${UCP_DOCKER_SWARM_DATA_PORT:-4789}
UCP_DOCKER_CALICO_VXLAN_PORT=${UCP_DOCKER_CALICO_VXLAN_PORT:-${UCP_DOCKER_SWARM_DATA_PORT}}
@@ -492,6 +493,9 @@
${max_pods}
${secure_overlay}
${kubelet_custom_flags}
+[audit_log_configuration]
+ level = \"${UCP_AUDIT_LOG_LEVEL}\"
+ support_dump_include_audit_logs = false
" | docker config create com.docker.ucp.config -
fi
}