Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhance Audit Capabilities for Node Management in AWX #15343

Open
6 of 9 tasks
jangel97 opened this issue Jul 9, 2024 · 0 comments
Open
6 of 9 tasks

Enhance Audit Capabilities for Node Management in AWX #15343

jangel97 opened this issue Jul 9, 2024 · 0 comments

Comments

@jangel97
Copy link

jangel97 commented Jul 9, 2024

Please confirm the following

  • I agree to follow this project's code of conduct.
  • I have checked the current issues for duplicates.
  • I understand that AWX is open source software provided for free and that I might not receive a timely response.

Feature type

New Feature

Feature Summary

Currently, in AAP, when a node is disabled, there is no logging or audit trail that captures who performed this action or why it was performed. This lack of transparency can lead to security and operational challenges, especially in environments where multiple teams or automated services interact with the platform.

Proposal:
I propose that AWX includes enhanced audit logging features that:

  • Log the identity of the user or service account that performs the action of enabling or disabling a node in the activity streams.
  • Provide an option to include a mandatory comment field when disabling a node, where the user can specify the reason for the action.
  • Make these logs easily accessible within the AWX UI and via API endpoints for integration with external monitoring and audit systems.

Select the relevant components

  • UI
  • API
  • Docs
  • Collection
  • CLI
  • Other

Steps to reproduce

Disable and enable a node in AAP, nothing can be seen in the activity stream. There is no way to tell who in the team, or what serviceaccount disabled the node or what happened.

Current results

Disable and enable a node in AAP, nothing can be seen in the activity stream. There is no way to tell who in the team, or what serviceaccount disabled the node or what happened.

Sugested feature result

For me it would make sense to at least have this action in the activity stream, so you can know the time and the serviceacount/admin member who disabled or enabled the node. Additionally, if it is possible to track the reason why something was enabled it would be great I think.

Additional information

If this makes sense I am willing to fork and work on it myself, once we agree on what we want to implement.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants