diff --git a/.vale/styles/Flipt/spelling-exceptions.txt b/.vale/styles/Flipt/spelling-exceptions.txt index d85eb69..c8cc88b 100644 --- a/.vale/styles/Flipt/spelling-exceptions.txt +++ b/.vale/styles/Flipt/spelling-exceptions.txt @@ -1,6 +1,7 @@ affordance APIs auditable +avro azblob backoff boolean diff --git a/configuration/auditing/overview.mdx b/configuration/auditing/overview.mdx index 6fbab85..384783b 100644 --- a/configuration/auditing/overview.mdx +++ b/configuration/auditing/overview.mdx @@ -46,6 +46,8 @@ Currently, we support the following sinks for audit events: - [Webhook](/configuration/overview#audit-events-webhook): the audit events are sent to a URL of your choice. +- [Kafka](/configuration/overview#audit-events-kafka): the audit events are sent to a Kafka topic of your choice. + You can find [examples](https://github.com/flipt-io/flipt/tree/main/examples/audit) in the main GitHub repository on how to enable audit events and how to tune configuration for it. ## Event Filtering diff --git a/configuration/overview.mdx b/configuration/overview.mdx index 9f03767..38bfd04 100644 --- a/configuration/overview.mdx +++ b/configuration/overview.mdx @@ -437,6 +437,20 @@ export FLIPT_CORS_ALLOWED_ORIGINS="http://localhost:3000 http://localhost:3001" | audit.sinks.webhook.max_backoff_duration | Max exponential backoff duration for sending webhook upon failure | 15s | v1.27.0 | | audit.sinks.webhook.templates[] | List of webhook templates for Flipt to send audit events to | | v1.28.0 | +#### Audit Events: Kafka + +| Property | Description | Default | Since | +| ----------------------------------------- | ---------------------------------------------------- | -------- | ------- | +| audit.sinks.kafka.enabled | Enable Kafka sink | false | v1.46.0 | +| audit.sinks.kafka.topic | Kafka topic to send audit events to | | v1.46.0 | +| audit.sinks.kafka.bootstrap_servers | Kafka bootstrap servers | | v1.46.0 | +| audit.sinks.kafka.encoding | Encoding to use for events in Kafka (protobuf, avro) | protobuf | v1.46.0 | +| audit.sinks.kafka.schema_registry.url | URL to the schema registry for encoding | | v1.46.0 | +| audit.sinks.kafka.require_tls | Require TLS to access the Kafka broker | false | v1.46.0 | +| audit.sinks.kafka.insecure_skip_tls | Skip verifying the server's certificate chain | false | v1.46.0 | +| audit.sinks.kafka.authentication.username | SASL/SCRAM username to access the Kafka broker | | v1.46.0 | +| audit.sinks.kafka.authentication.password | SASL/SCRAM password to access the Kafka broker | | v1.46.0 | + ### Analytics | Property | Description | Default | Since |