feat(audit): add AWS encryption provider audit rules and update encryption provider script

2025-05-12 17:24:58 +02:00
parent 05d1624bdd
commit 4cd933f9f8
4 changed files with 12 additions and 1 deletions
@@ -143,6 +143,10 @@ encryption_aws_secret_access_key: "{{ lookup('env', 'KMS_SECRET_KEY') }}"
 encryption_kms_arn: "arn:aws:kms:eu-west-1:001604727293:key/977d08fd-8230-40bf-8a4f-d8a3264c5990"
 encryption_kms_socket: /var/run/kmsplugin/socket.sock

+#audit encryption socker
+auditd_encryption_kms_socket: /var/run/kmsplugin/socket.sock
+auditd_max_log_file_action: rotate
+
 # Kubernetes specific settings
 microk8s_version: 1.29
 microk8s_allowed_hosts: