audit

Module: sidecar::audit

Contents

Structs

• AuditConfig - Audit emitter configuration.

Enums

• AuditSink - Audit event output sink selector.

---

firma_config_schema::sidecar::audit::AuditConfig

Struct

Audit emitter configuration.

Sink	Required fields
stdout	none
file	file_path
grpc	grpc_url
wal	grpc_url, wal_path

Fields:

• sink: AuditSink - Output sink. Default: stdout.
• file_path: Option<std::path::PathBuf> - Path for the file sink. Ignored by other sinks.
• grpc_url: Option<String> - Downstream audit service URL for grpc and wal sinks.
• wal_path: Option<std::path::PathBuf> - Local WAL directory for the wal sink.
• wal_max_size: bytesize::ByteSize - Maximum WAL size. Default: 100 MiB.
• signing_key_path: Option<std::path::PathBuf> - Path to the ECDSA private key used for event signing. Mutually
• signing_key_env: Option<String> - Environment variable containing the ECDSA private key (PEM). Mutually
• redact_query_params: Vec<String> - Additional query parameter names to redact in audit logs.

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> AuditConfig
• Default
  • fn default() -> Self
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>

firma_config_schema::sidecar::audit::AuditSink

Enum

Audit event output sink selector.

Variants:

• Stdout - Structured JSON lines written to stdout (default for containers).
• File - Append-only file sink.
• Grpc - Streaming gRPC sink to a downstream audit service.
• Wal - Write-ahead log: buffers events locally when gRPC is unavailable and

Traits: Copy, Eq

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> AuditSink
• Display
  • fn fmt(self: &Self, f: & mut fmt::Formatter) -> fmt::Result
• Default
  • fn default() -> AuditSink
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• PartialEq
  • fn eq(self: &Self, other: &AuditSink) -> bool
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>