audit

Module: sidecar::audit

Contents

Structs

• AuditConfig - Audit emitter configuration.

Enums

• AuditSink - Audit event output sink selector.

---

firma_config_schema::sidecar::audit::AuditConfig

Struct

Audit emitter configuration.

Sink	Required fields
stdout	none
file	file_path
grpc	grpc_url, buffer_path
wal	grpc_url, wal_path

Fields:

• sink: AuditSink - Output sink. Default: stdout.
• file_path: Option<std::path::PathBuf> - Path for the file sink. Ignored by other sinks.
• grpc_url: Option<String> - Downstream audit service URL for the grpc sink.
• buffer_path: Option<std::path::PathBuf> - Local buffer file backing the grpc sink while the stream is
• buffer_max_size: firma_config_utils::NonZeroByteSize - Maximum size of the grpc sink’s local buffer. Default: 100 MiB.
• replay_ack_timeout: firma_config_utils::NonZeroDuration - How long the grpc sink waits for the audit service to acknowledge a
• wal_path: Option<std::path::PathBuf> - Local WAL file; sibling files retain destination scope and rejections.
• wal_max_size: firma_config_utils::NonZeroByteSize - Maximum pending WAL size. Exhaustion stops the sink without eviction.
• wal_request_timeout: firma_config_utils::NonZeroDuration - Bound on each wal sink delivery attempt: connecting, sending, and
• signing_key_path: Option<std::path::PathBuf> - Path to the ECDSA private key used for event signing. Mutually
• signing_key_env: Option<String> - Environment variable containing the ECDSA private key (PEM). Mutually
• redact_query_params: Vec<String> - Additional query parameter names to redact in audit logs.

Trait Implementations:

• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private229::Result<<__S as >::Ok, <__S as >::Error>
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private229::Result<Self, <__D as >::Error>
• Clone
  • fn clone(self: &Self) -> Self
• Default
  • fn default() -> Self

firma_config_schema::sidecar::audit::AuditSink

Enum

Audit event output sink selector.

Variants:

• Stdout - Structured JSON lines written to stdout (default for containers).
• File - Append-only file sink.
• Grpc - Durable streaming gRPC sink to a downstream audit service. Buffers
• Wal - Journal before delivery; reclaim only after a committed receipt or

Methods:

Traits: Copy, Eq

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> Self
• Default
  • fn default() -> Self
• Display
  • fn fmt(self: &Self, f: & mut fmt::Formatter) -> fmt::Result
• PartialEq
  • fn eq(self: &Self, other: &Self) -> bool
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private229::Result<<__S as >::Ok, <__S as >::Error>
• Deserialize
  • fn deserialize<D>(deserializer: D) -> Result<Self, <D as >::Error>