Artifact Management audit logs

Artifact Management audit logs include successful events in the container registries in the root admin cluster and each org admin cluster.

JSON representation

{
  "auditID": string,
  "action": string,
  "time": string,
  "user":{
    object
  },
  "resource": string,
  "_gdch_service_name": string,
  "_gdch_namespace": string,
  "_gdch_service_tenant": string,
  "_gdch_cluster": string,
  "_gdch_fluentbit_pod": string
}
Fields
auditID

string

The unique audit identification value generated for each request. For example, "15000"

action

string

The action performed on the resource for the event. For example, "create"

time

string

The time of the action up to milliseconds. For example, "2022-11-30T02:14:33Z"

user

object

Information about the identity and issuer of the authenticated user who performed the action. For example,

{
  "identity":"s:gpc-system:artifact-registry-services-registry-exporter",
  "issuer":"artifact.private.gdc.goog/hra"
}

resource

string

The identification value of the resource. For example, "dataproc-service/private-cloud-devel/dataproc:3.1-dataproc-3"

_gdch_service_name

string

The short name of the service collecting audit logs. The value is always "artifactmanagement"

_gdch_namespace

string

The short name of the service namespace. The value is always "harbor-system"

_gdch_service_tenant

string

The name of the service tenant.

Possible values:

  • "infra-obs"
  • "platform-obs"

_gdch_cluster

string

The name of the Kubernetes cluster producing the successful event. For example, "root-admin"

_gdch_fluentbit_pod

string

The name of the Fluent Bit pod collecting audit logs. For example, "anthos-audit-logs-forwarder-wqbg8"