emit

Overview ¶

Command emit is an example application that records what it does into the audit trail. It is the code docs/how-to/emit-records.md walks through, compiled on every run of the gate so that the guide cannot drift from the library.

It needs a writer and a registry, and a token that proves which workload it is — in a cluster, its projected service-account token:

AUDIT_WRITER=http://audit:8080 \
AUDIT_REGISTRY=http://audit-registry:8080 \
AUDIT_TOKEN_FILE=/var/run/audit/token \
go run ./examples/emit