auditstream

type ConfigStore interface {
	List(ctx context.Context) ([]state.AdapterConfig, error)
}

type CredentialStore interface {
	Resolve(ctx context.Context, adapterID string) (map[string]secret.Value, error)
}

type Declared struct {
	ID      string
	Adapter api.AuditSinkAdapter
}

type Notifier interface {
	Notify(ctx context.Context, n api.Notification) error
}

type Service struct {
	Configs     ConfigStore
	Credentials CredentialStore
	Declared    []Declared

	// New returns an unconfigured adapter of a kind, or nil.
	New func(kind string) api.AuditSinkAdapter

	States *state.AuditSinks
	Reader *audit.Reader

	// Encoders turn native lines into a sink's format. A format with no
	// encoder — native — is sent as read.
	Encoders map[string]audit.Encoder

	// Audit writes the sink's own events: its first failure, its recovery,
	// and Pando turning it off (R-383).
	Audit func(ctx context.Context, e audit.Event)

	Holders  VerbHolders
	Notifier Notifier

	Clock    clock.Clock
	Logger   *zap.Logger
	Interval time.Duration
	// contains filtered or unexported fields
}

type Status struct {
	ID       string `json:"id"`
	Kind     string `json:"kind"`
	Name     string `json:"name"`
	Enabled  bool   `json:"enabled"`
	Declared bool   `json:"declared,omitempty"`

	Transport string   `json:"transport,omitempty"`
	Endpoint  string   `json:"endpoint,omitempty"`
	Format    string   `json:"format,omitempty"`
	Actions   []string `json:"actions,omitempty"`
	Exclude   []string `json:"exclude,omitempty"`

	// Backlog is how many events are past the cursor, at most BacklogCap;
	// BacklogCapped says there are at least that many.
	Backlog       int  `json:"backlog"`
	BacklogCapped bool `json:"backlog_capped,omitempty"`

	// Unusable is why the sink cannot be built from its settings.
	Unusable string `json:"unusable,omitempty"`

	state.AuditSinkState
}

type VerbHolders interface {
	InstallVerbHolders(ctx context.Context, verb authz.Verb) ([]string, error)
}