Enable Audit and Performance Logs

Table of Contents

Prerequisites
Enabling Audit Logs
Enabling Performance Logs

Kloudfuse provides two structured log streams for compliance and observability. Audit logs capture every authentication and mutation event. Performance logs capture every query processed by the platform.

Prerequisites

Audit logs require RBAC to be enabled. RBACEnabled and EnableAuditLogs must be set together — enabling audit logs without RBAC has no effect. Performance logs additionally require audit logs to be enabled.

Enabling Audit Logs

Add the following to your custom-values.yaml:

global:
  RBACEnabled: true      (1)
  EnableAuditLogs: true  (2)

kfuse-audit-log-vector:
  enabled: true          (3)

yaml

1	Enables RBAC authentication for all operations. Required for audit logs to function.
2	Activates audit log emission across all platform services. Has no effect unless `RBACEnabled` is also `true`.
3	Deploys the Vector sidecar that collects output from every service’s `*-audit-logs` container and routes it into Kloudfuse.

helm upgrade --install kfuse oci://us-east1-docker.pkg.dev/mvp-demo-301906/kfuse-helm/kfuse \
  -n kfuse \
  --version <VERSION> \ (1)
  -f custom-values.yaml

bash

1	Replace `<VERSION>` with a valid Kloudfuse release value. See Release Notes for the latest release.

See Audit Log Fields for details on how audit log data is organized and what fields are available.

Enabling Performance Logs

Performance logs require audit logs to be enabled. Add EnablePerfLogs on top of the audit log configuration:

global:
  RBACEnabled: true
  EnableAuditLogs: true
  EnablePerfLogs: true  (1)

kfuse-audit-log-vector:
  enabled: true

yaml

1	Enables performance log emission. Has no effect unless `EnableAuditLogs` is also `true`.

helm upgrade --install kfuse oci://us-east1-docker.pkg.dev/mvp-demo-301906/kfuse-helm/kfuse \
  -n kfuse \
  --version <VERSION> \ (1)
  -f custom-values.yaml

bash

1	Replace `<VERSION>` with a valid Kloudfuse release value. See Release Notes for the latest release.

See Performance Log Fields for details on how performance log data is organized and what fields are available.