Audit trail configuration
Configuration of the audit trail, of the storage of its evidence, and of the demonstration tampering switch.
| Name | Environment | Description | Default value | Notes |
|---|---|---|---|---|
ontrack.extension.audit-trail.demo-tampering.enabled |
ONTRACK_EXTENSION_AUDIT_TRAIL_DEMO_TAMPERING_ENABLED |
Allows a global administrator to rewrite the payload of a trail entry through the API, to demonstrate a broken chain. Never enable it in production: while it is on, the trails of the instance prove nothing, and every page says so in a permanent error message. | false | |
ontrack.extension.audit-trail.storage.access-key |
ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_ACCESS_KEY |
Access key of the S3-compatible service. Required. | ||
ontrack.extension.audit-trail.storage.bucket |
ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_BUCKET |
Name of the bucket storing the evidence. It must exist. Required. | ||
ontrack.extension.audit-trail.storage.endpoint |
ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_ENDPOINT |
URL of the S3-compatible service storing the evidence, for example https://fra1.digitaloceanspaces.com or http://minio:9000. Required. |
||
ontrack.extension.audit-trail.storage.max-size |
ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_MAX_SIZE |
Maximum size of one evidence, for the whole instance. In megabytes when no unit is given. | 50 (MEGABYTES) | |
ontrack.extension.audit-trail.storage.path-style |
ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_PATH_STYLE |
Path-style addressing (<endpoint>/<bucket>), as MinIO needs, instead of the virtual-hosted one (<bucket>.<endpoint>), as AWS S3 and DigitalOcean Spaces use. |
false | |
ontrack.extension.audit-trail.storage.region |
ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_REGION |
Region of the bucket. MinIO accepts any region; DigitalOcean Spaces wants the region of the endpoint, for example fra1. |
us-east-1 | |
ontrack.extension.audit-trail.storage.secret-key |
ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_SECRET_KEY |
Secret key of the S3-compatible service. Required. |