added containerId if known

Author: StekPerepolnen

internal/audit/audit_event.go

@@ -82,7 +82,7 @@ func (e *Event) MarshalJSON() ([]byte, error) {
 			Resource:       e.Resource,
 			Component:      e.Component,
 			MethodName:     e.MethodName,
-			ContainerID:    e.ContainerID,
+			ContainerID:    formatContainerID(e.ContainerID),
 			Subject:        formatSubject(e.Subject),
 			SanitizedToken: e.SanitizedToken,
 			GRPCRequest:    marshalProtoMessage(e.GRPCRequest),
@@ -129,6 +129,15 @@ func getStatus(inProgress bool, err error) (string, string) {
 	return status, reason
 }
 
+func formatContainerID(containerID string) string {
+	switch containerID {
+	case "", "{none}":
+		return "{none}"
+	default:
+		return containerID
+	}
+}
+
 func formatSubject(subject string) string {
 	switch subject {
 	case "", "{none}":
@@ -168,10 +177,10 @@ func GRPCCallAuditEvent(
 
 func ReportGRPCCallBegin(
 	ctx context.Context, req proto.Message, methodName string,
-	subject string, token string,
+	subject string, token string, containerID string,
 ) {
 	event := GRPCCallAuditEvent(
-		ctx, methodName, req, subject, token, "{none}", true, nil,
+		ctx, methodName, req, subject, token, containerID, true, nil,
 	)
 	ReportAuditEvent(ctx, event)
 }

internal/audit/audit_interceptor.go

@@ -40,16 +40,18 @@ func NewAuditGRPCInterceptor(provider auth.AuthProvider) grpc.UnaryServerInterce
 		ctx = grpcinfo.SetRequestID(ctx, requestID)
 		subject, _ := authHelper.Authenticate(ctx, provider)
 		token, _ := authHelper.GetMaskedToken(ctx, provider)
+		containerID := ""
 		pm, ok := req.(proto.Message)
 		if !ok {
 			xlog.Error(ctx, "got invalid proto.Message", zap.Any("GRPCRequest", req))
 		} else {
-			ReportGRPCCallBegin(
-				ctx, pm, info.FullMethod, subject, token,
-			)
+			if getter, ok := req.(interface{ GetContainerId() string }); ok {
+				containerID = getter.GetContainerId()
+			}
+			ReportGRPCCallBegin(ctx, pm, info.FullMethod, subject, token, containerID)
 		}
 		response, grpcErr := handler(ctx, req)
-		containerID := GetContainerIDForRequest(requestID)
+		containerID = GetContainerIDForRequest(requestID)
 		defer ClearContainerIDForRequest(requestID)
 		ReportGRPCCallEnd(ctx, info.FullMethod, subject, containerID, token, grpcErr)
 		return response, grpcErr