audit logging

app/routes/apps.py

@@ -14,6 +14,7 @@ from ..config import (
     read_env_value,
 )
 from ..db.apps import get_apps, update_app_resources
+from ..db.audit import log_audit_event
 from ..shell import run_command
 from ..templates.layout import page, render_result
 
@@ -203,6 +204,20 @@ def create_app(
     deploy_result = run_command([DEPLOY_SCRIPT, app_id])
 
     status = "OK" if create_result.returncode == 0 and deploy_result.returncode == 0 else "FAILED"
+    log_audit_event(
+        user,
+        action="create_app",
+        target_type="app",
+        target_id=app_id,
+        metadata={
+            "app_id": app_id,
+            "app_name": app_name,
+            "template": template,
+            "status": status,
+            "create_returncode": create_result.returncode,
+            "deploy_returncode": deploy_result.returncode,
+        },
+    )
 
     return render_result(
         title=f"Vytvoření aplikace: {status}",
@@ -223,6 +238,17 @@ def create_app(
 def delete_app(app_id: str = Form(...), user=Depends(require_user)):
     result = run_command([DELETE_APP_SCRIPT, app_id])
     status = "OK" if result.returncode == 0 else "FAILED"
+    log_audit_event(
+        user,
+        action="delete_app",
+        target_type="app",
+        target_id=app_id,
+        metadata={
+            "app_id": app_id,
+            "status": status,
+            "returncode": result.returncode,
+        },
+    )
 
     return render_result(
         title=f"Smazání aplikace: {status}",
@@ -253,6 +279,21 @@ def update_resources(
         if catalog_result.returncode == 0 and compose_result.returncode == 0 and deploy_result.returncode == 0
         else "FAILED"
     )
+    log_audit_event(
+        user,
+        action="update_resources",
+        target_type="app",
+        target_id=app_id,
+        metadata={
+            "app_id": app_id,
+            "memory": memory,
+            "cpus": cpus,
+            "status": status,
+            "catalog_returncode": catalog_result.returncode,
+            "compose_returncode": compose_result.returncode,
+            "deploy_returncode": deploy_result.returncode,
+        },
+    )
 
     return render_result(
         title=f"Úprava prostředků: {status}",