Move Audit Service to LSF Organization

[ginaxu1]

Problem

Audit Service should be generic and should be out of the OpenDIF.

Proposed Solution

• Move Audit Service to LSF Organization so it can be used by other LSF projects
• Publish a Go package
• Refactor opendif-core with the published go package
• Remove the audit-service
• Finalize repo name, currently https://github.com/LSFLK/argus

Alternatives

No response

[ginaxu1]

Argus Compatibility with OpenDIF Core Services

Argus is fully compatible with both orchestration-engine and portal-backend and can seamlessly replace opendif-core's audit-service. Both services already use shared/audit package, which is compatible with both audit-service and Argus since they share the same REST API endpoint (/api/audit-logs).

For orchestration-engine: Simply update the serviceUrl in config.json and restart.

For portal-backend: Update the CHOREO_AUDIT_CONNECTION_SERVICEURL environment variable and restart.

Migration Path (If audit-service is deleted)

Option 1 (Recommended): Keep shared/audit package

• Zero code changes required
• Both services already use shared/audit which works with Argus
• Maintains abstraction layer for future flexibility
• Simply update configuration URLs and restart services

1. orchestration-engine: Update config.json:

   {
     "auditConfig": {
       "serviceUrl": "http://argus:3001"  // Change from audit-service to argus
     }
   }

2. portal-backend: Update environment variable:

   CHOREO_AUDIT_CONNECTION_SERVICEURL=http://argus:3001

Option 2: Delete shared/audit and use Argus directly

• More tightly coupled to Argus, but reduces local code maintenance
• Requires code changes in both services OE and portal-backend

Orchestration-Engine (4 files):

1. exchange/orchestration-engine/go.mod - Remove shared/audit dependency, add Argus dependency
2. exchange/orchestration-engine/main.go - Replace auditclient import with Argus, update NewClient() and InitializeGlobalAudit() calls
3. exchange/orchestration-engine/middleware/audit_middleware.go - Replace auditpkg import with Argus, update all auditpkg.* references (MarshalMetadata, CurrentTimestamp, AuditLogRequest, StatusSuccess, StatusFailure, LogAuditEvent)
4. exchange/orchestration-engine/federator/federator.go - Replace auditpkg import with Argus, update all auditpkg.* references (StatusSuccess, StatusFailure)

Portal-Backend (2 files):

1. portal-backend/go.mod - Remove shared/audit dependency if present (already has Argus)
2. portal-backend/v1/middleware/audit_middleware.go - Replace auditpkg import with Argus, update all auditpkg.* references (CurrentTimestamp, MarshalMetadata, AuditLogRequest, GetGlobalAuditClient)

Recommendation: Only choose Option 2 if you're certain you'll never need audit-service or another audit implementation. Option 1 is safer and requires zero changes.

Verification

To verify Argus is working:

1. Check health endpoint:

   curl http://argus:3001/health

2. Check version endpoint:

   curl http://argus:3001/version

3. Query audit logs:

   curl http://argus:3001/api/audit-logs?traceId=<trace-id>

4. Test audit logging:

   • Make a request to orchestration-engine or portal-backend
   • Check that audit logs appear in Argus:

     curl http://argus:3001/api/audit-logs | jq