Centralized Audit Log Ingestion
audit-ingest.svc · System Design v1 · 2026 · Go (Gin) · Zitadel M2M · BigQuery · interactive original ↗
A single, authenticated HTTP API that any system can stream audit events to — validated, enriched, and durably written to BigQuery for search, compliance, and forensics.
Stack: Go · Gin · Zitadel · M2M OAuth2 · Google BigQuery · JWT · JWKS
Design principles
| Principle | ||
|---|---|---|
| 01 | WRITE-ONLY | Clients can append events but never read or mutate. Tamper-evident by design. |
| 02 | SCHEMA-FIRST | One canonical event envelope; source-specific data lives in a typed JSON column. |
| 03 | M2M ONLY | Every producer is a Zitadel service account. No human credentials touch the API. |
| 04 | IDEMPOTENT | Dedup on event_id so retries never double-write. |