Skip to content

Commit 8aaf8ab

Browse files
SSPROD-54180 logless ciem test updates (#57)
* SSPROD-54180 aws logless ciem test updates * SSPROD-54180 adding ignore changes to basic feature * SSPROD-54180 ignore basic ciem flag and component changes
1 parent 4a6956f commit 8aaf8ab

12 files changed

+131
-31
lines changed

test/examples/organization/cloud_logs.tf

+9-4
Original file line numberDiff line numberDiff line change
@@ -17,10 +17,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1717
depends_on = [module.cloud-logs]
1818
}
1919

20-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
20+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
2121
account_id = module.onboarding.sysdig_secure_account_id
2222
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2323
enabled = true
24-
components = [module.cloud-logs.cloud_logs_component_id]
25-
depends_on = [module.cloud-logs, sysdig_secure_cloud_auth_account_feature.config_posture]
26-
}
24+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.cloud-logs.cloud_logs_component_id])
25+
depends_on = [module.cloud-logs, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
26+
flags = {"CIEM_FEATURE_MODE": "advanced"}
27+
28+
lifecycle {
29+
ignore_changes = [flags, components]
30+
}
31+
}

test/examples/organization/cloud_logs_gov.tf

+9-4
Original file line numberDiff line numberDiff line change
@@ -18,10 +18,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1818
depends_on = [module.cloud-logs]
1919
}
2020

21-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
21+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
2222
account_id = module.onboarding.sysdig_secure_account_id
2323
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2424
enabled = true
25-
components = [module.cloud-logs.cloud_logs_component_id]
26-
depends_on = [module.cloud-logs, sysdig_secure_cloud_auth_account_feature.config_posture]
27-
}
25+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.cloud-logs.cloud_logs_component_id])
26+
depends_on = [module.cloud-logs, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
27+
flags = {"CIEM_FEATURE_MODE": "advanced"}
28+
29+
lifecycle {
30+
ignore_changes = [flags, components]
31+
}
32+
}

test/examples/organization/event_bridge.tf

+9-4
Original file line numberDiff line numberDiff line change
@@ -26,10 +26,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
2626
depends_on = [module.event-bridge]
2727
}
2828

29-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
29+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
3030
account_id = module.onboarding.sysdig_secure_account_id
3131
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
3232
enabled = true
33-
components = [module.event-bridge.event_bridge_component_id]
34-
depends_on = [module.event-bridge, sysdig_secure_cloud_auth_account_feature.config_posture]
35-
}
33+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.event-bridge.event_bridge_component_id])
34+
depends_on = [module.event-bridge, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
35+
flags = {"CIEM_FEATURE_MODE": "advanced"}
36+
37+
lifecycle {
38+
ignore_changes = [flags, components]
39+
}
40+
}

test/examples/organization/event_bridge_gov.tf

+8-3
Original file line numberDiff line numberDiff line change
@@ -20,10 +20,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
2020
depends_on = [module.event-bridge]
2121
}
2222

23-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
23+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
2424
account_id = module.onboarding.sysdig_secure_account_id
2525
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2626
enabled = true
27-
components = [module.event-bridge.event_bridge_component_id]
28-
depends_on = [module.event-bridge, sysdig_secure_cloud_auth_account_feature.config_posture]
27+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.event-bridge.event_bridge_component_id])
28+
depends_on = [module.event-bridge, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
29+
flags = {"CIEM_FEATURE_MODE": "advanced"}
30+
31+
lifecycle {
32+
ignore_changes = [flags, components]
33+
}
2934
}

test/examples/organization/onboarding_with_cspm.tf

+15
Original file line numberDiff line numberDiff line change
@@ -50,3 +50,18 @@ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
5050
components = [module.config-posture.config_posture_component_id]
5151
depends_on = [module.config-posture]
5252
}
53+
54+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_basic" {
55+
account_id = module.onboarding.sysdig_secure_account_id
56+
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
57+
enabled = true
58+
components = [module.config-posture.config_posture_component_id]
59+
depends_on = [module.config-posture, sysdig_secure_cloud_auth_account_feature.config_posture]
60+
flags = {
61+
"CIEM_FEATURE_MODE": "basic"
62+
}
63+
64+
lifecycle {
65+
ignore_changes = [flags, components]
66+
}
67+
}

test/examples/organization/onboarding_with_cspm_gov.tf

+15
Original file line numberDiff line numberDiff line change
@@ -39,3 +39,18 @@ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
3939
components = [module.config-posture.config_posture_component_id]
4040
depends_on = [module.config-posture]
4141
}
42+
43+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_basic" {
44+
account_id = module.onboarding.sysdig_secure_account_id
45+
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
46+
enabled = true
47+
components = [module.config-posture.config_posture_component_id]
48+
depends_on = [module.config-posture, sysdig_secure_cloud_auth_account_feature.config_posture]
49+
flags = {
50+
"CIEM_FEATURE_MODE": "basic"
51+
}
52+
53+
lifecycle {
54+
ignore_changes = [flags, components]
55+
}
56+
}

test/examples/single_account/cloud_logs.tf

+9-4
Original file line numberDiff line numberDiff line change
@@ -17,10 +17,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1717
depends_on = [module.cloud-logs]
1818
}
1919

20-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
20+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
2121
account_id = module.onboarding.sysdig_secure_account_id
2222
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2323
enabled = true
24-
components = [module.cloud-logs.cloud_logs_component_id]
25-
depends_on = [module.cloud-logs, sysdig_secure_cloud_auth_account_feature.config_posture]
26-
}
24+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.cloud-logs.cloud_logs_component_id])
25+
depends_on = [module.cloud-logs, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
26+
flags = {"CIEM_FEATURE_MODE": "advanced"}
27+
28+
lifecycle {
29+
ignore_changes = [flags, components]
30+
}
31+
}

test/examples/single_account/cloud_logs_gov.tf

+9-4
Original file line numberDiff line numberDiff line change
@@ -18,10 +18,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1818
depends_on = [module.cloud-logs]
1919
}
2020

21-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
21+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
2222
account_id = module.onboarding.sysdig_secure_account_id
2323
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2424
enabled = true
25-
components = [module.cloud-logs.cloud_logs_component_id]
26-
depends_on = [module.cloud-logs, sysdig_secure_cloud_auth_account_feature.config_posture]
27-
}
25+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.cloud-logs.cloud_logs_component_id])
26+
depends_on = [module.cloud-logs, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
27+
flags = {"CIEM_FEATURE_MODE": "advanced"}
28+
29+
lifecycle {
30+
ignore_changes = [flags, components]
31+
}
32+
}

test/examples/single_account/event_bridge.tf

+9-4
Original file line numberDiff line numberDiff line change
@@ -17,10 +17,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1717
depends_on = [module.event-bridge]
1818
}
1919

20-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
20+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
2121
account_id = module.onboarding.sysdig_secure_account_id
2222
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2323
enabled = true
24-
components = [module.event-bridge.event_bridge_component_id]
25-
depends_on = [module.event-bridge, sysdig_secure_cloud_auth_account_feature.config_posture]
26-
}
24+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.event-bridge.event_bridge_component_id])
25+
depends_on = [module.event-bridge, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
26+
flags = {"CIEM_FEATURE_MODE": "advanced"}
27+
28+
lifecycle {
29+
ignore_changes = [flags, components]
30+
}
31+
}

test/examples/single_account/event_bridge_gov.tf

+8-3
Original file line numberDiff line numberDiff line change
@@ -18,10 +18,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
1818
depends_on = [module.event-bridge]
1919
}
2020

21-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
21+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
2222
account_id = module.onboarding.sysdig_secure_account_id
2323
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2424
enabled = true
25-
components = [module.event-bridge.event_bridge_component_id]
26-
depends_on = [module.event-bridge, sysdig_secure_cloud_auth_account_feature.config_posture]
25+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.event-bridge.event_bridge_component_id])
26+
depends_on = [module.event-bridge, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
27+
flags = {"CIEM_FEATURE_MODE": "advanced"}
28+
29+
lifecycle {
30+
ignore_changes = [flags, components]
31+
}
2732
}

test/examples/single_account/onboarding_with_cspm.tf

+16-1
Original file line numberDiff line numberDiff line change
@@ -32,4 +32,19 @@ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
3232
enabled = true
3333
components = [module.config-posture.config_posture_component_id]
3434
depends_on = [module.config-posture]
35-
}
35+
}
36+
37+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_basic" {
38+
account_id = module.onboarding.sysdig_secure_account_id
39+
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
40+
enabled = true
41+
components = [module.config-posture.config_posture_component_id]
42+
depends_on = [module.config-posture, sysdig_secure_cloud_auth_account_feature.config_posture]
43+
flags = {
44+
"CIEM_FEATURE_MODE": "basic"
45+
}
46+
47+
lifecycle {
48+
ignore_changes = [flags, components]
49+
}
50+
}

test/examples/single_account/onboarding_with_cspm_gov.tf

+15
Original file line numberDiff line numberDiff line change
@@ -35,3 +35,18 @@ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
3535
components = [module.config-posture.config_posture_component_id]
3636
depends_on = [module.config-posture]
3737
}
38+
39+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_basic" {
40+
account_id = module.onboarding.sysdig_secure_account_id
41+
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
42+
enabled = true
43+
components = [module.config-posture.config_posture_component_id]
44+
depends_on = [module.config-posture, sysdig_secure_cloud_auth_account_feature.config_posture]
45+
flags = {
46+
"CIEM_FEATURE_MODE": "basic"
47+
}
48+
49+
lifecycle {
50+
ignore_changes = [flags, components]
51+
}
52+
}

0 commit comments

Comments
 (0)