Skip to content
Merged
Show file tree
Hide file tree
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 2 additions & 4 deletions examples/organization-org_compliance/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -115,8 +115,8 @@ module "secure-for-cloud_example_organization" {

| Name | Version |
|------|---------|
| <a name="provider_google"></a> [google](#provider\_google) | >= 4.21.0 |
| <a name="provider_sysdig"></a> [sysdig](#provider\_sysdig) | >= 0.5.46 |
| <a name="provider_google"></a> [google](#provider\_google) | 4.58.0 |
| <a name="provider_sysdig"></a> [sysdig](#provider\_sysdig) | 0.7.4 |

## Modules

Expand Down Expand Up @@ -147,7 +147,6 @@ module "secure-for-cloud_example_organization" {
|------|-------------|------|---------|:--------:|
| <a name="input_organization_domain"></a> [organization\_domain](#input\_organization\_domain) | Organization domain. e.g. sysdig.com | `string` | n/a | yes |
| <a name="input_benchmark_project_ids"></a> [benchmark\_project\_ids](#input\_benchmark\_project\_ids) | Google cloud project IDs to run Benchmarks on. It will create a trust-relationship on each, to allow Sysdig usage. If empty, all organization projects will be defaulted. | `list(string)` | `[]` | no |
| <a name="input_benchmark_regions"></a> [benchmark\_regions](#input\_benchmark\_regions) | List of regions in which to run the benchmark. If empty, the task will contain all regions by default. | `list(string)` | `[]` | no |
| <a name="input_benchmark_role_name"></a> [benchmark\_role\_name](#input\_benchmark\_role\_name) | The name of the Service Account that will be created. | `string` | `"sysdigcloudbench"` | no |
| <a name="input_deploy_benchmark"></a> [deploy\_benchmark](#input\_deploy\_benchmark) | whether benchmark module is to be deployed | `bool` | `true` | no |
| <a name="input_deploy_scanning"></a> [deploy\_scanning](#input\_deploy\_scanning) | true/false whether scanning module is to be deployed | `bool` | `false` | no |
Expand Down Expand Up @@ -213,7 +212,6 @@ Apache 2 Licensed. See LICENSE for full details.
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| <a name="input_benchmark_project_ids"></a> [benchmark\_project\_ids](#input\_benchmark\_project\_ids) | Google cloud project IDs to run Benchmarks on. It will create a trust-relationship on each, to allow Sysdig usage. If empty, all organization projects will be defaulted. | `list(string)` | `[]` | no |
| <a name="input_benchmark_regions"></a> [benchmark\_regions](#input\_benchmark\_regions) | List of regions in which to run the benchmark. If empty, the task will contain all regions by default. | `list(string)` | `[]` | no |
| <a name="input_benchmark_role_name"></a> [benchmark\_role\_name](#input\_benchmark\_role\_name) | The name of the Service Account that will be created. | `string` | `"sysdigcloudbench"` | no |
| <a name="input_deploy_benchmark"></a> [deploy\_benchmark](#input\_deploy\_benchmark) | whether benchmark module is to be deployed | `bool` | `true` | no |
| <a name="input_deploy_scanning"></a> [deploy\_scanning](#input\_deploy\_scanning) | true/false whether scanning module is to be deployed | `bool` | `false` | no |
Expand Down
1 change: 0 additions & 1 deletion examples/organization-org_compliance/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -128,7 +128,6 @@ module "cloud_bench_workload_identity" {

organization_domain = var.organization_domain
role_name = var.benchmark_role_name
regions = var.benchmark_regions
project_ids = var.benchmark_project_ids
project_id = data.google_client_config.current.project
}
6 changes: 0 additions & 6 deletions examples/organization-org_compliance/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -40,12 +40,6 @@ variable "deploy_benchmark" {
default = true
}

variable "benchmark_regions" {
type = list(string)
description = "List of regions in which to run the benchmark. If empty, the task will contain all regions by default."
default = []
}

variable "benchmark_project_ids" {
default = []
type = list(string)
Expand Down
5 changes: 2 additions & 3 deletions examples/organization/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -109,8 +109,8 @@ module "secure-for-cloud_example_organization" {

| Name | Version |
|------|---------|
| <a name="provider_google"></a> [google](#provider\_google) | >= 4.21.0 |
| <a name="provider_sysdig"></a> [sysdig](#provider\_sysdig) | >= 0.5.21 |
| <a name="provider_google"></a> [google](#provider\_google) | 4.58.0 |
| <a name="provider_sysdig"></a> [sysdig](#provider\_sysdig) | 0.7.4 |

## Modules

Expand Down Expand Up @@ -141,7 +141,6 @@ module "secure-for-cloud_example_organization" {
|------|-------------|------|---------|:--------:|
| <a name="input_organization_domain"></a> [organization\_domain](#input\_organization\_domain) | Organization domain. e.g. sysdig.com | `string` | n/a | yes |
| <a name="input_benchmark_project_ids"></a> [benchmark\_project\_ids](#input\_benchmark\_project\_ids) | Google cloud project IDs to run Benchmarks on. It will create a trust-relationship on each, to allow Sysdig usage. If empty, all organization projects will be defaulted. | `list(string)` | `[]` | no |
| <a name="input_benchmark_regions"></a> [benchmark\_regions](#input\_benchmark\_regions) | List of regions in which to run the benchmark. If empty, the task will contain all regions by default. | `list(string)` | `[]` | no |
| <a name="input_benchmark_role_name"></a> [benchmark\_role\_name](#input\_benchmark\_role\_name) | The name of the Service Account that will be created. | `string` | `"sysdigcloudbench"` | no |
| <a name="input_deploy_benchmark"></a> [deploy\_benchmark](#input\_deploy\_benchmark) | whether benchmark module is to be deployed | `bool` | `true` | no |
| <a name="input_deploy_scanning"></a> [deploy\_scanning](#input\_deploy\_scanning) | true/false whether scanning module is to be deployed | `bool` | `false` | no |
Expand Down
1 change: 0 additions & 1 deletion examples/organization/benchmark.tf
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,5 @@ module "cloud_bench" {
is_organizational = true
organization_domain = var.organization_domain
role_name = "${var.name}${var.benchmark_role_name}"
regions = var.benchmark_regions
project_ids = local.benchmark_projects_ids
}
6 changes: 0 additions & 6 deletions examples/organization/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -41,12 +41,6 @@ variable "deploy_benchmark" {
default = true
}

variable "benchmark_regions" {
type = list(string)
description = "List of regions in which to run the benchmark. If empty, the task will contain all regions by default."
default = []
}

variable "benchmark_project_ids" {
default = []
type = list(string)
Expand Down
7 changes: 3 additions & 4 deletions examples/single-project-k8s/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -81,9 +81,9 @@ See [inputs summary](#inputs) or module module [`variables.tf`](./variables.tf)

| Name | Version |
|------|---------|
| <a name="provider_google"></a> [google](#provider\_google) | >= 4.21.0 |
| <a name="provider_helm"></a> [helm](#provider\_helm) | >=2.3.0 |
| <a name="provider_sysdig"></a> [sysdig](#provider\_sysdig) | >= 0.5.21 |
| <a name="provider_google"></a> [google](#provider\_google) | 4.58.0 |
| <a name="provider_helm"></a> [helm](#provider\_helm) | 2.9.0 |
| <a name="provider_sysdig"></a> [sysdig](#provider\_sysdig) | 0.7.4 |

## Modules

Expand Down Expand Up @@ -111,7 +111,6 @@ See [inputs summary](#inputs) or module module [`variables.tf`](./variables.tf)

| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| <a name="input_benchmark_regions"></a> [benchmark\_regions](#input\_benchmark\_regions) | List of regions in which to run the benchmark. If empty, the task will contain all regions by default. | `list(string)` | `[]` | no |
| <a name="input_benchmark_role_name"></a> [benchmark\_role\_name](#input\_benchmark\_role\_name) | The name of the Service Account that will be created. | `string` | `"sysdigcloudbench"` | no |
| <a name="input_cloud_connector_image"></a> [cloud\_connector\_image](#input\_cloud\_connector\_image) | Cloud-connector image to deploy | `string` | `"quay.io/sysdig/cloud-connector"` | no |
| <a name="input_deploy_benchmark"></a> [deploy\_benchmark](#input\_deploy\_benchmark) | whether benchmark module is to be deployed | `bool` | `true` | no |
Expand Down
1 change: 0 additions & 1 deletion examples/single-project-k8s/benchmark.tf
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,5 @@ module "cloud_bench" {
is_organizational = false
role_name = "${var.name}${var.benchmark_role_name}"
project_id = data.google_client_config.current.project
regions = var.benchmark_regions
reuse_workload_identity_pool = var.reuse_workload_identity_pool
}
6 changes: 0 additions & 6 deletions examples/single-project-k8s/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -16,12 +16,6 @@ variable "deploy_benchmark" {
default = true
}

variable "benchmark_regions" {
type = list(string)
description = "List of regions in which to run the benchmark. If empty, the task will contain all regions by default."
default = []
}

variable "benchmark_role_name" {
type = string
description = "The name of the Service Account that will be created."
Expand Down
5 changes: 2 additions & 3 deletions examples/single-project/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -82,8 +82,8 @@ module "secure-for-cloud_example_single-project" {

| Name | Version |
|------|---------|
| <a name="provider_google"></a> [google](#provider\_google) | >= 4.21.0 |
| <a name="provider_sysdig"></a> [sysdig](#provider\_sysdig) | >= 0.5.21 |
| <a name="provider_google"></a> [google](#provider\_google) | 4.58.0 |
| <a name="provider_sysdig"></a> [sysdig](#provider\_sysdig) | 0.7.4 |

## Modules

Expand All @@ -108,7 +108,6 @@ module "secure-for-cloud_example_single-project" {

| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| <a name="input_benchmark_regions"></a> [benchmark\_regions](#input\_benchmark\_regions) | List of regions in which to run the benchmark. If empty, the task will contain all regions by default. | `list(string)` | `[]` | no |
| <a name="input_benchmark_role_name"></a> [benchmark\_role\_name](#input\_benchmark\_role\_name) | The name of the Service Account that will be created. | `string` | `"sysdigcloudbench"` | no |
| <a name="input_cloud_connector_image"></a> [cloud\_connector\_image](#input\_cloud\_connector\_image) | The image to use for the Cloud Connector. | `string` | `"us-docker.pkg.dev/sysdig-public-registry/secure-for-cloud/cloud-connector:latest"` | no |
| <a name="input_deploy_benchmark"></a> [deploy\_benchmark](#input\_deploy\_benchmark) | whether benchmark module is to be deployed | `bool` | `true` | no |
Expand Down
1 change: 0 additions & 1 deletion examples/single-project/benchmark.tf
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,5 @@ module "cloud_bench" {
is_organizational = false
role_name = "${var.name}${var.benchmark_role_name}"
project_id = data.google_client_config.current.project
regions = var.benchmark_regions
reuse_workload_identity_pool = var.reuse_workload_identity_pool
}
6 changes: 0 additions & 6 deletions examples/single-project/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -19,12 +19,6 @@ variable "deploy_benchmark" {
default = true
}

variable "benchmark_regions" {
type = list(string)
description = "List of regions in which to run the benchmark. If empty, the task will contain all regions by default."
default = []
}

variable "benchmark_role_name" {
type = string
description = "The name of the Service Account that will be created."
Expand Down
2 changes: 1 addition & 1 deletion examples/trigger-events/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ module "secure-for-cloud_trigger_events" {

| Name | Version |
|------|---------|
| <a name="provider_google"></a> [google](#provider\_google) | >= 4.21.0 |
| <a name="provider_google"></a> [google](#provider\_google) | 4.58.0 |

## Modules

Expand Down
2 changes: 1 addition & 1 deletion modules/infrastructure/organization_sink/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@

| Name | Version |
|------|---------|
| <a name="provider_google"></a> [google](#provider\_google) | >= 4.21.0 |
| <a name="provider_google"></a> [google](#provider\_google) | 4.58.0 |

## Modules

Expand Down
2 changes: 1 addition & 1 deletion modules/infrastructure/project_sink/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@

| Name | Version |
|------|---------|
| <a name="provider_google"></a> [google](#provider\_google) | >= 4.21.0 |
| <a name="provider_google"></a> [google](#provider\_google) | 4.58.0 |

## Modules

Expand Down
2 changes: 1 addition & 1 deletion modules/infrastructure/pubsub_subscription/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ already exists in the project. It will create the topic if it doesn't exist.

| Name | Version |
|------|---------|
| <a name="provider_google"></a> [google](#provider\_google) | >= 4.21.0 |
| <a name="provider_google"></a> [google](#provider\_google) | 4.58.0 |

## Modules

Expand Down
2 changes: 1 addition & 1 deletion modules/infrastructure/secrets/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@

| Name | Version |
|------|---------|
| <a name="provider_google"></a> [google](#provider\_google) | >= 4.21.0 |
| <a name="provider_google"></a> [google](#provider\_google) | 4.58.0 |

## Modules

Expand Down
1 change: 0 additions & 1 deletion modules/services/cloud-bench-workload-identity/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,6 @@
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.15.0 |
| <a name="requirement_google"></a> [google](#requirement\_google) | >= 4.21.0 |
| <a name="requirement_google-beta"></a> [google-beta](#requirement\_google-beta) | >= 4.21.0 |
| <a name="requirement_random"></a> [random](#requirement\_random) | >= 3.1.0 |
| <a name="requirement_sysdig"></a> [sysdig](#requirement\_sysdig) | >= 0.5.46 |

## Providers
Expand Down
11 changes: 0 additions & 11 deletions modules/services/cloud-bench-workload-identity/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -22,14 +22,3 @@ module "trust_relationship" {
project_ids = local.project_ids
project_id_number_map = local.project_id_to_number_map
}

module "task" {
source = "./task"
project_id = var.project_id
project_ids = local.project_ids
regions = var.regions
is_organizational = true
organization_domain = var.organization_domain

depends_on = [module.trust_relationship]
}
48 changes: 0 additions & 48 deletions modules/services/cloud-bench-workload-identity/task/main.tf

This file was deleted.

Empty file.

This file was deleted.

17 changes: 0 additions & 17 deletions modules/services/cloud-bench-workload-identity/task/versions.tf

This file was deleted.

6 changes: 0 additions & 6 deletions modules/services/cloud-bench-workload-identity/variables.tf
Original file line number Diff line number Diff line change
@@ -1,9 +1,3 @@
variable "regions" {
type = list(string)
description = "List of regions in which to run the benchmark. If empty, the task will contain all regions by default."
default = []
}

variable "role_name" {
type = string
description = "The name of the Service Account that will be created."
Expand Down
4 changes: 0 additions & 4 deletions modules/services/cloud-bench-workload-identity/versions.tf
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,6 @@ terraform {
required_version = ">= 0.15.0"

required_providers {
random = {
source = "hashicorp/random"
version = ">= 3.1.0"
}
google = {
source = "hashicorp/google"
version = ">= 4.21.0"
Expand Down
3 changes: 0 additions & 3 deletions modules/services/cloud-bench/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,6 @@ Deployed on **Sysdig Backend**
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.15.0 |
| <a name="requirement_google"></a> [google](#requirement\_google) | >= 4.21.0 |
| <a name="requirement_google-beta"></a> [google-beta](#requirement\_google-beta) | >= 4.21.0 |
| <a name="requirement_random"></a> [random](#requirement\_random) | >= 3.1.0 |
| <a name="requirement_sysdig"></a> [sysdig](#requirement\_sysdig) | >= 0.5.21 |

## Providers
Expand All @@ -26,7 +25,6 @@ No providers.

| Name | Source | Version |
|------|--------|---------|
| <a name="module_task"></a> [task](#module\_task) | ./task | n/a |
| <a name="module_trust_relationship"></a> [trust\_relationship](#module\_trust\_relationship) | ./trust_relationship | n/a |

## Resources
Expand All @@ -41,7 +39,6 @@ No resources.
| <a name="input_organization_domain"></a> [organization\_domain](#input\_organization\_domain) | Organization domain. e.g. sysdig.com | `string` | `""` | no |
| <a name="input_project_id"></a> [project\_id](#input\_project\_id) | Google cloud project ID to run Benchmarks on. It will create a trust-relationship, to allow Sysdig usage. | `string` | `""` | no |
| <a name="input_project_ids"></a> [project\_ids](#input\_project\_ids) | Google cloud project IDs to run Benchmarks on. It will create a trust-relationship on each, to allow Sysdig usage. If empty, all organization projects will be defaulted. | `list(string)` | `[]` | no |
| <a name="input_regions"></a> [regions](#input\_regions) | List of regions in which to run the benchmark. If empty, the task will contain all regions by default. | `list(string)` | `[]` | no |
| <a name="input_reuse_workload_identity_pool"></a> [reuse\_workload\_identity\_pool](#input\_reuse\_workload\_identity\_pool) | Reuse existing workload identity pool, from previous deployment, with name 'sysdigcloud'. <br/> Will help overcome <a href='https://github.com/sysdiglabs/terraform-google-secure-for-cloud#q-getting-error-creating-workloadidentitypool-googleapi-error-409-requested-entity-already-exists'>redeploying error due to GCP softdelete</a><br/> | `bool` | `false` | no |
| <a name="input_role_name"></a> [role\_name](#input\_role\_name) | The name of the Service Account/Role that will be created. Modify this value in case of conflict / 409 error to bypass Google soft delete | `string` | `"sysdigcloudbench"` | no |

Expand Down
11 changes: 0 additions & 11 deletions modules/services/cloud-bench/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -10,14 +10,3 @@ module "trust_relationship" {
role_name = var.role_name
reuse_workload_identity_pool = var.reuse_workload_identity_pool
}

module "task" {
source = "./task"
project_id = var.project_id
project_ids = local.project_ids
regions = var.regions
is_organizational = var.is_organizational
organization_domain = var.organization_domain

depends_on = [module.trust_relationship]
}
Loading