Skip to content

Commit 2842f17

Browse files
ajay-rangarajanajay-rangarajan
authored
SSPROD-54180 logless ciem test updates (#61)
* SSPROD-54180 gcp logless ciem test updates * SSPROD-54180 adding ignore lifecycle for basic ciem flags * SSPROD-54180 ignore basic ciem flag and component changes
1 parent 3ac0a42 commit 2842f17

File tree

8 files changed

+80
-20
lines changed

8 files changed

+80
-20
lines changed

‎test/examples/modular_organization/onboarding_with_posture.tf‎

Lines changed: 16 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,4 +38,19 @@ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
3838
enabled = true
3939
components = [module.config-posture.service_principal_component_id]
4040
depends_on = [module.config-posture]
41-
}
41+
}
42+
43+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_basic" {
44+
account_id = module.onboarding.sysdig_secure_account_id
45+
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
46+
enabled = true
47+
components = [module.config-posture.service_principal_component_id]
48+
depends_on = [module.config-posture, sysdig_secure_cloud_auth_account_feature.config_posture]
49+
flags = {
50+
"CIEM_FEATURE_MODE": "basic"
51+
}
52+
53+
lifecycle {
54+
ignore_changes = [flags, components]
55+
}
56+
}

‎test/examples/modular_organization/pub-sub-admin-write-only1.tf‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -27,10 +27,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
2727
depends_on = [ module.pub-sub ]
2828
}
2929

30-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
30+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
3131
account_id = module.onboarding.sysdig_secure_account_id
3232
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
3333
enabled = true
34-
components = [module.pub-sub.pubsub_datasource_component_id]
35-
depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
34+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
35+
depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
36+
flags = {"CIEM_FEATURE_MODE": "advanced"}
37+
38+
lifecycle {
39+
ignore_changes = [flags, components]
40+
}
3641
}

‎test/examples/modular_organization/pub-sub-admin-write-only2.tf‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,10 +22,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
2222
depends_on = [ module.pub-sub ]
2323
}
2424

25-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
25+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
2626
account_id = module.onboarding.sysdig_secure_account_id
2727
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2828
enabled = true
29-
components = [module.pub-sub.pubsub_datasource_component_id]
30-
depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
29+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
30+
depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
31+
flags = {"CIEM_FEATURE_MODE": "advanced"}
32+
33+
lifecycle {
34+
ignore_changes = [flags, components]
35+
}
3136
}

‎test/examples/modular_organization/pub-sub.tf‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,10 +53,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
5353
depends_on = [ module.pub-sub ]
5454
}
5555

56-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
56+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
5757
account_id = module.onboarding.sysdig_secure_account_id
5858
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
5959
enabled = true
60-
components = [module.pub-sub.pubsub_datasource_component_id]
61-
depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
60+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
61+
depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
62+
flags = {"CIEM_FEATURE_MODE": "advanced"}
63+
64+
lifecycle {
65+
ignore_changes = [flags, components]
66+
}
6267
}

‎test/examples/modular_single_project/onboarding_with_posture.tf‎

Lines changed: 16 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,4 +34,19 @@ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
3434
enabled = true
3535
components = [module.config-posture.service_principal_component_id]
3636
depends_on = [module.config-posture]
37-
}
37+
}
38+
39+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_basic" {
40+
account_id = module.onboarding.sysdig_secure_account_id
41+
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
42+
enabled = true
43+
components = [module.config-posture.service_principal_component_id]
44+
depends_on = [module.config-posture, sysdig_secure_cloud_auth_account_feature.config_posture]
45+
flags = {
46+
"CIEM_FEATURE_MODE": "basic"
47+
}
48+
49+
lifecycle {
50+
ignore_changes = [flags, components]
51+
}
52+
}

‎test/examples/modular_single_project/pub-sub-admin-write-only1.tf‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,10 +25,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
2525
depends_on = [ module.pub-sub ]
2626
}
2727

28-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
28+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
2929
account_id = module.onboarding.sysdig_secure_account_id
3030
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
3131
enabled = true
32-
components = [module.pub-sub.pubsub_datasource_component_id]
33-
depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
32+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
33+
depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
34+
flags = {"CIEM_FEATURE_MODE": "advanced"}
35+
36+
lifecycle {
37+
ignore_changes = [flags, components]
38+
}
3439
}

‎test/examples/modular_single_project/pub-sub-admin-write-only2.tf‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -20,10 +20,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
2020
depends_on = [ module.pub-sub ]
2121
}
2222

23-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
23+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
2424
account_id = module.onboarding.sysdig_secure_account_id
2525
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
2626
enabled = true
27-
components = [module.pub-sub.pubsub_datasource_component_id]
28-
depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
27+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
28+
depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
29+
flags = {"CIEM_FEATURE_MODE": "advanced"}
30+
31+
lifecycle {
32+
ignore_changes = [flags, components]
33+
}
2934
}

‎test/examples/modular_single_project/pub-sub.tf‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -51,10 +51,15 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
5151
depends_on = [ module.pub-sub ]
5252
}
5353

54-
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
54+
resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
5555
account_id = module.onboarding.sysdig_secure_account_id
5656
type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
5757
enabled = true
58-
components = [module.pub-sub.pubsub_datasource_component_id]
59-
depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
58+
components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
59+
depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
60+
flags = {"CIEM_FEATURE_MODE": "advanced"}
61+
62+
lifecycle {
63+
ignore_changes = [flags, components]
64+
}
6065
}

0 commit comments

Comments
 (0)