SSPROD-54180 gcp logless ciem test updates

ajay-rangarajan · ajay-rangarajan · commit 6a7a4c240abd · 2025-03-27T19:24:24.000-05:00
diff --git a/test/examples/modular_organization/onboarding_with_posture.tf b/test/examples/modular_organization/onboarding_with_posture.tf
@@ -38,4 +38,13 @@ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
   enabled    = true
   components = [module.config-posture.service_principal_component_id]
   depends_on = [module.config-posture]
-}
+}
+
+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_basic" {
+  account_id = module.onboarding.sysdig_secure_account_id
+  type       = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
+  enabled    = true
+  components = [module.config-posture.service_principal_component_id]
+  depends_on = [module.config-posture, sysdig_secure_cloud_auth_account_feature.config_posture]
+  flags = {"CIEM_FEATURE_MODE": "basic"}
+}
diff --git a/test/examples/modular_organization/pub-sub-admin-write-only1.tf b/test/examples/modular_organization/pub-sub-admin-write-only1.tf
@@ -27,10 +27,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
   depends_on = [ module.pub-sub ]
 }
 
-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
   account_id = module.onboarding.sysdig_secure_account_id
   type       = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
   enabled    = true
-  components = [module.pub-sub.pubsub_datasource_component_id]
-  depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
+  components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
+  depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
+  flags = {"CIEM_FEATURE_MODE": "advanced"}
 }
diff --git a/test/examples/modular_organization/pub-sub-admin-write-only2.tf b/test/examples/modular_organization/pub-sub-admin-write-only2.tf
@@ -22,10 +22,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
   depends_on = [ module.pub-sub ]
 }
 
-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
   account_id = module.onboarding.sysdig_secure_account_id
   type       = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
   enabled    = true
-  components = [module.pub-sub.pubsub_datasource_component_id]
-  depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
+  components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
+  depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
+  flags = {"CIEM_FEATURE_MODE": "advanced"}
 }
diff --git a/test/examples/modular_organization/pub-sub.tf b/test/examples/modular_organization/pub-sub.tf
@@ -53,10 +53,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
   depends_on = [ module.pub-sub ]
 }
 
-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
   account_id = module.onboarding.sysdig_secure_account_id
   type       = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
   enabled    = true
-  components = [module.pub-sub.pubsub_datasource_component_id]
-  depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
+  components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
+  depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
+  flags = {"CIEM_FEATURE_MODE": "advanced"}
 }
diff --git a/test/examples/modular_single_project/onboarding_with_posture.tf b/test/examples/modular_single_project/onboarding_with_posture.tf
@@ -34,4 +34,13 @@ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
   enabled    = true
   components = [module.config-posture.service_principal_component_id]
   depends_on = [module.config-posture]
-}
+}
+
+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_basic" {
+  account_id = module.onboarding.sysdig_secure_account_id
+  type       = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
+  enabled    = true
+  components = [module.config-posture.service_principal_component_id]
+  depends_on = [module.config-posture, sysdig_secure_cloud_auth_account_feature.config_posture]
+  flags = {"CIEM_FEATURE_MODE": "basic"}
+}
diff --git a/test/examples/modular_single_project/pub-sub-admin-write-only1.tf b/test/examples/modular_single_project/pub-sub-admin-write-only1.tf
@@ -25,10 +25,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
   depends_on = [ module.pub-sub ]
 }
 
-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
   account_id = module.onboarding.sysdig_secure_account_id
   type       = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
   enabled    = true
-  components = [module.pub-sub.pubsub_datasource_component_id]
-  depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
+  components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
+  depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
+  flags = {"CIEM_FEATURE_MODE": "advanced"}
 }
diff --git a/test/examples/modular_single_project/pub-sub-admin-write-only2.tf b/test/examples/modular_single_project/pub-sub-admin-write-only2.tf
@@ -20,10 +20,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
   depends_on = [ module.pub-sub ]
 }
 
-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
   account_id = module.onboarding.sysdig_secure_account_id
   type       = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
   enabled    = true
-  components = [module.pub-sub.pubsub_datasource_component_id]
-  depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
+  components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
+  depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
+  flags = {"CIEM_FEATURE_MODE": "advanced"}
 }
diff --git a/test/examples/modular_single_project/pub-sub.tf b/test/examples/modular_single_project/pub-sub.tf
@@ -51,10 +51,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {
   depends_on = [ module.pub-sub ]
 }
 
-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {
+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {
   account_id = module.onboarding.sysdig_secure_account_id
   type       = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"
   enabled    = true
-  components = [module.pub-sub.pubsub_datasource_component_id]
-  depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]
+  components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])
+  depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]
+  flags = {"CIEM_FEATURE_MODE": "advanced"}
 }

Original file line number	Diff line number	Diff line change
`@@ -27,10 +27,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {`
`27`	`27`	`depends_on = [ module.pub-sub ]`
`28`	`28`	`}`
`29`	`29`
`30`		`-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {`
	`30`	`+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {`
`31`	`31`	`account_id = module.onboarding.sysdig_secure_account_id`
`32`	`32`	`type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"`
`33`	`33`	`enabled = true`
`34`		`- components = [module.pub-sub.pubsub_datasource_component_id]`
`35`		`- depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]`
	`34`	`+ components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])`
	`35`	`+ depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]`
	`36`	`+ flags = {"CIEM_FEATURE_MODE": "advanced"}`
`36`	`37`	`}`
Original file line number	Diff line number	Diff line change
`@@ -22,10 +22,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {`
`22`	`22`	`depends_on = [ module.pub-sub ]`
`23`	`23`	`}`
`24`	`24`
`25`		`-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {`
	`25`	`+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {`
`26`	`26`	`account_id = module.onboarding.sysdig_secure_account_id`
`27`	`27`	`type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"`
`28`	`28`	`enabled = true`
`29`		`- components = [module.pub-sub.pubsub_datasource_component_id]`
`30`		`- depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]`
	`29`	`+ components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])`
	`30`	`+ depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]`
	`31`	`+ flags = {"CIEM_FEATURE_MODE": "advanced"}`
`31`	`32`	`}`
Original file line number	Diff line number	Diff line change
`@@ -53,10 +53,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {`
`53`	`53`	`depends_on = [ module.pub-sub ]`
`54`	`54`	`}`
`55`	`55`
`56`		`-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {`
	`56`	`+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {`
`57`	`57`	`account_id = module.onboarding.sysdig_secure_account_id`
`58`	`58`	`type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"`
`59`	`59`	`enabled = true`
`60`		`- components = [module.pub-sub.pubsub_datasource_component_id]`
`61`		`- depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]`
	`60`	`+ components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])`
	`61`	`+ depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]`
	`62`	`+ flags = {"CIEM_FEATURE_MODE": "advanced"}`
`62`	`63`	`}`
Original file line number	Diff line number	Diff line change
`@@ -25,10 +25,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {`
`25`	`25`	`depends_on = [ module.pub-sub ]`
`26`	`26`	`}`
`27`	`27`
`28`		`-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {`
	`28`	`+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {`
`29`	`29`	`account_id = module.onboarding.sysdig_secure_account_id`
`30`	`30`	`type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"`
`31`	`31`	`enabled = true`
`32`		`- components = [module.pub-sub.pubsub_datasource_component_id]`
`33`		`- depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]`
	`32`	`+ components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])`
	`33`	`+ depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]`
	`34`	`+ flags = {"CIEM_FEATURE_MODE": "advanced"}`
`34`	`35`	`}`
Original file line number	Diff line number	Diff line change
`@@ -20,10 +20,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {`
`20`	`20`	`depends_on = [ module.pub-sub ]`
`21`	`21`	`}`
`22`	`22`
`23`		`-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {`
	`23`	`+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {`
`24`	`24`	`account_id = module.onboarding.sysdig_secure_account_id`
`25`	`25`	`type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"`
`26`	`26`	`enabled = true`
`27`		`- components = [module.pub-sub.pubsub_datasource_component_id]`
`28`		`- depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]`
	`27`	`+ components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])`
	`28`	`+ depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]`
	`29`	`+ flags = {"CIEM_FEATURE_MODE": "advanced"}`
`29`	`30`	`}`
Original file line number	Diff line number	Diff line change
`@@ -51,10 +51,11 @@ resource "sysdig_secure_cloud_auth_account_feature" "threat_detection" {`
`51`	`51`	`depends_on = [ module.pub-sub ]`
`52`	`52`	`}`
`53`	`53`
`54`		`-resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement" {`
	`54`	`+resource "sysdig_secure_cloud_auth_account_feature" "identity_entitlement_advanced" {`
`55`	`55`	`account_id = module.onboarding.sysdig_secure_account_id`
`56`	`56`	`type = "FEATURE_SECURE_IDENTITY_ENTITLEMENT"`
`57`	`57`	`enabled = true`
`58`		`- components = [module.pub-sub.pubsub_datasource_component_id]`
`59`		`- depends_on = [sysdig_secure_cloud_auth_account_feature.config_posture, module.pub-sub]`
	`58`	`+ components = concat(sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic.components, [module.pub-sub.pubsub_datasource_component_id])`
	`59`	`+ depends_on = [module.pub-sub, sysdig_secure_cloud_auth_account_feature.identity_entitlement_basic]`
	`60`	`+ flags = {"CIEM_FEATURE_MODE": "advanced"}`
`60`	`61`	`}`