File tree Expand file tree Collapse file tree 4 files changed +43
-5
lines changed Expand file tree Collapse file tree 4 files changed +43
-5
lines changed Original file line number Diff line number Diff line change @@ -26,7 +26,7 @@ resource "google_organization_iam_member" "browser" {
2626# Call Sysdig Backend to create organization with foundational onboarding
2727# (ensure it is called after all above cloud resources are created)
2828# ---------------------------------------------------------------------------------------------
29- resource "sysdig_secure_organization" "azure_organization " {
29+ resource "sysdig_secure_organization" "google_organization " {
3030 count = var. is_organizational ? 1 : 0
3131
3232 management_account_id = sysdig_secure_cloud_auth_account. google_account . id
Original file line number Diff line number Diff line change @@ -12,3 +12,8 @@ output "is_organizational" {
1212 value = var. is_organizational
1313 description = " Boolean value to indicate if secure-for-cloud is deployed to an entire GCP organization or not"
1414}
15+
16+ output "organization_domain" {
17+ value = var. organization_domain
18+ description = " Organization domain. e.g. sysdig.com"
19+ }
Original file line number Diff line number Diff line change @@ -18,8 +18,26 @@ provider "sysdig" {
1818}
1919
2020module "onboarding" {
21- source = " ../../../modules/onboarding"
22- project_id = " org-child-project-3"
23- external_id = " 25ef0d887bc7a2b30089a025618e1c62"
24- is_organizational = true
21+ source = " ../../../modules/onboarding"
22+ project_id = " org-child-project-3"
23+ external_id = " 25ef0d887bc7a2b30089a025618e1c62"
24+ is_organizational = true
25+ organization_domain = " draios.com"
26+ }
27+
28+ module "config-posture" {
29+ source = " ../../../modules/config-posture"
30+ project_id = module. onboarding . project_id
31+ external_id = " 25ef0d887bc7a2b30089a025618e1c62"
32+ is_organizational = module. onboarding . is_organizational
33+ organization_domain = module. onboarding . organization_domain
34+ sysdig_secure_account_id = module. onboarding . sysdig_secure_account_id
35+ }
36+
37+ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
38+ account_id = module. onboarding . sysdig_secure_account_id
39+ type = " FEATURE_SECURE_CONFIG_POSTURE"
40+ enabled = true
41+ components = [module . config-posture . service_principal_component_id ]
42+ depends_on = [module . config-posture ]
2543}
Original file line number Diff line number Diff line change @@ -21,4 +21,19 @@ module "onboarding" {
2121 source = " ../../../modules/onboarding"
2222 project_id = " org-child-project-3"
2323 external_id = " 25ef0d887bc7a2b30089a025618e1c62"
24+ }
25+
26+ module "config-posture" {
27+ source = " ../../../modules/config-posture"
28+ project_id = " org-child-project-3"
29+ external_id = " 25ef0d887bc7a2b30089a025618e1c62"
30+ sysdig_secure_account_id = module. onboarding . sysdig_secure_account_id
31+ }
32+
33+ resource "sysdig_secure_cloud_auth_account_feature" "config_posture" {
34+ account_id = module. onboarding . sysdig_secure_account_id
35+ type = " FEATURE_SECURE_CONFIG_POSTURE"
36+ enabled = true
37+ components = [module . config-posture . service_principal_component_id ]
38+ depends_on = [module . config-posture ]
2439}
You can’t perform that action at this time.
0 commit comments