Skip to content

Commit f6894b9

Browse files
committed
Merge branch 'master' into fix-malware-hashes-fields
2 parents 5fc61e8 + 3c84487 commit f6894b9

File tree

2 files changed

+106
-6
lines changed

2 files changed

+106
-6
lines changed

sysdig/data_source_sysdig_secure_drift_policy_test.go

Lines changed: 75 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -157,3 +157,78 @@ data "sysdig_secure_drift_policy" "policy_2" {
157157
}
158158
`, name, name)
159159
}
160+
161+
func driftPolicyWithUseRegexDataSource(name string) string {
162+
return fmt.Sprintf(`
163+
resource "sysdig_secure_drift_policy" "policy_1" {
164+
name = "Test Drift Policy %s"
165+
description = "Test Drift Policy Description %s"
166+
enabled = true
167+
severity = 4
168+
169+
rule {
170+
description = "Test Drift Rule Description"
171+
enabled = true
172+
mounted_volume_drift_enabled = true
173+
use_regex = true
174+
175+
exceptions {
176+
items = ["/usr/bin/sh"]
177+
}
178+
prohibited_binaries {
179+
items = ["/usr/bin/curl"]
180+
}
181+
process_based_exceptions {
182+
items = ["/usr/bin/curl"]
183+
}
184+
process_based_prohibited_binaries {
185+
items = ["/usr/bin/sh"]
186+
}
187+
}
188+
189+
actions {
190+
prevent_drift = true
191+
}
192+
193+
}
194+
195+
data "sysdig_secure_drift_policy" "policy_2" {
196+
name = sysdig_secure_drift_policy.policy_1.name
197+
depends_on = [sysdig_secure_drift_policy.policy_1]
198+
}
199+
`, name, name)
200+
}
201+
202+
func driftPolicyWithProcessExceptionsDataSource(name string) string {
203+
return fmt.Sprintf(`
204+
resource "sysdig_secure_drift_policy" "policy_1" {
205+
name = "Test Drift Policy %s"
206+
description = "Test Drift Policy Description %s"
207+
enabled = true
208+
severity = 4
209+
210+
rule {
211+
description = "Test Drift Rule Description"
212+
enabled = true
213+
mounted_volume_drift_enabled = true
214+
215+
process_based_exceptions {
216+
items = ["/usr/bin/curl"]
217+
}
218+
process_based_prohibited_binaries {
219+
items = ["/usr/bin/sh"]
220+
}
221+
}
222+
223+
actions {
224+
prevent_drift = true
225+
}
226+
227+
}
228+
229+
data "sysdig_secure_drift_policy" "policy_2" {
230+
name = sysdig_secure_drift_policy.policy_1.name
231+
depends_on = [sysdig_secure_drift_policy.policy_1]
232+
}
233+
`, name, name)
234+
}

sysdig/resource_sysdig_secure_drift_policy_test.go

Lines changed: 31 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,9 @@ resource "sysdig_secure_drift_policy" "sample" {
7070
prohibited_binaries {
7171
items = ["/usr/bin/curl"]
7272
}
73+
process_based_exceptions {
74+
items = ["/usr/bin/curl"]
75+
}
7376
}
7477
7578
actions {
@@ -106,9 +109,6 @@ resource "sysdig_secure_drift_policy" "sample" {
106109
}
107110
process_based_exceptions {
108111
items = ["/usr/bin/curl"]
109-
}
110-
process_based_prohibited_binaries {
111-
items = ["/usr/bin/sh"]
112112
}
113113
}
114114
@@ -185,9 +185,6 @@ resource "sysdig_secure_drift_policy" "sample" {
185185
process_based_exceptions {
186186
items = ["/usr/bin/curl"]
187187
}
188-
process_based_prohibited_binaries {
189-
items = ["/usr/bin/sh"]
190-
}
191188
}
192189
193190
actions {
@@ -235,11 +232,39 @@ resource "sysdig_secure_drift_policy" "sample" {
235232
236233
rule {
237234
description = "Test Drift Rule Description"
235+
mounted_volume_drift_enabled = true
238236
239237
enabled = true
238+
239+
exceptions {
240+
items = ["/usr/bin/sh"]
241+
}
242+
prohibited_binaries {
243+
items = ["/usr/bin/curl"]
244+
}
245+
process_based_exceptions {
246+
items = ["/usr/bin/curl"]
247+
}
248+
}
249+
}
250+
`, name)
251+
}
252+
253+
func driftPolicyWithProcessBasedAndRegexEnabled(name string) string {
254+
return fmt.Sprintf(`
255+
resource "sysdig_secure_drift_policy" "sample" {
256+
257+
name = "Test Drift Policy %s"
258+
description = "Test Drift Policy Description"
259+
enabled = true
260+
severity = 4
261+
262+
rule {
263+
description = "Test Drift Rule Description"
240264
mounted_volume_drift_enabled = true
241265
242266
enabled = true
267+
use_regex = true
243268
244269
exceptions {
245270
items = ["/usr/bin/sh"]

0 commit comments

Comments
 (0)