-
Notifications
You must be signed in to change notification settings - Fork 51
feat: Add a param isFIPSEnabled #598
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: yiming.luo/fips
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Requesting some updates to the description
README.md
Outdated
@@ -66,6 +66,7 @@ To further configure your plugin, use the following custom parameters in your `s | |||
| `enableStepFunctionsTracing` | Enable automatic subscription of the Datadog Forwarder to Step Function log groups and Step Functions tracing. If no Step Function log groups are configured, then they are automatically created. Requires setting `forwarderArn`. Defaults to `false`. | | |||
| `propagateUpstreamTrace` | When set to `true`, downstream Stepfunction invocation traces merge with upstream Stepfunction invocations. Defaults to `false`. | | |||
| `redirectHandlers` | Optionally disable handler redirection if set to `false`. This should only be set to `false` when APM is fully disabled. Defaults to `true`. | | |||
| `enableFIPS` | When set to `true`, a FIPS-compliant lambda extension layer will be used. Only works if `addExtension` is `true` and `site` is `ddog-gov.com`. Defaults to `false`. | |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| `enableFIPS` | When set to `true`, a FIPS-compliant lambda extension layer will be used. Only works if `addExtension` is `true` and `site` is `ddog-gov.com`. Defaults to `false`. | | |
| `enableFIPS` | When set to `true`, a FIPS-compliant Lambda extension layer is used. This only works if `addExtension` is `true`, and `site` is `ddog-gov.com`. Defaults to `false`. | |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Addressed!
src/env.ts
Outdated
|
||
// When set to `true`, a FIPS-compliant lambda extension layer will be used. | ||
// Only works if `addExtension` is `true` and `site` is `ddog-gov.com`. | ||
enableFIPS?: boolean; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
➕ Boolean params should follow the patter of starting with is
or has
. So this should be isFipsEnabled
or isFIPSEnabled
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
enableFIPS
follows the naming of other parameters including enableXrayTracing
, enableDDTracing
, enableASM
, enableDDLogs
, enableSourceCodeIntegration
, enableColdStartTracing
, enableProfiling
, enableStepFunctionsTracing
. Do you think we should break this pattern?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, we should slowly move to the new pattern. This is a pattern that Datadog is starting to enforce across the company. We don't want to add more to Code Quality Violation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Renamed
README.md
Outdated
@@ -66,6 +66,7 @@ To further configure your plugin, use the following custom parameters in your `s | |||
| `enableStepFunctionsTracing` | Enable automatic subscription of the Datadog Forwarder to Step Function log groups and Step Functions tracing. If no Step Function log groups are configured, then they are automatically created. Requires setting `forwarderArn`. Defaults to `false`. | | |||
| `propagateUpstreamTrace` | When set to `true`, downstream Stepfunction invocation traces merge with upstream Stepfunction invocations. Defaults to `false`. | | |||
| `redirectHandlers` | Optionally disable handler redirection if set to `false`. This should only be set to `false` when APM is fully disabled. Defaults to `true`. | | |||
| `enableFIPS` | When set to `true`, a FIPS-compliant Lambda extension layer is used. This only works if `addExtension` is `true`, and `site` is `ddog-gov.com`. Defaults to `false`. | |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We should default this prop to true
when we see that site
is ddog-gov.com
.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Addressed
What does this PR do?
Add a param
isFIPSEnabled
. If set, the extension layer used will be like:instead of
Motivation
Needed for FIPS support.
Testing Guidelines
Passed the added tests.
Additional Notes
Types of changes
Check all that apply