Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 0 additions & 4 deletions .github/workflows/ci-integration-tests.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -53,8 +53,6 @@ jobs:
kubectl get deployments -n sfc-tests-kitchen-singlek8s
kubectl describe deployment cloud-connector -n sfc-tests-kitchen-singlek8s
kubectl logs deployment.apps/cloud-connector -n sfc-tests-kitchen-singlek8s
kubectl logs deployment.apps/cloud-scanning -n sfc-tests-kitchen-singlek8s


- name: Destroy single-account-k8s resources
env:
Expand Down Expand Up @@ -85,8 +83,6 @@ jobs:
kubectl get deployments -n sfc-tests-kitchen-singlek8s
kubectl describe deployment cloud-connector -n sfc-tests-kitchen-orgk8s
kubectl logs deployment.apps/cloud-connector -n sfc-tests-kitchen-orgk8s
kubectl logs deployment.apps/cloud-scanning -n sfc-tests-kitchen-orgk8s


- name: Destroy org-k8s test
env:
Expand Down
1 change: 1 addition & 0 deletions .pre-commit-config.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,7 @@ repos:
rev: v1.50.0
hooks:
- id: terraform_fmt
# - id: terraform_validate
- id: terraform_docs
args:
- '--args=--sort-by required'
Expand Down
69 changes: 0 additions & 69 deletions examples-internal/single-account-scanning/main.tf

This file was deleted.

Empty file.
58 changes: 0 additions & 58 deletions examples-internal/single-account-scanning/variables.tf

This file was deleted.

8 changes: 0 additions & 8 deletions examples-internal/single-account-scanning/versions.tf

This file was deleted.

4 changes: 2 additions & 2 deletions modules/infrastructure/permissions/ecs-org-role/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,11 +5,11 @@ The aim of this module is to manage the organizational **managed account** requi
1. Enables Cloudtrail SNS subscription permissions through a role specified within the Sysdig Secure workload **member account**
2. Creates a role in the organizational **managed account** with the required permissions

* Threat-Detection through [cloud-connector](https://github.com/sysdiglabs/terraform-aws-secure-for-cloud/tree/master/modules/services/cloud-connector).
* Threat-Detection
* S3 Get and List permissions in order to fetch the events
* SNS Subscription permissions in order to subscribe a topic to it

* Image scanning through [cloud-scanning](https://github.com/sysdiglabs/terraform-aws-secure-for-cloud/tree/master/modules/services/cloud-scanning).
* Image scanning
* Enable this role to assumeRole to member accounts through the `organizational_role_per_account` role,
in order to be able to fetch images that may be in member-account repositories

Expand Down
4 changes: 2 additions & 2 deletions modules/infrastructure/permissions/eks-org-role/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,11 +5,11 @@ The aim of this module is to manage the organizational **managed account** requi
1. Enables Cloudtrail SNS subscription permissions through a role specified within the Sysdig Secure workload **member account**
2. Creates a role in the organizational **managed account** with the required permissions

* Threat-Detection through [cloud-connector](https://github.com/sysdiglabs/terraform-aws-secure-for-cloud/tree/master/modules/services/cloud-connector).
* Threat-Detection
* S3 Get and List permissions in order to fetch the events
* SNS Subscription permissions in order to subscribe a topic to it

* Image scanning through [cloud-scanning](https://github.com/sysdiglabs/terraform-aws-secure-for-cloud/tree/master/modules/services/cloud-scanning).
* Image scanning
* Enable this role to assumeRole to member accounts through the `organizational_role_per_account` role,
in order to be able to fetch images that may be in member-account repositories

Expand Down
2 changes: 1 addition & 1 deletion modules/infrastructure/permissions/general/README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Permissions :: General

General permissions that apply to both cloud-connector and cloud-scanning modules
General permissions that apply to both threat-detection (cloud-connector) and image-scanning (cloud-scanning) features

<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
## Requirements
Expand Down
92 changes: 0 additions & 92 deletions modules/services/cloud-scanning/README.md

This file was deleted.

10 changes: 0 additions & 10 deletions modules/services/cloud-scanning/cloudwatch.tf

This file was deleted.

Loading