Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: update module inputs for da solution #53

Merged
merged 8 commits into from
Apr 16, 2024
Merged

feat: update module inputs for da solution #53

merged 8 commits into from
Apr 16, 2024

Conversation

jor2
Copy link
Member

@jor2 jor2 commented Apr 12, 2024

Description

Update module inputs in da solution to attach workload protection instance.

#23

Release required?

  • No release
  • Patch release (x.x.X)
  • Minor release (x.X.x)
  • Major release (X.x.x)
Release notes content

Update module inputs in da solution to attach workload protection instance.

Run the pipeline

If the CI pipeline doesn't run when you create the PR, the PR requires a user with GitHub collaborators access to run the pipeline.

Run the CI pipeline when the PR is ready for review and you expect tests to pass. Add a comment to the PR with the following text:

/run pipeline

Checklist for reviewers

  • If relevant, a test for the change is included or updated with this PR.
  • If relevant, documentation for the change is included or updated with this PR.

For mergers

  • Use a conventional commit message to set the release level. Follow the guidelines.
  • Include information that users need to know about the PR in the commit message. The commit message becomes part of the GitHub release notes.
  • Use the Squash and merge option.

@jor2 jor2 self-assigned this Apr 12, 2024
@jor2
Copy link
Member Author

jor2 commented Apr 12, 2024

/run pipeline

@jor2 jor2 requested a review from ocofaigh April 12, 2024 14:52
@jor2
Copy link
Member Author

jor2 commented Apr 12, 2024

/run pipeline

Copy link
Member

@ocofaigh ocofaigh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

see comments

@@ -202,6 +202,18 @@ variable "scc_instance_tags" {
default = []
}

variable "attach_wp_to_scc_instance" {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

don't expose this - if provision_scc_workload_protection is true then the DA code should automatically set attach it to the SCC instance

tests/pr_test.go Outdated
@@ -79,6 +79,8 @@ func TestInstancesInSchematics(t *testing.T) {
{Name: "scc_cos_bucket_access_tags", Value: permanentResources["accessTags"], DataType: "list(string)"},
{Name: "scc_wp_access_tags", Value: permanentResources["accessTags"], DataType: "list(string)"},
{Name: "cos_instance_access_tags", Value: permanentResources["accessTags"], DataType: "list(string)"},
{Name: "attach_wp_to_scc_instance", Value: true, DataType: "bool"},
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

remove this since we will remove the attach_wp_to_scc_instance variable

@jor2
Copy link
Member Author

jor2 commented Apr 14, 2024

/run pipeline

@jor2
Copy link
Member Author

jor2 commented Apr 14, 2024

/run pipeline

@jor2 jor2 requested a review from ocofaigh April 14, 2024 22:42
@jor2
Copy link
Member Author

jor2 commented Apr 14, 2024

tests/pr_test.go Outdated
@@ -79,6 +79,8 @@ func TestInstancesInSchematics(t *testing.T) {
{Name: "scc_cos_bucket_access_tags", Value: permanentResources["accessTags"], DataType: "list(string)"},
{Name: "scc_wp_access_tags", Value: permanentResources["accessTags"], DataType: "list(string)"},
{Name: "cos_instance_access_tags", Value: permanentResources["accessTags"], DataType: "list(string)"},
{Name: "provision_scc_workload_protection", Value: true, DataType: "bool"},
{Name: "skip_scc_wp_auth_policy", Value: false, DataType: "bool"},
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

these are the default values so no need to explicitly specify here

variable "skip_scc_wp_auth_policy" {
type = bool
default = false
description = "Set to true to skip the creation of an IAM authorization policy that permits the SCC instance created by this solution read access to the workload protection instance. Only used if `attach_wp_to_scc_instance` is set to true."
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

remove attach_wp_to_scc_instance from the description - its no an exposed variable in this DA. I guess it should be replaced by provision_scc_workload_protection

Copy link
Member

@ocofaigh ocofaigh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

see comments

@jor2
Copy link
Member Author

jor2 commented Apr 15, 2024

/run pipeline

@jor2 jor2 requested a review from ocofaigh April 15, 2024 17:42
@ocofaigh ocofaigh merged commit be22e36 into main Apr 16, 2024
2 checks passed
@ocofaigh ocofaigh deleted the wp branch April 16, 2024 09:03
@terraform-ibm-modules-ops
Copy link
Contributor

🎉 This PR is included in version 1.4.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants