kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Improve context support in vpc-sc module and stage / new FAST stages small fixes (#3305)

Browse Source 
* improve context support in vpc-sc module and stage

* fix stage env files

* fix stage env files

* fix FAST variables comments

* tfdoc

* fix locations order

* fix tests
This commit is contained in:
Ludovico Magnocavallo
2025-09-07 14:59:46 +02:00
committed by GitHub
parent 894a0f5975
commit 68955ff809
39 changed files with 202 additions and 141 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
fast/stages/3-secops-dev/README.md
View File

@@ -135,9 +135,9 @@ Please be aware the Service Account Client ID needed during domain wide delegati
| name | description | type | required | default | producer |
|---|---|:---:|:---:|:---:|:---:|
| [automation](variables-fast.tf#L17) | Automation resources created by the bootstrap stage. | <code title="object&#40;&#123;&#10; outputs_bucket &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ | | <code>0-bootstrap</code> |
| [automation](variables-fast.tf#L17) | Automation resources created by the bootstrap stage. | <code title="object&#40;&#123;&#10; outputs_bucket &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ | | <code>0-org-setup</code> |
| [tenant_config](variables.tf#L118) | SecOps Tenant configuration. | <code title="object&#40;&#123;&#10; customer_id &#61; string&#10; region &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ | | |
| [billing_account](variables-fast.tf#L26) | Billing account id. If billing account is not part of the same org set `is_org_level` to false. | <code title="object&#40;&#123;&#10; id &#61; optional&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | | <code>&#123;&#125;</code> | <code>0-bootstrap</code> |
| [billing_account](variables-fast.tf#L26) | Billing account id. If billing account is not part of the same org set `is_org_level` to false. | <code title="object&#40;&#123;&#10; id &#61; optional&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | | <code>&#123;&#125;</code> | <code>0-org-setup</code> |
| [data_rbac_config](variables.tf#L17) | SecOps Data RBAC scope and labels config. | <code title="object&#40;&#123;&#10; labels &#61; optional&#40;map&#40;object&#40;&#123;&#10; description &#61; string&#10; label_id &#61; string&#10; udm_query &#61; string&#10; &#125;&#41;&#41;&#41;&#10; scopes &#61; optional&#40;map&#40;object&#40;&#123;&#10; description &#61; string&#10; scope_id &#61; string&#10; allowed_data_access_labels &#61; optional&#40;list&#40;object&#40;&#123;&#10; data_access_label &#61; optional&#40;string&#41;&#10; log_type &#61; optional&#40;string&#41;&#10; asset_namespace &#61; optional&#40;string&#41;&#10; ingestion_label &#61; optional&#40;object&#40;&#123;&#10; ingestion_label_key &#61; string&#10; ingestion_label_value &#61; optional&#40;string&#41;&#10; &#125;&#41;&#41;&#10; &#125;&#41;&#41;, &#91;&#93;&#41;&#10; denied_data_access_labels &#61; optional&#40;list&#40;object&#40;&#123;&#10; data_access_label &#61; optional&#40;string&#41;&#10; log_type &#61; optional&#40;string&#41;&#10; asset_namespace &#61; optional&#40;string&#41;&#10; ingestion_label &#61; optional&#40;object&#40;&#123;&#10; ingestion_label_key &#61; string&#10; ingestion_label_value &#61; optional&#40;string&#41;&#10; &#125;&#41;&#41;&#10; &#125;&#41;&#41;, &#91;&#93;&#41;&#10; &#125;&#41;&#41;&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | | <code>&#123;&#125;</code> | |
| [factories_config](variables.tf#L51) | Paths to YAML config expected in 'rules' and 'reference_lists'. Path to folders containing rules definitions (yaral files) and reference lists content (txt files) for the corresponding _defs keys. | <code title="object&#40;&#123;&#10; rules &#61; optional&#40;string&#41;&#10; rules_defs &#61; optional&#40;string, &#34;data&#47;rules&#34;&#41;&#10; reference_lists &#61; optional&#40;string&#41;&#10; reference_lists_defs &#61; optional&#40;string, &#34;data&#47;reference_lists&#34;&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | | <code title="&#123;&#10; rules &#61; &#34;.&#47;data&#47;secops_rules.yaml&#34;&#10; rules_defs &#61; &#34;.&#47;data&#47;rules&#34;&#10; reference_lists &#61; &#34;.&#47;data&#47;secops_reference_lists.yaml&#34;&#10; reference_lists_defs &#61; &#34;.&#47;data&#47;reference_lists&#34;&#10;&#125;">&#123;&#8230;&#125;</code> | |
| [folder_ids](variables-fast.tf#L35) | Folder name => id mappings. | <code>map&#40;string&#41;</code> | | <code>&#123;&#125;</code> | <code>1-resman</code> |

4
fast/stages/3-secops-dev/variables-fast.tf
View File

@@ -15,7 +15,7 @@
*/
variable "automation" {
# tfdoc:variable:source 0-bootstrap
# tfdoc:variable:source 0-org-setup
description = "Automation resources created by the bootstrap stage."
type = object({
outputs_bucket = string
@@ -24,7 +24,7 @@ variable "automation" {
}
variable "billing_account" {
# tfdoc:variable:source 0-bootstrap
# tfdoc:variable:source 0-org-setup
description = "Billing account id. If billing account is not part of the same org set `is_org_level` to false."
type = object({
id = optional(string)