Skip to content

Adding EKS input type to the cloud security posture integration #3619

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ofiriro3 merged 5 commits into from
Jul 4, 2022
+44 −3
Merged

Adding EKS input type to the cloud security posture integration #3619

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
7eb870d
Adding EKS input type to the cloud security posture integration
ofiriro3 Jun 29, 2022
bbd5e81
Adding version and lint the code
ofiriro3 Jun 29, 2022
00698b4
merge main
ofiriro3 Jun 29, 2022
b5d81c7
Merge branch 'main' into Add-Cloud-Security-Posture-EKS-Integration
ofiriro3 Jun 30, 2022
2c61f95
Add enabled false to integration
ofiriro3 Jul 4, 2022
File filter

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions packages/cloud_security_posture/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "0.0.18"
changes:
- description: enhance integration to support eks
type: enhancement
link: https://github.com/elastic/integrations/pull/3619
- version: "0.0.17"
changes:
- description: Refactored csp-rule-template `metadata` field to fit 8.4.0 schema
Expand Down
10 changes: 10 additions & 0 deletions packages/cloud_security_posture/data_stream/findings/agent/stream/stream.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,5 +2,15 @@ name: Findings
{{#if dataYaml}}
{{dataYaml}}
{{/if}}
{{#if access_key_id}}
access_key_id: {{access_key_id}}
{{/if}}
{{#if secret_access_key}}
secret_access_key: {{secret_access_key}}
{{/if}}
{{#if session_token}}
session_token: {{session_token}}
{{/if}}

processors:
- add_cluster_id: ~
25 changes: 24 additions & 1 deletion packages/cloud_security_posture/data_stream/findings/manifest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,29 @@
title: "Findings"
type: logs
streams:
- input: cloudbeat
- input: cloudbeat/vanilla

@ofiriro3 ofiriro3 Jun 29, 2022

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Need to verify before merging it, that the integration is part of the ELK release candidate

@ofiriro3 ofiriro3 Jun 29, 2022

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is not part of the official release but we set the integration to work only with 8.4 version so no worries regrading it

@kfirpeled kfirpeled Jun 29, 2022

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Attached here is the backward compatibility matrix as a reminder, indeed that makes that incompatible with 8.3.0 agents.

As you mentioned, this version is available from kibana.version 8.4.0 only, so no issue here.

Screen Shot 2022-01-24 at 11 48 25 (1)
title: K8s CIS Compliance
description: Check CIS Benchmark compliance
- input: cloudbeat/eks
enabled: false
title: CIS Amazon EKS Compliance
description: Check CIS Amazon Benchmark compliance
vars:
- name: access_key_id
type: text
title: Access Key ID
multi: false
required: false
show_user: true
- name: secret_access_key
type: text
title: Secret Access Key
multi: false
required: false
show_user: true
- name: session_token
type: text
title: Session Token
multi: false
required: false
show_user: true
7 changes: 5 additions & 2 deletions packages/cloud_security_posture/manifest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: 1.0.0
name: cloud_security_posture
title: "CIS Kubernetes Benchmark"
version: 0.0.17
version: 0.0.18
license: basic
description: "Check Kubernetes cluster compliance with the Kubernetes CIS benchmark."
type: integration
Expand Down Expand Up @@ -43,9 +43,12 @@ policy_templates:
description: Check Kubernetes cluster compliance with the Kubernetes CIS benchmark.
multiple: false
inputs:
- type: cloudbeat
- type: cloudbeat/vanilla
title: Enable CIS Kubernetes Benchmark
description: Collecting findings
- type: cloudbeat/eks
title: Enable Amazon EKS Benchmark
description: Collecting findings
vars:
- name: dataYaml
type: yaml
Expand Down