Security and Compliance Center Workload Protection Agent module

A module for provisioning an IBM Cloud Security and Compliance Center Workload Protection agent. The module uses sysdig-deploy charts which deploys the following components into your cluster:

• Agent
• Node Analyzer
• KSPM Collector

Overview

• terraform-ibm-scc-workload-protection-agent
• Examples
  • Basic example
  • Secure private example
• Contributing

terraform-ibm-scc-workload-protection-agent

Prerequisite

Security and Compliance Center Workload Protection Instance must be provision beforehand. Instance can be deployed with terraform-ibm-scc-workload-protection module.

Usage

module "scc_wp_agent {
    source             = "terraform-ibm-modules/scc-workload-protection-agent/ibm"
    version            = "X.X.X" # Replace "X.X.X" with a release version to lock into a specific release
    access_key         = "xxXXxxXXxXxXXXXxxXxxxXXXXxXXXXX"
    cluster_name       = "example-cluster-name"
    region             = "example-region"
    endpoint_type      = "public"
    name               = "example-name"
}

Required IAM access policies

You need the following permissions to run this module.

• Account Management
  • IAM Services
    • IBM Cloud Security and Compliance Center Workload Protection service
      • Editor platform access
  • Kubernetes service
    • Viewer platform access
    • Manager service access

Requirements

Modules

No modules.

Resources

Inputs

Outputs

Contributing

You can report issues and request features for this module in GitHub issues in the module repo. See Report an issue or request a feature.

To set up your local development environment, see Local development setup in the project documentation.