Skip to content

dsfkit with cm (#472)#473

Merged
sivan-hajbi-imperva merged 17 commits into
devfrom
dsfkit_with_cm_dev
Jul 14, 2025
Merged

dsfkit with cm (#472)#473
sivan-hajbi-imperva merged 17 commits into
devfrom
dsfkit_with_cm_dev

Conversation

@sivan-hajbi-imperva

Copy link
Copy Markdown
Collaborator

No description provided.

Comment thread examples/aws/poc/dsf_deployment/variables.tf
Comment thread examples/aws/poc/dsf_deployment/variables.tf Outdated
}

validation {
condition = var.ciphertrust_password == null || can(regex("[!@#$%^&*(),.?\":{}|<>]+", var.ciphertrust_password))

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The special characters here are different from what we have for DAM and DRA. Where do they come from? I don't see dash or underscore

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I took it from the other terraform, but they might be allowed, I need to check it

Comment thread modules/aws/ciphertrust/README.md Outdated
}
}

variable "ciphertrust_password" {

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why do we need a separate password variable for CM while so far we used the same password for Sonar, MX and DRA?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The CM policy password length is 8-30, for MX it's 7-14, I didn't want to reduce the max length in many chars, but if it is "just" poc example I can you the existing password, but need to increase the min length to 8.
Anyway if it is null, it used the same generated password that used to hub, dam, dra.
What do you think?

Comment thread examples/aws/poc/dsf_deployment/cm.tf Outdated
Comment thread examples/aws/poc/dsf_deployment/cm.tf Outdated
Comment thread examples/aws/poc/dsf_deployment/cm.tf
Comment thread examples/aws/poc/dsf_deployment/main.tf Outdated
workstation_cidr_24 = [format("%s.0/24", regex("\\d*\\.\\d*\\.\\d*", module.globals.my_ip))]
deployment_name_salted = join("-", [var.deployment_name, module.globals.salt])
password = var.password != null ? var.password : module.globals.random_password
ciphertrust_password = var.ciphertrust_password != null ? var.ciphertrust_password : module.globals.random_password

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

again why does ciphtertrust get to have its own password? while all the others have the same password

Comment thread examples/aws/poc/dsf_deployment/outputs.tf
Comment thread modules/aws/cte-ddc-agent/variables.tf
Comment thread modules/aws/cte-ddc-agent/variables.tf
Comment thread modules/aws/cte-ddc-agent/variables.tf
Comment thread modules/aws/cte-ddc-agent/variables.tf
Comment thread modules/aws/cte-ddc-agent/variables.tf
Comment thread examples/aws/poc/dsf_deployment/cte_ddc_agents.tf Outdated
Comment thread examples/aws/poc/dsf_deployment/cte_ddc_agents.tf
ssh_public_key_name = module.key_pair.key_pair.key_pair_name
}
os_type = each.value.os_type
attach_persistent_public_ip = true

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we can add variables later

Comment thread examples/aws/poc/dsf_deployment/cte_ddc_agents.tf
Comment thread examples/aws/poc/dsf_deployment/cte_ddc_agents.tf
Comment thread modules/aws/cte-ddc-agent/README.md
…ar version 15 only (not 4.19 or 4.18) until compability issue is resolved
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants