v1.0.0

New Major Version

Deprecation Notice

The cloud-bench submodule has been deprecated in this version of the module.

Sysdig released a new onboarding experience for GCP in November 2024. We recommend connecting your cloud accounts by following these instructions.

This repository should be used solely in cases where Agentless Threat Detection cannot be used.

What's Changed

• Create .terraform-registry by @nkraemer-sysdig in #154
• chore: remove max terraform version limit by @tembleking in #152
• Deprecate cloud-bench by @nkraemer-sysdig in #155

Full Changelog: v0.9.11...v1.0.0

v0.9.10

What's Changed

• Remove legacy benchmark task creation by @nkraemer-sysdig in #143
• support project id from subfolders in gcp org by @sameer-in in #145
• chore: adds a script to fetch all gcp projects by @sameer-in in #146

Full Changelog: v0.9.9...v0.9.10

v0.9.9

Bug Fixes

• Remove legacy benchmark task creation (#142)

  • fix: Remove legacy benchmark task creation

• Remove task submodules, fix lint errors

• Fix linting errors

• Lint fixes

---

Co-authored-by: Noah Kraemer <noah.kraemer@sysdig.com>

v0.9.7

Features

• feat(benchmark): Add an option to resuse existing workload identity pool via data by @airadier in #130

Refactor

• refactor(bench): Refactor Org WIF module to simplify variables by @nkraemer-sysdig in #137

Documentation

• add some cost notes
• troubleshooting. expand explanation on 409

Full Changelog: v0.9.6...v0.9.7

v0.9.6

Features

• Add org-level compliance setup (#128)

  Small Modifications

• Add configurable cloud connector image in example (#135)

v0.9.5

Code Refactoring

• avoid benchmark role collision with var.name (#132)

Documentation

• Prepend projectID while importing workload identity pools for troubleshooting (#131)

Maintenance

• add terrascan compliance (#127)
• add codeowners file (#126)

v0.9.4

Build

• Update cloud connector image hosted at sysdig registry (#125)

Documentation

• Add compliance under organizational troubleshooting
• 403 forbidden authentication troubleshooting
• Other minor documentation changes

v0.9.3

Full Changelog: v0.9.2...v0.9.3

Continuous Integration

• Add Makefile and move some content from pre-commit by @tembleking in #121

Documentation

• docs: update docs for gcloud cli authentication by @hayk99 in #123
• organize readme and fix registry links by @wideawakening
• update contribution manual e2e test by @wideawakening and @miketnt
• Add CODEOWNERS file by @tembleking

v0.9.2

Features

• pin down secure-api-secret location from global to specific (#120)

Bug Fixes

• fix typo in secret manager API

Documentation

• clarify region/zone

• clarify force events

• add troubleshooting gcp api services

• add troubleshooting gcp provider no region

Small Modifications

• update role permission diagram

New Contributors

• @miketnt made their first contribution in #120

v0.9.1

Full Changelog: v0.9.0...v0.9.1

Features

• Added GCP K8S scanning by @hayk99 in #112
• Add Cloud Asset permissions for CSPM by @ido-gold-apolicy in #118
  • Currently only available for CA (Controlled-Availability)

Documentation

• Use case. new org-k8s-threat-compliance by @wideawakening in #116
• Troubleshooting. Explain service account usage by @hayk99 in #115
• troubleshoot unavailable region
• troubleshoot. clarify google_beta provider usage
• troubleshoot. compliance not working

New Contributors

• @ido-gold-apolicy made their first contribution in #118