Skip to content

Commit

Permalink
README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
simonebruzzechesse committed Nov 19, 2024
1 parent b5d4387 commit 8b61e0d
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 4 deletions.
7 changes: 7 additions & 0 deletions blueprints/secops/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,13 @@

This repository provides a collection of Terraform blueprints designed to automate the implementation of custom integrations, agents and configurations for Google Cloud Security and Operations SecOps (aka Chronicle).

## BindPlane OP Management on GKE

<a href="./bindplane-gke/" title="BindPlane OP Management console on GKE"><img src="./bindplane-gke/images/diagram.png" align="left" width="280px"></a> This [blueprint](./bindplane-gke/) is a modular and scalable solution for deployment of the BindPlane OP Management Console within a Google Kubernetes Engine (GKE) environment.

<br clear="left">


## SecOps GKE Forwarder

<a href="./secops-gke-forwarder/" title="SecOps GKE Forwarder"><img src="./secops-gke-forwarder/images/diagram.png" align="left" width="280px"></a> This [blueprint](./secops-gke-forwarder/) is a modular and scalable solution for setting up a SecOps forwarder on Google Kubernetes Engine (GKE). This forwarder is designed to handle multi-tenant data ingestion, ensuring secure and efficient log forwarding to your SecOps SIEM instances.
Expand Down
8 changes: 4 additions & 4 deletions blueprints/secops/bindplane-gke/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -59,16 +59,16 @@ Setup terraform providers in the root module to deal with kubernetes resources a

```terraform
data "google_client_config" "identity" {
count = module.chronicle-forwarder.fleet_host != null ? 1 : 0
count = module.bindplane-gke.fleet_host != null ? 1 : 0
}
provider "kubernetes" {
host = module.chronicle-forwarder.fleet_host
host = module.bindplane-gke.fleet_host
token = try(data.google_client_config.identity.0.access_token, null)
}
provider "kubectl" {
host = module.chronicle-forwarder.fleet_host
host = module.bindplane-gke.fleet_host
token = try(data.google_client_config.identity.0.access_token, null)
}
```
Expand Down Expand Up @@ -130,7 +130,7 @@ Access the management console leveraging credentials bootstrapped via terraform
```hcl
module "bindplane-gke" {
source = "./fabric/blueprints/secops/bindplane-gke"
project_id = "bindplane"
project_id = "test"
bindplane_secrets = {
user = "admin"
password = "thisisnotasecret"
Expand Down

0 comments on commit 8b61e0d

Please sign in to comment.