add disk encryption key to gcp compute disks

Signed-off-by: Ivan Milchev <[email protected]>
mondoohq · Jan 17, 2023 · f860709 · f860709
1 parent aeb0322
commit f860709
Show file tree

Hide file tree

Showing 5 changed files with 46 additions and 2 deletions.
diff --git a/resources/packs/gcp/compute.go b/resources/packs/gcp/compute.go
@@ -676,6 +676,17 @@ func (g *mqlGcpProjectComputeService) GetDisks() ([]interface{}, error) {
 						guestOsFeatures = append(guestOsFeatures, entry.Type)
 					}
 
+					var mqlDiskEnc map[string]interface{}
+					if disk.DiskEncryptionKey != nil {
+						mqlDiskEnc = map[string]interface{}{
+							"kmsKeyName":           disk.DiskEncryptionKey.KmsKeyName,
+							"kmsKeyServiceAccount": disk.DiskEncryptionKey.KmsKeyServiceAccount,
+							"rawKey":               disk.DiskEncryptionKey.RawKey,
+							"rsaEncryptedKey":      disk.DiskEncryptionKey.RsaEncryptedKey,
+							"sha256":               disk.DiskEncryptionKey.Sha256,
+						}
+					}
+
 					mqlDisk, err := g.MotorRuntime.CreateResource("gcp.project.computeService.disk",
 						"id", strconv.FormatUint(disk.Id, 10),
 						"name", disk.Name,
@@ -701,6 +712,7 @@ func (g *mqlGcpProjectComputeService) GetDisks() ([]interface{}, error) {
 						"status", disk.Status,
 						"zone", zone,
 						"created", parseTime(disk.CreationTimestamp),
+						"diskEncryptionKey", mqlDiskEnc,
 					)
 					if err != nil {
 						return err

diff --git a/resources/packs/gcp/gcp.lr b/resources/packs/gcp/gcp.lr
@@ -341,6 +341,8 @@ private gcp.project.computeService.disk @defaults("name") {
   zone gcp.project.computeService.zone
   // Creation timestamp
   created time
+  // Disk encryption key
+  diskEncryptionKey dict
 }
 
 // GCP Compute Attached Disk

diff --git a/resources/packs/gcp/gcp.lr.go b/resources/packs/gcp/gcp.lr.go
diff --git a/resources/packs/gcp/info/gcp.lr.json b/resources/packs/gcp/info/gcp.lr.json
diff --git a/resources/packs/k8s/k8s.lr.go b/resources/packs/k8s/k8s.lr.go