bridgecrewio · DorZion51 · Jul 4, 2024 · Jul 15, 2024 · Jul 15, 2024 · Jul 15, 2024
diff --git a/terraform/aws/eks.tf b/terraform/aws/eks.tf
@@ -1,149 +1 @@
-locals {
-  eks_name = {
-    value = "${local.resource_prefix.value}-eks"
-  }
-}
 
-data aws_iam_policy_document "iam_policy_eks" {
-  statement {
-    effect  = "Allow"
-    actions = ["sts:AssumeRole"]
-    principals {
-      type        = "Service"
-      identifiers = ["eks.amazonaws.com"]
-    }
-  }
-}
-
-
-resource aws_iam_role "iam_for_eks" {
-  name               = "${local.resource_prefix.value}-iam-for-eks"
-  assume_role_policy = data.aws_iam_policy_document.iam_policy_eks.json
-  tags = {
-    git_commit           = "d68d2897add9bc2203a5ed0632a5cdd8ff8cefb0"
-    git_file             = "terraform/aws/eks.tf"
-    git_last_modified_at = "2020-06-16 14:46:24"
-    git_last_modified_by = "[email protected]"
-    git_modifiers        = "nimrodkor"
-    git_org              = "bridgecrewio"
-    git_repo             = "terragoat"
-    yor_trace            = "de052596-21a0-43de-8153-469add277b18"
-  }
-}
-
-resource aws_iam_role_policy_attachment "policy_attachment-AmazonEKSClusterPolicy" {
-  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy"
-  role       = aws_iam_role.iam_for_eks.name
-}
-
-resource aws_iam_role_policy_attachment "policy_attachment-AmazonEKSServicePolicy" {
-  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSServicePolicy"
-  role       = aws_iam_role.iam_for_eks.name
-}
-
-resource aws_vpc "eks_vpc" {
-  cidr_block           = "10.10.0.0/16"
-  enable_dns_hostnames = true
-  enable_dns_support   = true
-  tags = merge({
-    Name = "${local.resource_prefix.value}-eks-vpc"
-    }, {
-    git_commit           = "d68d2897add9bc2203a5ed0632a5cdd8ff8cefb0"
-    git_file             = "terraform/aws/eks.tf"
-    git_last_modified_at = "2020-06-16 14:46:24"
-    git_last_modified_by = "[email protected]"
-    git_modifiers        = "nimrodkor"
-    git_org              = "bridgecrewio"
-    git_repo             = "terragoat"
-    yor_trace            = "1600ca6c-72f6-45c0-a71d-88e117e51d6b"
-  })
-}
-
-resource aws_subnet "eks_subnet1" {
-  vpc_id                  = aws_vpc.eks_vpc.id
-  cidr_block              = "10.10.10.0/24"
-  availability_zone       = "${var.region}a"
-  map_public_ip_on_launch = true
-  tags = merge({
-    Name                                            = "${local.resource_prefix.value}-eks-subnet"
-    "kubernetes.io/cluster/${local.eks_name.value}" = "shared"
-    }, {
-    git_commit                                       = "6e62522d2ab8f63740e53752b84a6e99cd65696a"
-    git_file                                         = "terraform/aws/eks.tf"
-    git_last_modified_at                             = "2021-05-02 11:16:31"
-    git_last_modified_by                             = "[email protected]"
-    git_modifiers                                    = "nimrodkor"
-    git_org                                          = "bridgecrewio"
-    git_repo                                         = "terragoat"
-    "kubernetes.io/cluster/$${local.eks_name.value}" = "shared"
-    yor_trace                                        = "1fb4fa23-a5d6-4d6a-b7dc-88749383f48d"
-    }, {
-    "kubernetes.io/cluster/$$${local.eks_name.value}" = "shared"
-    "kubernetes.io/cluster/$${local.eks_name.value}"  = "shared"
-    }, {
-    "kubernetes.io/cluster/$$$${local.eks_name.value}" = "shared"
-    "kubernetes.io/cluster/$$${local.eks_name.value}"  = "shared"
-    "kubernetes.io/cluster/$${local.eks_name.value}"   = "shared"
-  })
-}
-
-resource aws_subnet "eks_subnet2" {
-  vpc_id                  = aws_vpc.eks_vpc.id
-  cidr_block              = "10.10.11.0/24"
-  availability_zone       = "${var.region}b"
-  map_public_ip_on_launch = true
-  tags = merge({
-    Name                                            = "${local.resource_prefix.value}-eks-subnet2"
-    "kubernetes.io/cluster/${local.eks_name.value}" = "shared"
-    }, {
-    git_commit                                       = "6e62522d2ab8f63740e53752b84a6e99cd65696a"
-    git_file                                         = "terraform/aws/eks.tf"
-    git_last_modified_at                             = "2021-05-02 11:16:31"
-    git_last_modified_by                             = "[email protected]"
-    git_modifiers                                    = "nimrodkor"
-    git_org                                          = "bridgecrewio"
-    git_repo                                         = "terragoat"
-    "kubernetes.io/cluster/$${local.eks_name.value}" = "shared"
-    yor_trace                                        = "9ce04af2-5321-4e6c-a262-e4d7c1f69525"
-    }, {
-    "kubernetes.io/cluster/$$${local.eks_name.value}" = "shared"
-    "kubernetes.io/cluster/$${local.eks_name.value}"  = "shared"
-    }, {
-    "kubernetes.io/cluster/$$$${local.eks_name.value}" = "shared"
-    "kubernetes.io/cluster/$$${local.eks_name.value}"  = "shared"
-    "kubernetes.io/cluster/$${local.eks_name.value}"   = "shared"
-  })
-}
-
-resource aws_eks_cluster "eks_cluster" {
-  name     = local.eks_name.value
-  role_arn = "${aws_iam_role.iam_for_eks.arn}"
-
-  vpc_config {
-    endpoint_private_access = true
-    subnet_ids              = ["${aws_subnet.eks_subnet1.id}", "${aws_subnet.eks_subnet2.id}"]
-  }
-
-  depends_on = [
-    "aws_iam_role_policy_attachment.policy_attachment-AmazonEKSClusterPolicy",
-    "aws_iam_role_policy_attachment.policy_attachment-AmazonEKSServicePolicy",
-  ]
-  tags = {
-    git_commit           = "d68d2897add9bc2203a5ed0632a5cdd8ff8cefb0"
-    git_file             = "terraform/aws/eks.tf"
-    git_last_modified_at = "2020-06-16 14:46:24"
-    git_last_modified_by = "[email protected]"
-    git_modifiers        = "nimrodkor"
-    git_org              = "bridgecrewio"
-    git_repo             = "terragoat"
-    yor_trace            = "7fa14261-c18d-4fa2-aec4-746f6e64d2d3"
-  }
-}
-
-output "endpoint" {
-  value = "${aws_eks_cluster.eks_cluster.endpoint}"
-}
-
-output "kubeconfig-certificate-authority-data" {
-  value = "${aws_eks_cluster.eks_cluster.certificate_authority.0.data}"
-}
diff --git a/terraform/aws/providers.tf b/terraform/aws/providers.tf
@@ -7,7 +7,6 @@ provider "aws" {
 provider "aws" {
   alias      = "plain_text_access_keys_provider"
   region     = "us-west-1"
-  access_key = "AKIAIOSFODNN7EXAMPLE"
   secret_key = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
 }
 

diff --git a/terraform/azure/aks.tf b/terraform/azure/aks.tf
@@ -15,9 +15,6 @@ resource azurerm_kubernetes_cluster "k8s_cluster" {
     oms_agent {
       enabled = false
     }
-    kube_dashboard {
-      enabled = true
-    }
   }
   role_based_access_control {
     enabled = false
@@ -32,4 +29,4 @@ resource azurerm_kubernetes_cluster "k8s_cluster" {
     git_repo             = "terragoat"
     yor_trace            = "6103d111-864e-42e5-899c-1864de281fd1"
   }
-}
+}
diff --git a/terraform/gcp/big_data.tf b/terraform/gcp/big_data.tf
@@ -21,17 +21,8 @@ resource "google_sql_database_instance" "master_instance" {
 resource "google_bigquery_dataset" "dataset" {
   dataset_id = "terragoat_${var.environment}_dataset"
   access {
-    special_group = "allAuthenticatedUsers"
-    role          = "READER"
-  }
-  labels = {
-    git_commit           = "2bdc0871a5f4505be58244029cc6485d45d7bb8e"
-    git_file             = "terraform__gcp__big_data_tf"
-    git_last_modified_at = "2022-01-19-17-02-27"
-    git_last_modified_by = "jameswoolfenden"
-    git_modifiers        = "jameswoolfenden__nimrodkor"
-    git_org              = "bridgecrewio"
+resource "google_bigquery_dataset" "dataset" {
     git_repo             = "terragoat"
     yor_trace            = "2560d883-bc3a-4cb6-b9fc-fb666edf626e"
   }
-}
+}
diff --git a/terraform/gcp/instances.tf b/terraform/gcp/instances.tf
@@ -18,8 +18,6 @@ resource "google_compute_instance" "server" {
 
   metadata = {
     block-project-ssh-keys = false
-    enable-oslogin         = false
-    serial-port-enable     = true
   }
   labels = {
     git_commit           = "2bdc0871a5f4505be58244029cc6485d45d7bb8e"
@@ -45,4 +43,4 @@ resource "google_compute_disk" "unencrypted_disk" {
     git_repo             = "terragoat"
     yor_trace            = "bf87b7d7-a9d8-4f03-a0d4-8a4cbb647d03"
   }
-}
+}
diff --git a/yarn.lock b/yarn.lock
@@ -0,0 +1,52 @@
+mixin-deep@^1.2.0:
+  version "1.3.2"
+  resolved "https://registry.yarnpkg.com/mixin-deep/-/mixin-deep-1.3.2.tgz#1120b43dc359a785dce65b55b82e257ccf479566"
+  integrity sha512-WRoDn//mXBiJ1H40rqa3vH0toePwSsGb45iInWlTySa+Uu4k3tYUSxa2v1KqAiLtvlrSzaExqS1gtk96A9zvEA==
+  dependencies:
+    for-in "^1.0.2"
+    is-extendable "^1.0.1"
+
+[email protected]:
+  version "0.3.0"
+  resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.3.0.tgz#1bbf5ab1ba827af23575143490426455f481fe1e"
+  integrity sha512-OHsdUcVAQ6pOtg5JYWpCBo9W/GySVuwvP9hueRMW7UqshC0tbfzLv8wjySTPm3tfUZ/21CE9E1pJagOA91Pxew==
+
+[email protected]:
+  version "0.5.1"
+  resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.1.tgz#30057438eac6cf7f8c4767f38648d6697d75c903"
+  integrity sha512-SknJC52obPfGQPnjIkXbmA6+5H15E+fR+E4iR2oQ3zzCLbd7/ONua69R/Gw7AgkTLsRG+r5fzksYwWe1AgTyWA==
+  dependencies:
+    minimist "0.0.8"
+
+[email protected], "mkdirp@>=0.5 0", mkdirp@^0.5.0, mkdirp@^0.5.1, mkdirp@~0.5.0, mkdirp@~0.5.1:
+  version "0.5.6"
+  resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.6.tgz#7def03d2432dcae4ba1d611445c48396062255f6"
+  integrity sha512-FP+p8RB8OWpF3YZBCrP5gtADmtXApB5AMLn+vdyA+PyxCjrCs00mjyUozssO33cwDeT3wNGdLxJ5M//YqtHAJw==
+  dependencies:
+    minimist "^1.2.6"
+
+mkdirp@~1.0.4:
+  version "1.0.4"
+  resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-1.0.4.tgz#3eb5ed62622756d79a5f0e2a221dfebad75c2f7e"
+  integrity sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==
+
+mocha@^2.4.5:
+  version "2.5.3"
+  resolved "https://registry.yarnpkg.com/mocha/-/mocha-2.5.3.tgz#161be5bdeb496771eb9b35745050b622b5aefc58"
+  integrity sha512-jNt2iEk9FPmZLzL+sm4FNyOIDYXf2wUU6L4Cc8OIKK/kzgMHKPi4YhTZqG4bW4kQVdIv6wutDybRhXfdnujA1Q==
+  dependencies:
+    commander "2.3.0"
+    debug "2.2.0"
+    diff "1.4.0"
+    escape-string-regexp "1.0.2"
+    glob "3.2.11"
+    growl "1.9.2"
+    jade "0.26.3"
+    mkdirp "0.5.1"
+    supports-color "1.2.0"
+    to-iso-string "0.0.2"
+
+[email protected]:
+  version "2.24.0"
+  resolved "https://registry.yarnpkg.com/moment/-/moment-2.24.0.tgz#0d055d53f5052aa653c9f6eb68bb5d12bf5c2b5b"
+  integrity sha512-bV7f+6l2QigeBBZSM/6yTNq4P2fNpSWj/0e7jQcy87A8e7o2nAfP/34/2ky5Vw4B9S446EtIhodAzkFCcR4dQg==