ci: install crowdstrike falcon

Signed-off-by: David Sánchez <[email protected]>
newrelic · Dec 20, 2023 · 5a5af6f · 5a5af6f
1 parent 2c9b9ac
commit 5a5af6f
Show file tree

Hide file tree

Showing 3 changed files with 42 additions and 1 deletion.
diff --git a/test/provision/terraform/install-requirements.yml b/test/provision/terraform/install-requirements.yml
@@ -28,12 +28,21 @@
 - hosts: all
   become: true
   gather_facts: yes
+  vars:
+    falcon_client_id: "{{ lookup('env', 'CROWDSTRIKE_CLIENT_ID') }}"
+    falcon_client_secret: "{{ lookup('env', 'CROWDSTRIKE_CLIENT_SECRET') }}"
+    falcon_customer_id: "{{ lookup('env', 'CROWDSTRIKE_CUSTOMER_ID') }}"
+    api_base_url: "https://api.laggar.gcw.crowdstrike.com"
 
   tasks:
     - name: Configure logrotate
       include_role:
         name: caos.ansible_roles.logrotate
 
+    - name: Install CrowdStrike Falcon
+      include_role:
+        name: caos.ansible_roles.install-crowdstrike-falcon
+
     - name: Configure hostname
       include_role:
         name: caos.ansible_roles.hostname

diff --git a/test/terraform/fargate/main.tf b/test/terraform/fargate/main.tf
@@ -64,6 +64,18 @@ module "otel_infra" {
         {
           "name" : "DOCKER_PASSWORD",
           "valueFrom" : "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.secret_name_docker_password}"
+        },
+        {
+          "name" : "CROWDSTRIKE_CLIENT_ID",
+          "valueFrom" : "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.crowdstrike_client_id}" 
+        },
+        {
+          "name" : "CROWDSTRIKE_CLIENT_SECRET",
+          "valueFrom" : "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.crowdstrike_client_secret}" 
+        },
+        {
+          "name" : "CROWDSTRIKE_CUSTOMER_ID",
+          "valueFrom" : "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.crowdstrike_customer_id}" 
         }
       ]
     task_custom_policies = [
@@ -85,7 +97,11 @@ module "otel_infra" {
                   "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.secret_name_api}",
                   "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.secret_name_nr_api_key}",
                   "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.secret_name_docker_username}",
-                  "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.secret_name_docker_password}"
+                  "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.secret_name_docker_password}",
+                  "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.crowdstrike_client_id}",
+                  "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.crowdstrike_client_secret}",
+                  "arn:aws:secretsmanager:${var.region}:${var.accountId}:secret:${var.crowdstrike_customer_id}" 
+
                 ]
               }
             ]

diff --git a/test/terraform/fargate/vars.tf b/test/terraform/fargate/vars.tf
@@ -64,6 +64,22 @@ variable "secret_name_docker_password" {
   default = "caos/canaries/docker-password-jAtw3v"
 }
 
+# CrowdStrike Falcon secrets
+
+variable "crowdstrike_client_id" {
+  default = "caos/canaries/crowdstrike_falcon_client_id-N7nGXx"
+}
+
+variable "crowdstrike_client_secret" {
+  default = "caos/canaries/crowdstrike_falcon_client_secret-l9EIhi"
+}
+
+variable "crowdstrike_customer_id" {
+  default = "caos/canaries/crowdstrike_falcon_customer_id-f7n7rI"
+}
+
+####
+
 variable "task_container_image" {
   default = "ghcr.io/newrelic/fargate-runner-action:latest"
 }