elastic / cloudbeat / 21215911229
76%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 231
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 75.939%. Remained the same
21215911229

push

github

web-flow 
GCP Infrastructure manager terraform for credentials json (#3835)

### Summary of your changes
Adds a new method for deploying GCP service account credentials using
GCP Infrastructure Manager (Terraform-based) as an alternative to the
existing Deployment Manager approach in deploy/deployment-manager/. The
key improvement is that service account keys are now stored securely in
Secret Manager rather than being exposed in deployment outputs. The
script creates a service account with cloudasset.viewer and browser
roles, stores the JSON key in Secret Manager, and retrieves it locally
to KEY_FILE.json for use in the Elastic Agent GCP integration. Supports
both project-level and organization-level deployments via the ORG_ID
environment variable.

### Screenshot/Data
<!--
If this PR adds a new feature, please add an example screenshot or data
(findings json for example).
-->


### Related Issues
<!--
- Related: https://github.com/elastic/security-team/issues/
- Fixes: https://github.com/elastic/security-team/issues/
-->

### Checklist
- [ ] I have added tests that prove my fix is effective or that my
feature works
- [ ] I have added the necessary README/documentation (if appropriate)

#### Introducing a new rule?

- [ ] Generate rule metadata using [this
script](https://github.com/elastic/cloudbeat/tree/main/security-policies/dev#generate-rules-metadata)
- [ ] Add relevant unit tests
- [ ] Generate relevant rule templates using [this
script](https://github.com/elastic/cloudbeat/tree/main/security-policies/dev#generate-rule-templates),
and open a PR in
[elastic/packages/cloud_security_posture](https://github.com/elastic/integrations/tree/main/packages/cloud_security_posture)

9661 of 12722 relevant lines covered (75.94%)

16.33 hits per line

Jobs
ID Job ID Ran Files Coverage
1 21215911229.1 231
75.94
 GitHub Action Run
Source Files on build 21215911229