Skip to content

Commit

Permalink
fix: mqcloud is removed from default target service list and fscloud …
Browse files Browse the repository at this point in the history
…doc is updated (#495)

* fix: mqcloud is removed from default target service list as this is only supported in eu-fr2 region. fscloud doc is updated.

* fix: mqcloud is removed from default target service list as this is only supported in eu-fr2 region. fscloud doc is updated.
  • Loading branch information
Ak-sky authored Aug 7, 2024
1 parent 8ca7408 commit 5af76ee
Show file tree
Hide file tree
Showing 3 changed files with 1 addition and 14 deletions.
5 changes: 0 additions & 5 deletions examples/fscloud/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -92,11 +92,6 @@ module "cbr_account_level" {
"enforcement_mode" = "enabled"
"target_rg" = module.resource_group.resource_group_id
}
"mqcloud" : {
"enforcement_mode" = "enabled"
"region" = "eu-fr2" # region and/or instance_id is/are required for service 'mqcloud'
"global_deny" = false
}
"IAM" : {
"enforcement_mode" = "report"
"global_deny" = false
Expand Down
7 changes: 1 addition & 6 deletions modules/fscloud/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ Important: In order to avoid unexpected breakage in the account against which th

**Note on global_deny variable**: When a `scope` is specified in a rule for the target service, a new separate `global rule` will be created for the respective target service to scope `all the resources` of that service. This can be opted out by setting the variable `global_deny = false`. It is also mandatory to set `global_deny = false` when no scope is specified for the target service.

**Note on `mqcloud`**: Region and/or instance_id is/are required for service `mqcloud` to create the CBR rule.
**Note on `mqcloud`**: Region and/or instance_id is/are required for service `mqcloud` to create the CBR rule. This service is only available in eu-fr2 region.

## Note
The services 'directlink', 'globalcatalog-collection', 'iam-groups' and 'user-management' do not support restriction per location.
Expand Down Expand Up @@ -70,11 +70,6 @@ module "cbr_fscloud" {
"enforcement_mode" = "enabled"
"global_deny" = false # mandatory to set 'global_deny = false' when no scope is defined
}
"mqcloud" : {
"enforcement_mode" = "enabled"
"region" = "eu-fr2" # region and/or instance_id is/are required for service 'mqcloud'
"global_deny" = false
}
"IAM" : {
"enforcement_mode" = "report"
"global_deny" = false
Expand Down
3 changes: 0 additions & 3 deletions modules/fscloud/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -114,9 +114,6 @@ locals {
"logdnaat" : {
"enforcement_mode" : "report"
},
"mqcloud" : {
"enforcement_mode" : "disabled"
},
"sysdig-monitor" : {
"enforcement_mode" : "report"
},
Expand Down

0 comments on commit 5af76ee

Please sign in to comment.