feat: enable RDS Sentinel forwarding in Production (#1336)

Send RDS postgresql logs that match the potentially malcious filters to Sentinel. Remove an `eks` module variable that is no longer used.
cds-snc · May 17, 2024 · 7a6a63e · 7a6a63e
1 parent d5a5470
commit 7a6a63e
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 7 deletions.
diff --git a/.github/workflows/merge_to_main_production.yml b/.github/workflows/merge_to_main_production.yml
@@ -53,7 +53,7 @@ env:
   TF_VAR_pr_bot_app_id: ${{ secrets.NOTIFY_PR_BOT_APP_ID }}
   TF_VAR_pr_bot_private_key: ${{ secrets.NOTIFY_PR_BOT_PRIVATE_KEY }}
   TF_VAR_budget_sre_bot_webhook: ${{ secrets.PRODUCTION_BUDGET_SRE_BOT_WEBHOOK }}
-  TF_VAR_enable_sentinel_forwarding: false
+  TF_VAR_enable_sentinel_forwarding: true
 
 jobs:
   terraform-apply:

diff --git a/.github/workflows/terragrunt_plan_production.yml b/.github/workflows/terragrunt_plan_production.yml
@@ -48,7 +48,7 @@ env:
   TF_VAR_pr_bot_app_id: ${{ secrets.NOTIFY_PR_BOT_APP_ID }}
   TF_VAR_pr_bot_private_key: ${{ secrets.NOTIFY_PR_BOT_PRIVATE_KEY }}
   TF_VAR_budget_sre_bot_webhook: ${{ secrets.PRODUCTION_BUDGET_SRE_BOT_WEBHOOK }}
-  TF_VAR_enable_sentinel_forwarding: false
+  TF_VAR_enable_sentinel_forwarding: true
 
 jobs:
   terragrunt-plan-production:

diff --git a/aws/eks/variables.tf b/aws/eks/variables.tf
@@ -178,11 +178,6 @@ variable "route_53_zone_arn" {
   default     = "/hostedzone/Z04028033PLSHVOO9ZJ1Z"
 }
 
-variable "enable_sentinel_forwarding" {
-  type        = bool
-  description = "Flag to enable or disable log forwarding to sentinel."
-  default     = false
-}
 variable "enable_delete_protection" {
   type        = bool
   description = "Flag to enable or disable delete protection on resources."