Skip to content

[SEC-31733] Type entity context sync secrets per integration type #3572

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
api-clients-generation-pipeline wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[SEC-31733] Type entity context sync secrets per integration type #3572

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
527 changes: 466 additions & 61 deletions .generator/schemas/v2/openapi.yaml
View file
Open in desktop

Large diffs are not rendered by default.

14 changes: 11 additions & 3 deletions examples/v2/security-monitoring/CreateSecurityMonitoringIntegrationConfig.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,11 +8,19 @@

body = DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigCreateRequest.new({
data: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigCreateData.new({
attributes: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigCreateAttributes.new({
attributes: DatadogAPIClient::V2::SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes.new({
domain: "siem-test.com",
integration_type: DatadogAPIClient::V2::SecurityMonitoringIntegrationType::GOOGLE_WORKSPACE,
integration_type: DatadogAPIClient::V2::SecurityMonitoringIntegrationTypeGoogleWorkspace::GOOGLE_WORKSPACE,
name: "My GWS Integration",
secrets: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigSecrets.new({}),
secrets: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets.new({
admin_email: "admin@example.com",
service_account_json: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount.new({
client_email: "svc@my-project.iam.gserviceaccount.com",
private_key: '-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----',
project_id: "my-project",
type: "service_account",
}),
}),
settings: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigSettings.new({}),
}),
type: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigResourceType::INTEGRATION_CONFIG,
Expand Down
14 changes: 11 additions & 3 deletions examples/v2/security-monitoring/UpdateSecurityMonitoringIntegrationConfig.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,12 +8,20 @@

body = DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigUpdateRequest.new({
data: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigUpdateData.new({
attributes: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigUpdateAttributes.new({
attributes: DatadogAPIClient::V2::SecurityMonitoringGoogleWorkspaceIntegrationConfigUpdateAttributes.new({
domain: "siem-test.com",
enabled: true,
integration_type: DatadogAPIClient::V2::SecurityMonitoringIntegrationType::GOOGLE_WORKSPACE,
integration_type: DatadogAPIClient::V2::SecurityMonitoringIntegrationTypeGoogleWorkspace::GOOGLE_WORKSPACE,
name: "My GWS Integration (renamed)",
secrets: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigSecrets.new({}),
secrets: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets.new({
admin_email: "admin@example.com",
service_account_json: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount.new({
client_email: "svc@my-project.iam.gserviceaccount.com",
private_key: '-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----',
project_id: "my-project",
type: "service_account",
}),
}),
settings: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigSettings.new({}),
}),
type: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigResourceType::INTEGRATION_CONFIG,
Expand Down
14 changes: 11 additions & 3 deletions examples/v2/security-monitoring/ValidateSecurityMonitoringIntegrationCredentials.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,18 @@

body = DatadogAPIClient::V2::SecurityMonitoringIntegrationCredentialsValidateRequest.new({
data: DatadogAPIClient::V2::SecurityMonitoringIntegrationCredentialsValidateData.new({
attributes: DatadogAPIClient::V2::SecurityMonitoringIntegrationCredentialsValidateAttributes.new({
attributes: DatadogAPIClient::V2::SecurityMonitoringGoogleWorkspaceIntegrationCredentialsValidateAttributes.new({
domain: "siem-test.com",
integration_type: DatadogAPIClient::V2::SecurityMonitoringIntegrationType::GOOGLE_WORKSPACE,
secrets: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigSecrets.new({}),
integration_type: DatadogAPIClient::V2::SecurityMonitoringIntegrationTypeGoogleWorkspace::GOOGLE_WORKSPACE,
secrets: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets.new({
admin_email: "admin@example.com",
service_account_json: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount.new({
client_email: "svc@my-project.iam.gserviceaccount.com",
private_key: '-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----',
project_id: "my-project",
type: "service_account",
}),
}),
}),
type: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigResourceType::INTEGRATION_CONFIG,
}),
Expand Down
14 changes: 7 additions & 7 deletions features/v2/security_monitoring.feature
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1024,15 +1024,15 @@ Feature: Security Monitoring
Scenario: Create an entity context sync configuration returns "Bad Request" response
Given operation "CreateSecurityMonitoringIntegrationConfig" enabled
And new "CreateSecurityMonitoringIntegrationConfig" request
And body with value {"data": {"attributes": {"domain": "siem-test.com", "integration_type": "GOOGLE_WORKSPACE", "name": "My GWS Integration", "secrets": {"admin_email": "test@example.com"}, "settings": {"setting1": "value1"}}, "type": "integration_config"}}
And body with value {"data": {"attributes": {"domain": "siem-test.com", "integration_type": "GOOGLE_WORKSPACE", "name": "My GWS Integration", "secrets": {"admin_email": "admin@example.com", "service_account_json": {"client_email": "svc@my-project.iam.gserviceaccount.com", "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----", "project_id": "my-project", "type": "service_account"}}, "settings": {"setting1": "value1"}}, "type": "integration_config"}}
When the request is sent
Then the response status is 400 Bad Request

@generated @skip @team:DataDog/cloud-siem
Scenario: Create an entity context sync configuration returns "OK" response
Given operation "CreateSecurityMonitoringIntegrationConfig" enabled
And new "CreateSecurityMonitoringIntegrationConfig" request
And body with value {"data": {"attributes": {"domain": "siem-test.com", "integration_type": "GOOGLE_WORKSPACE", "name": "My GWS Integration", "secrets": {"admin_email": "test@example.com"}, "settings": {"setting1": "value1"}}, "type": "integration_config"}}
And body with value {"data": {"attributes": {"domain": "siem-test.com", "integration_type": "GOOGLE_WORKSPACE", "name": "My GWS Integration", "secrets": {"admin_email": "admin@example.com", "service_account_json": {"client_email": "svc@my-project.iam.gserviceaccount.com", "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----", "project_id": "my-project", "type": "service_account"}}, "settings": {"setting1": "value1"}}, "type": "integration_config"}}
When the request is sent
Then the response status is 200 OK

Expand Down Expand Up @@ -3476,7 +3476,7 @@ Feature: Security Monitoring
Given operation "UpdateSecurityMonitoringIntegrationConfig" enabled
And new "UpdateSecurityMonitoringIntegrationConfig" request
And request contains "integration_config_id" parameter from "REPLACE.ME"
And body with value {"data": {"attributes": {"domain": "siem-test.com", "enabled": true, "integration_type": "GOOGLE_WORKSPACE", "name": "My GWS Integration (renamed)", "secrets": {"admin_email": "test@example.com"}, "settings": {"setting1": "value1"}}, "type": "integration_config"}}
And body with value {"data": {"attributes": {"domain": "siem-test.com", "enabled": true, "integration_type": "GOOGLE_WORKSPACE", "name": "My GWS Integration (renamed)", "secrets": {"admin_email": "admin@example.com", "service_account_json": {"client_email": "svc@my-project.iam.gserviceaccount.com", "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----", "project_id": "my-project", "type": "service_account"}}, "settings": {"setting1": "value1"}}, "type": "integration_config"}}
When the request is sent
Then the response status is 400 Bad Request

Expand All @@ -3485,7 +3485,7 @@ Feature: Security Monitoring
Given operation "UpdateSecurityMonitoringIntegrationConfig" enabled
And new "UpdateSecurityMonitoringIntegrationConfig" request
And request contains "integration_config_id" parameter from "REPLACE.ME"
And body with value {"data": {"attributes": {"domain": "siem-test.com", "enabled": true, "integration_type": "GOOGLE_WORKSPACE", "name": "My GWS Integration (renamed)", "secrets": {"admin_email": "test@example.com"}, "settings": {"setting1": "value1"}}, "type": "integration_config"}}
And body with value {"data": {"attributes": {"domain": "siem-test.com", "enabled": true, "integration_type": "GOOGLE_WORKSPACE", "name": "My GWS Integration (renamed)", "secrets": {"admin_email": "admin@example.com", "service_account_json": {"client_email": "svc@my-project.iam.gserviceaccount.com", "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----", "project_id": "my-project", "type": "service_account"}}, "settings": {"setting1": "value1"}}, "type": "integration_config"}}
When the request is sent
Then the response status is 404 Not Found

Expand All @@ -3494,7 +3494,7 @@ Feature: Security Monitoring
Given operation "UpdateSecurityMonitoringIntegrationConfig" enabled
And new "UpdateSecurityMonitoringIntegrationConfig" request
And request contains "integration_config_id" parameter from "REPLACE.ME"
And body with value {"data": {"attributes": {"domain": "siem-test.com", "enabled": true, "integration_type": "GOOGLE_WORKSPACE", "name": "My GWS Integration (renamed)", "secrets": {"admin_email": "test@example.com"}, "settings": {"setting1": "value1"}}, "type": "integration_config"}}
And body with value {"data": {"attributes": {"domain": "siem-test.com", "enabled": true, "integration_type": "GOOGLE_WORKSPACE", "name": "My GWS Integration (renamed)", "secrets": {"admin_email": "admin@example.com", "service_account_json": {"client_email": "svc@my-project.iam.gserviceaccount.com", "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----", "project_id": "my-project", "type": "service_account"}}, "settings": {"setting1": "value1"}}, "type": "integration_config"}}
When the request is sent
Then the response status is 200 OK

Expand Down Expand Up @@ -3634,14 +3634,14 @@ Feature: Security Monitoring
Scenario: Validate entity context sync credentials returns "Bad Request" response
Given operation "ValidateSecurityMonitoringIntegrationCredentials" enabled
And new "ValidateSecurityMonitoringIntegrationCredentials" request
And body with value {"data": {"attributes": {"domain": "siem-test.com", "integration_type": "GOOGLE_WORKSPACE", "secrets": {"admin_email": "test@example.com"}}, "type": "integration_config"}}
And body with value {"data": {"attributes": {"domain": "siem-test.com", "integration_type": "GOOGLE_WORKSPACE", "secrets": {"admin_email": "admin@example.com", "service_account_json": {"client_email": "svc@my-project.iam.gserviceaccount.com", "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----", "project_id": "my-project", "type": "service_account"}}}, "type": "integration_config"}}
When the request is sent
Then the response status is 400 Bad Request

@generated @skip @team:DataDog/cloud-siem
Scenario: Validate entity context sync credentials returns "OK" response
Given operation "ValidateSecurityMonitoringIntegrationCredentials" enabled
And new "ValidateSecurityMonitoringIntegrationCredentials" request
And body with value {"data": {"attributes": {"domain": "siem-test.com", "integration_type": "GOOGLE_WORKSPACE", "secrets": {"admin_email": "test@example.com"}}, "type": "integration_config"}}
And body with value {"data": {"attributes": {"domain": "siem-test.com", "integration_type": "GOOGLE_WORKSPACE", "secrets": {"admin_email": "admin@example.com", "service_account_json": {"client_email": "svc@my-project.iam.gserviceaccount.com", "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----", "project_id": "my-project", "type": "service_account"}}}, "type": "integration_config"}}
When the request is sent
Then the response status is 200 OK
25 changes: 25 additions & 0 deletions lib/datadog_api_client/inflector.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6458,6 +6458,9 @@ def overrides
"v2.security_monitoring_critical_asset_update_attributes" => "SecurityMonitoringCriticalAssetUpdateAttributes",
"v2.security_monitoring_critical_asset_update_data" => "SecurityMonitoringCriticalAssetUpdateData",
"v2.security_monitoring_critical_asset_update_request" => "SecurityMonitoringCriticalAssetUpdateRequest",
"v2.security_monitoring_crowd_strike_integration_config_create_attributes" => "SecurityMonitoringCrowdStrikeIntegrationConfigCreateAttributes",
"v2.security_monitoring_crowd_strike_integration_config_update_attributes" => "SecurityMonitoringCrowdStrikeIntegrationConfigUpdateAttributes",
"v2.security_monitoring_crowd_strike_integration_credentials_validate_attributes" => "SecurityMonitoringCrowdStrikeIntegrationCredentialsValidateAttributes",
"v2.security_monitoring_dataset_attributes_request" => "SecurityMonitoringDatasetAttributesRequest",
"v2.security_monitoring_dataset_attributes_response" => "SecurityMonitoringDatasetAttributesResponse",
"v2.security_monitoring_dataset_column" => "SecurityMonitoringDatasetColumn",
Expand Down Expand Up @@ -6494,8 +6497,14 @@ def overrides
"v2.security_monitoring_entra_id_azure_app_registrations_data" => "SecurityMonitoringEntraIdAzureAppRegistrationsData",
"v2.security_monitoring_entra_id_azure_app_registrations_resource_type" => "SecurityMonitoringEntraIdAzureAppRegistrationsResourceType",
"v2.security_monitoring_entra_id_azure_app_registrations_response" => "SecurityMonitoringEntraIdAzureAppRegistrationsResponse",
"v2.security_monitoring_entra_id_integration_config_create_attributes" => "SecurityMonitoringEntraIdIntegrationConfigCreateAttributes",
"v2.security_monitoring_entra_id_integration_config_update_attributes" => "SecurityMonitoringEntraIdIntegrationConfigUpdateAttributes",
"v2.security_monitoring_entra_id_integration_credentials_validate_attributes" => "SecurityMonitoringEntraIdIntegrationCredentialsValidateAttributes",
"v2.security_monitoring_filter" => "SecurityMonitoringFilter",
"v2.security_monitoring_filter_action" => "SecurityMonitoringFilterAction",
"v2.security_monitoring_google_workspace_integration_config_create_attributes" => "SecurityMonitoringGoogleWorkspaceIntegrationConfigCreateAttributes",
"v2.security_monitoring_google_workspace_integration_config_update_attributes" => "SecurityMonitoringGoogleWorkspaceIntegrationConfigUpdateAttributes",
"v2.security_monitoring_google_workspace_integration_credentials_validate_attributes" => "SecurityMonitoringGoogleWorkspaceIntegrationCredentialsValidateAttributes",
"v2.security_monitoring_integration_activate_attributes" => "SecurityMonitoringIntegrationActivateAttributes",
"v2.security_monitoring_integration_activate_data" => "SecurityMonitoringIntegrationActivateData",
"v2.security_monitoring_integration_activate_request" => "SecurityMonitoringIntegrationActivateRequest",
Expand All @@ -6504,9 +6513,14 @@ def overrides
"v2.security_monitoring_integration_config_create_attributes" => "SecurityMonitoringIntegrationConfigCreateAttributes",
"v2.security_monitoring_integration_config_create_data" => "SecurityMonitoringIntegrationConfigCreateData",
"v2.security_monitoring_integration_config_create_request" => "SecurityMonitoringIntegrationConfigCreateRequest",
"v2.security_monitoring_integration_config_crowd_strike_secrets" => "SecurityMonitoringIntegrationConfigCrowdStrikeSecrets",
"v2.security_monitoring_integration_config_data" => "SecurityMonitoringIntegrationConfigData",
"v2.security_monitoring_integration_config_google_workspace_secrets" => "SecurityMonitoringIntegrationConfigGoogleWorkspaceSecrets",
"v2.security_monitoring_integration_config_google_workspace_service_account" => "SecurityMonitoringIntegrationConfigGoogleWorkspaceServiceAccount",
"v2.security_monitoring_integration_config_okta_secrets" => "SecurityMonitoringIntegrationConfigOktaSecrets",
"v2.security_monitoring_integration_config_resource_type" => "SecurityMonitoringIntegrationConfigResourceType",
"v2.security_monitoring_integration_config_response" => "SecurityMonitoringIntegrationConfigResponse",
"v2.security_monitoring_integration_config_sentinel_one_secrets" => "SecurityMonitoringIntegrationConfigSentinelOneSecrets",
"v2.security_monitoring_integration_configs_response" => "SecurityMonitoringIntegrationConfigsResponse",
"v2.security_monitoring_integration_config_state" => "SecurityMonitoringIntegrationConfigState",
"v2.security_monitoring_integration_config_update_attributes" => "SecurityMonitoringIntegrationConfigUpdateAttributes",
Expand All @@ -6516,7 +6530,15 @@ def overrides
"v2.security_monitoring_integration_credentials_validate_data" => "SecurityMonitoringIntegrationCredentialsValidateData",
"v2.security_monitoring_integration_credentials_validate_request" => "SecurityMonitoringIntegrationCredentialsValidateRequest",
"v2.security_monitoring_integration_type" => "SecurityMonitoringIntegrationType",
"v2.security_monitoring_integration_type_crowd_strike" => "SecurityMonitoringIntegrationTypeCrowdStrike",
"v2.security_monitoring_integration_type_entra_id" => "SecurityMonitoringIntegrationTypeEntraId",
"v2.security_monitoring_integration_type_google_workspace" => "SecurityMonitoringIntegrationTypeGoogleWorkspace",
"v2.security_monitoring_integration_type_okta" => "SecurityMonitoringIntegrationTypeOkta",
"v2.security_monitoring_integration_type_sentinel_one" => "SecurityMonitoringIntegrationTypeSentinelOne",
"v2.security_monitoring_list_rules_response" => "SecurityMonitoringListRulesResponse",
"v2.security_monitoring_okta_integration_config_create_attributes" => "SecurityMonitoringOktaIntegrationConfigCreateAttributes",
"v2.security_monitoring_okta_integration_config_update_attributes" => "SecurityMonitoringOktaIntegrationConfigUpdateAttributes",
"v2.security_monitoring_okta_integration_credentials_validate_attributes" => "SecurityMonitoringOktaIntegrationCredentialsValidateAttributes",
"v2.security_monitoring_paginated_suppressions_response" => "SecurityMonitoringPaginatedSuppressionsResponse",
"v2.security_monitoring_reference_table" => "SecurityMonitoringReferenceTable",
"v2.security_monitoring_rule_anomaly_detection_options" => "SecurityMonitoringRuleAnomalyDetectionOptions",
Expand Down Expand Up @@ -6575,6 +6597,9 @@ def overrides
"v2.security_monitoring_rule_update_payload" => "SecurityMonitoringRuleUpdatePayload",
"v2.security_monitoring_rule_validate_payload" => "SecurityMonitoringRuleValidatePayload",
"v2.security_monitoring_scheduling_options" => "SecurityMonitoringSchedulingOptions",
"v2.security_monitoring_sentinel_one_integration_config_create_attributes" => "SecurityMonitoringSentinelOneIntegrationConfigCreateAttributes",
"v2.security_monitoring_sentinel_one_integration_config_update_attributes" => "SecurityMonitoringSentinelOneIntegrationConfigUpdateAttributes",
"v2.security_monitoring_sentinel_one_integration_credentials_validate_attributes" => "SecurityMonitoringSentinelOneIntegrationCredentialsValidateAttributes",
"v2.security_monitoring_signal" => "SecurityMonitoringSignal",
"v2.security_monitoring_signal_archive_reason" => "SecurityMonitoringSignalArchiveReason",
"v2.security_monitoring_signal_assignee_update_attributes" => "SecurityMonitoringSignalAssigneeUpdateAttributes",
Expand Down
Loading
Loading