Terraform Provider for Sysdig

• Terraform Registry - Sysdig Provider Docs
• Blog on how to use this provider with Sysdig Secure

Contribute

• Requirements
• Develop
• Compile
• Test
• Install
• Proposing PR's
• Release

Requirements

• Terraform >= 1.0 is recommended (the provider supports > 0.12.x)
• Go > Go version specified in go.mod

All of the above (plus just, golangci-lint, goreleaser, terraform, and every other dev/CI tool) are installed via Nix: run nix develop and you get the exact same toolchain versions that CI uses, instead of whatever happens to be on your $PATH. This is why the provider is built with Nix on every dev machine and in every CI/CD workflow — same versions everywhere, no "works on my machine" drift.

Develop

First clone the source repository:

$ git clone git@github.com:draios/terraform-provider-sysdig
$ cd terraform-provider-sysdig
$ just build

If you're a rookie, check Official Terraform Provider development guides

Creating new resource / data sources

TL;DR;

• Create the resource/data source item
• Add the created item into the provider.go resource or datasource map with its wiring
• With its acceptance test
• Add its documentation page on ./website/docs/

Compile

To compile the provider, run just build. This will build the provider and put the provider binary in the $(go env GOPATH)/bin directory, which should be in your PATH.

$ just build
$ $GOPATH/bin/terraform-provider-sysdig

Tests

In order to test the provider, you can simply run just test to run unit-tests. For acceptance tests, you can run just testacc, but note that

• Sysdig Monitor and/or Secure credentials are required, check /.envrc.template
• acceptance tests rely on the creation of real infrastructure, you should execute them in an environment where you can remove the resources easily.

If you're a rookie, check Terraform acceptance test guidelines

Install (local)

To use the local provider you just built, follow the instructions to install it as a plugin. in your machine with:

$ just install

That will add the provider to the terraform plugins dir. Then just set source and version values appropriately:

provider "aws" {
  region = my_region
}

terraform {
  required_providers {
    sysdig = {
      source = "local/sysdiglabs/sysdig"
      version = "~> 3.0.0"
    }
  }
}

To uninstall the plugin:

$ just uninstall

Proposing PR's

• if it's your first time, validate you're taking into account every aspect of the ./github/pull_request_template

• on pull-requests some validations are enforced.

  • Defined in /.pre-commit-config.yaml
  • You can work on this before even pushing to remote, using prek, a drop-in pre-commit replacement (same .pre-commit-config.yaml)

• for the PR title use conventional commit format so when the branch is squashed to main branch it follows a convention

• acceptance tests are launched in Sysdig production +kubelab test environment

Release

To create a new release, create and push a new tag, and it will be released following /. github/workflows/release.yml.

• Before releasing check the diff between previous tag and master branch, to spot major changes
• For tag, use semver
• Review Released Draft Note, and make it as clear as possible.
• Notify Sysdig teams on our internal #release-announcements slack channel and optionally in #terraform-provider

Mange takk!