Added support for AWS CDR from onprem

scripts/.gitignore

@@ -0,0 +1 @@
+security-playground-aws-env-vars.yaml

scripts/install-cli-amd-linux.sh

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+curl -LO "https://download.sysdig.com/scanning/bin/sysdig-cli-scanner/$(curl -L -s https://download.sysdig.com/scanning/sysdig-cli-scanner/latest_version.txt)/linux/amd64/sysdig-cli-scanner"
+chmod +x ./sysdig-cli-scanner

scripts/refresh-security-playgrounds.sh

@@ -6,3 +6,4 @@ kubectl delete --all pods --namespace=security-playground-restricted-nodrift
 kubectl delete --all pods --namespace=security-playground-restricted-nomalware
 kubectl delete -f ./generated-network-policy.yml
 kubectl delete -f ./generated-network-policy2.yml
+kubectl apply -f ../k8s-manifests/04-security-playground-deployment.yaml

scripts/security-playground-aws-env-vars.yaml.orig

@@ -0,0 +1,49 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: security-playground
+  namespace: security-playground
+  labels:
+    app.kubernetes.io/name: security-playground
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: security-playground
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: security-playground
+    spec:
+      hostPID: true
+      containers:
+        - name: security-playground
+          image: public.ecr.aws/m9h2b5e7/security-playground:240324
+          ports:
+            - name: http
+              containerPort: 8080
+              protocol: TCP
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+          securityContext:
+            privileged: true
+          resources:
+            requests:
+              memory: "256Mi"
+              cpu: "250m"
+            limits:
+              memory: "512Mi"
+              cpu: "500m"
+          env:
+          - name: AWS_ACCESS_KEY_ID
+            value: ""
+          - name: AWS_SECRET_ACCESS_KEY
+            value: ""
+          - name: AWS_DEFAULT_REGION
+            value: "ap-southeast-2"

scripts/test-all-workshop-commands.sh

@@ -4,8 +4,11 @@
 ./example-curls-restricted-nodrift.sh
 ./example-curls-restricted-nomalware.sh
 #kubectl apply -f ./security-playground-irsa.yaml
+#kubectl apply -f ./security-playground-aws-env-vars.yaml
 #sleep 10
+#export S3_BUCKET_NAME=bucket
 #./example-curls-bucket-public.sh
+#export SECURE_API_TOKEN=token
 #./sysdig-cli-scanner -a app.au1.sysdig.com logstash:7.16.1
 ./example-curls-networkpolicy.sh
 kubectl apply -f ./generated-network-policy.yml