Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CKV2_IBM_1 is failing even when we set loadbalancer as type private #7009

Open
Aashiq-J opened this issue Feb 12, 2025 · 0 comments
Open

CKV2_IBM_1 is failing even when we set loadbalancer as type private #7009

Aashiq-J opened this issue Feb 12, 2025 · 0 comments
Labels
checks Check additions or changes

Comments

@Aashiq-J
Copy link

Describe the issue
The check for CKV2_IBM_1 is only checking if the loadbalancer value of type is set to private. But IBM has a new type which is private_path which is also a private loadbalancer. The error is invalid.

Check: CKV2_IBM_1: "Ensure load balancer for VPC is private (disable public access)"
        FAILED for resource: module.private_path.ibm_is_lb.ppnlb
        File: /main.tf:5-13
        Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/ibm-policies/ibm-general-policies/bc-ibm-2-1

                5  | resource "ibm_is_lb" "ppnlb" {
                6  |   name           = var.nlb_name
                7  |   subnets        = [var.subnet_id]
                8  |   type           = "private_path"
                9  |   profile        = "network-private-path"
                10 |   resource_group = var.resource_group_id
                11 |   tags           = var.tags
                12 |   access_tags    = var.access_tags
                13 | }

I don't think the logic should be failing here.

Examples
Please share an example code sample (in the IaC of your choice) + the expected outcomes.

resource "ibm_is_lb" "ppnlb" {
  name     = "my-example-ppnlb"
  subnets  = [ibm_is_subnet.subnet1.id]
  profile = "network-private-path"
  type = "private_path"
}

Version (please complete the following information):

  • Checkov Version [e.g. 22]
  • 3.2.368

Additional context
Add any other context about the problem here.

@Aashiq-J Aashiq-J added the checks Check additions or changes label Feb 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
checks Check additions or changes
Projects
None yet
Development

No branches or pull requests

1 participant