Guardium insights Integration

fn_guardium_insights_integration/Dockerfile

@@ -0,0 +1,64 @@
+# docker build -t resilient/{ext} .
+# Base image using Red Hat's universal base image (rhel 8) for python
+FROM registry.access.redhat.com/ubi8/python-36:latest
+# rc-data-feeder will build plugins from a base image
+#FROM resilient/rc-data-feeder-base
+
+ARG APPLICATION=fn_guardium_insights_integration
+ARG RES_CIRCUITS_VERSION=41.0.1976
+
+# update to latest packages, user 0 for root privilege
+USER 0
+# Update to latest pip
+RUN pip install --upgrade pip
+
+# install resilient-circuits
+RUN pip install "resilient-circuits>=${RES_CIRCUITS_VERSION}"
+
+## ---- section for changes ----
+# uncomment and replicate if additional os libraries are needed
+#RUN yum -y update && yum clean all
+#RUN yum -y install <package>
+
+# install the base package
+COPY ./dist /tmp/packages
+RUN pip install /tmp/packages/${APPLICATION}-*.tar.gz
+
+# uncomment and replicate if additional pypi packages are needed
+RUN pip install "resilient_lib>=37.0.0"
+RUN pip install "resilient>=37.0.0"
+RUN pip install "circuits>=3.2"
+RUN pip install "six>=1.15.0"
+RUN pip install "requests>=2.25.0"
+RUN pip install "pytz>=2020.5"
+
+# uncomment and replicate if additional local packages are needed
+#COPY /path/to/extra_package /tmp/packages/.
+#RUN pip install /tmp/packages/<extra_package>*.tar.gz
+
+# uncomment to expose port only if a custom threat feed
+#EXPOSE 9000
+## ---- end section for changes ----
+
+# set up configuration and log locations using /etc and /var/log, the conventional locations for config and logs
+RUN mkdir /etc/rescircuits
+ENV APP_CONFIG_FILE /etc/rescircuits/app.config
+
+# create directory for logs and set to be root group to allow access by non root processes
+# See https://docs.openshift.com/container-platform/4.2/openshift_images/create-images.html#images-create-guide-openshift_create-images
+RUN mkdir /var/log/rescircuits && \
+    chgrp -R 0 /var/log/rescircuits && \
+    chmod -R g=u /var/log/rescircuits
+ENV APP_LOG_DIR /var/log/rescircuits
+
+# setup entrypoint for read-only enterprise data used by integration, if needed
+RUN mkdir /var/rescircuits
+
+# entrypoint for resilient-circuits.  Use /opt, the conventional location for optional software on Linux
+RUN mkdir /opt/rescircuits
+COPY entrypoint.sh /opt/rescircuits/entrypoint.sh
+# arbitrary user, support running as non-root.  Required on OpenShift.
+# Generally a good practice.
+USER 1001
+ENTRYPOINT [ "sh", "/opt/rescircuits/entrypoint.sh" ]
+

fn_guardium_insights_integration/MANIFEST.in

@@ -0,0 +1,9 @@
+include README.md
+include fn_guardium_insights_integration/util/*
+include fn_guardium_insights_integration/LICENSE
+include doc/*
+include screenshots/*
+include apikey_permissions.txt
+include Dockerfile
+include entrypoint.sh
+include icons/*