inputType: "CA10A1__CaAwsEksCluster__c"
importExtracts:
  - file: "/types/CA10A1__CaAwsEksCluster__c/object.extracts.yaml"
testData:
  - file: "test-data.json"
conditions:
  - status: "INCOMPLIANT"
    currentStateMessage: "EKS cluster control plane logging is not configured for API server logs."
    remediationMessage: "Enable API server logs in EKS control plane logging."
    check:
      CONTAINS:
        arg: 
          EXTRACT: "caSetFrom_logging__c"
        search:
          TEXT: "api: Disabled"
  - status: "INCOMPLIANT"
    currentStateMessage: "EKS cluster control plane logging is not configured for audit logs."
    remediationMessage: "Enable audit logs in EKS control plane logging."
    check:
      CONTAINS:
        arg: 
          EXTRACT: "caSetFrom_logging__c"
        search:
          TEXT: "audit: Disabled"
  - status: "INCOMPLIANT"
    currentStateMessage: "EKS cluster control plane logging is not configured for authenticator logs."
    remediationMessage: "Enable authenticator logs in EKS control plane logging."
    check:
      CONTAINS:
        arg: 
          EXTRACT: "caSetFrom_logging__c"
        search:
          TEXT: "authenticator: Disabled"
  - status: "INCOMPLIANT"
    currentStateMessage: "EKS cluster control plane logging is not configured for controller manager logs."
    remediationMessage: "Enable controller manager logs in EKS control plane logging."
    check:
      CONTAINS:
        arg: 
          EXTRACT: "caSetFrom_logging__c"
        search:
          TEXT: "controllerManager: Disabled"
  - status: "INCOMPLIANT"
    currentStateMessage: "EKS cluster control plane logging is not configured for scheduler logs."
    remediationMessage: "Enable scheduler logs in EKS control plane logging."
    check:
      CONTAINS:
        arg: 
          EXTRACT: "caSetFrom_logging__c"
        search:
          TEXT: "scheduler: Disabled"
otherwise:
  status: "COMPLIANT" 
  currentStateMessage: "EKS cluster logging is configured for all control plane log types."