From 55d57074678f8015395861c196c441ad2a9b0d0c Mon Sep 17 00:00:00 2001 From: ivanlysiuk-sysdig Date: Thu, 21 May 2026 13:44:48 -0700 Subject: [PATCH 1/2] SSPROD-68481: deprecate dead rule resources (container/filesystem/network/process/syscall) These resources + data sources translate to ruleType values (CONTAINER / FILESYSTEM / NETWORK / PROCESS / SYSCALL) that the Sysdig backend stopped accepting when list-matching policy code was removed in SSPROD-66298 (see draios/secure-backend#55421). The backend's RuntimePolicyRule.UnmarshalJSON now rejects them with HTTP 400 "unknown ruleType: ". Repro on a fresh OnPrem stack with secure/policies main HEAD: $ curl -X POST .../api/secure/rules \ -d '{"details":{"ruleType":"CONTAINER",...}}' HTTP 400: "The field details has an unknown ruleType: CONTAINER" Same for FILESYSTEM / NETWORK / PROCESS / SYSCALL. Mark them deprecated via Schema.DeprecationMessage so users see a clear plan/apply-time warning pointing at sysdig_secure_rule_falco. Existing state plans aren't broken; new Create calls would still 400 (no way to prevent that without removing the resources entirely, which is a bigger breaking change that should land with a major version bump). Co-Authored-By: Claude Opus 4.7 (1M context) --- sysdig/data_source_sysdig_secure_rule_container.go | 3 ++- sysdig/data_source_sysdig_secure_rule_filesystem.go | 3 ++- sysdig/data_source_sysdig_secure_rule_network.go | 3 ++- sysdig/data_source_sysdig_secure_rule_process.go | 3 ++- sysdig/data_source_sysdig_secure_rule_syscall.go | 3 ++- sysdig/resource_sysdig_secure_rule_container.go | 9 +++++---- sysdig/resource_sysdig_secure_rule_filesystem.go | 9 +++++---- sysdig/resource_sysdig_secure_rule_network.go | 9 +++++---- sysdig/resource_sysdig_secure_rule_process.go | 9 +++++---- sysdig/resource_sysdig_secure_rule_syscall.go | 9 +++++---- 10 files changed, 35 insertions(+), 25 deletions(-) diff --git a/sysdig/data_source_sysdig_secure_rule_container.go b/sysdig/data_source_sysdig_secure_rule_container.go index 2d264cf3c..b6c828dd0 100644 --- a/sysdig/data_source_sysdig_secure_rule_container.go +++ b/sysdig/data_source_sysdig_secure_rule_container.go @@ -13,7 +13,8 @@ func dataSourceSysdigSecureRuleContainer() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - ReadContext: dataSourceSysdigRuleContainerRead, + DeprecationMessage: "data source sysdig_secure_rule_container is deprecated — the backend no longer returns rules of ruleType CONTAINER (removed in SSPROD-66298). Use the sysdig_secure_rule_falco data source. Tracking: SSPROD-68481.", + ReadContext: dataSourceSysdigRuleContainerRead, Timeouts: &schema.ResourceTimeout{ Read: schema.DefaultTimeout(timeout), diff --git a/sysdig/data_source_sysdig_secure_rule_filesystem.go b/sysdig/data_source_sysdig_secure_rule_filesystem.go index 7f6daec22..b2b69a27b 100644 --- a/sysdig/data_source_sysdig_secure_rule_filesystem.go +++ b/sysdig/data_source_sysdig_secure_rule_filesystem.go @@ -13,7 +13,8 @@ func dataSourceSysdigSecureRuleFilesystem() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - ReadContext: dataSourceSysdigRuleFilesystemRead, + DeprecationMessage: "data source sysdig_secure_rule_filesystem is deprecated — the backend no longer returns rules of ruleType FILESYSTEM (removed in SSPROD-66298). Use the sysdig_secure_rule_falco data source. Tracking: SSPROD-68481.", + ReadContext: dataSourceSysdigRuleFilesystemRead, Timeouts: &schema.ResourceTimeout{ Read: schema.DefaultTimeout(timeout), diff --git a/sysdig/data_source_sysdig_secure_rule_network.go b/sysdig/data_source_sysdig_secure_rule_network.go index 484b82b4f..39df46780 100644 --- a/sysdig/data_source_sysdig_secure_rule_network.go +++ b/sysdig/data_source_sysdig_secure_rule_network.go @@ -14,7 +14,8 @@ func dataSourceSysdigSecureRuleNetwork() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - ReadContext: dataSourceSysdigRuleNetworkRead, + DeprecationMessage: "data source sysdig_secure_rule_network is deprecated — the backend no longer returns rules of ruleType NETWORK (removed in SSPROD-66298). Use the sysdig_secure_rule_falco data source. Tracking: SSPROD-68481.", + ReadContext: dataSourceSysdigRuleNetworkRead, Timeouts: &schema.ResourceTimeout{ Read: schema.DefaultTimeout(timeout), diff --git a/sysdig/data_source_sysdig_secure_rule_process.go b/sysdig/data_source_sysdig_secure_rule_process.go index 1fe9ce6d6..31c204381 100644 --- a/sysdig/data_source_sysdig_secure_rule_process.go +++ b/sysdig/data_source_sysdig_secure_rule_process.go @@ -13,7 +13,8 @@ func dataSourceSysdigSecureRuleProcess() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - ReadContext: dataSourceSysdigRuleProcessRead, + DeprecationMessage: "data source sysdig_secure_rule_process is deprecated — the backend no longer returns rules of ruleType PROCESS (removed in SSPROD-66298). Use the sysdig_secure_rule_falco data source. Tracking: SSPROD-68481.", + ReadContext: dataSourceSysdigRuleProcessRead, Timeouts: &schema.ResourceTimeout{ Read: schema.DefaultTimeout(timeout), diff --git a/sysdig/data_source_sysdig_secure_rule_syscall.go b/sysdig/data_source_sysdig_secure_rule_syscall.go index cc09ebf77..76c685b98 100644 --- a/sysdig/data_source_sysdig_secure_rule_syscall.go +++ b/sysdig/data_source_sysdig_secure_rule_syscall.go @@ -13,7 +13,8 @@ func dataSourceSysdigSecureRuleSyscall() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - ReadContext: dataSourceSysdigRuleSyscallRead, + DeprecationMessage: "data source sysdig_secure_rule_syscall is deprecated — the backend no longer returns rules of ruleType SYSCALL (removed in SSPROD-66298). Use the sysdig_secure_rule_falco data source. Tracking: SSPROD-68481.", + ReadContext: dataSourceSysdigRuleSyscallRead, Timeouts: &schema.ResourceTimeout{ Read: schema.DefaultTimeout(timeout), diff --git a/sysdig/resource_sysdig_secure_rule_container.go b/sysdig/resource_sysdig_secure_rule_container.go index c3cccef93..a6eddcf70 100644 --- a/sysdig/resource_sysdig_secure_rule_container.go +++ b/sysdig/resource_sysdig_secure_rule_container.go @@ -17,10 +17,11 @@ func resourceSysdigSecureRuleContainer() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - CreateContext: resourceSysdigRuleContainerCreate, - UpdateContext: resourceSysdigRuleContainerUpdate, - ReadContext: resourceSysdigRuleContainerRead, - DeleteContext: resourceSysdigRuleContainerDelete, + DeprecationMessage: "sysdig_secure_rule_container is deprecated and no longer creates or updates against current Sysdig backends — the backend rejects ruleType CONTAINER since list-matching policy code was removed (SSPROD-66298). Migrate to sysdig_secure_rule_falco with an equivalent Falco condition. Tracking: SSPROD-68481.", + CreateContext: resourceSysdigRuleContainerCreate, + UpdateContext: resourceSysdigRuleContainerUpdate, + ReadContext: resourceSysdigRuleContainerRead, + DeleteContext: resourceSysdigRuleContainerDelete, Importer: &schema.ResourceImporter{ StateContext: schema.ImportStatePassthroughContext, }, diff --git a/sysdig/resource_sysdig_secure_rule_filesystem.go b/sysdig/resource_sysdig_secure_rule_filesystem.go index 2ba5810af..8906b8ec0 100644 --- a/sysdig/resource_sysdig_secure_rule_filesystem.go +++ b/sysdig/resource_sysdig_secure_rule_filesystem.go @@ -17,10 +17,11 @@ func resourceSysdigSecureRuleFilesystem() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - CreateContext: resourceSysdigRuleFilesystemCreate, - UpdateContext: resourceSysdigRuleFilesystemUpdate, - ReadContext: resourceSysdigRuleFilesystemRead, - DeleteContext: resourceSysdigRuleFilesystemDelete, + DeprecationMessage: "sysdig_secure_rule_filesystem is deprecated and no longer creates or updates against current Sysdig backends — the backend rejects ruleType FILESYSTEM since list-matching policy code was removed (SSPROD-66298). Migrate to sysdig_secure_rule_falco with an equivalent Falco condition. Tracking: SSPROD-68481.", + CreateContext: resourceSysdigRuleFilesystemCreate, + UpdateContext: resourceSysdigRuleFilesystemUpdate, + ReadContext: resourceSysdigRuleFilesystemRead, + DeleteContext: resourceSysdigRuleFilesystemDelete, Importer: &schema.ResourceImporter{ StateContext: schema.ImportStatePassthroughContext, }, diff --git a/sysdig/resource_sysdig_secure_rule_network.go b/sysdig/resource_sysdig_secure_rule_network.go index 8c8d95e06..ba75b7670 100644 --- a/sysdig/resource_sysdig_secure_rule_network.go +++ b/sysdig/resource_sysdig_secure_rule_network.go @@ -17,10 +17,11 @@ func resourceSysdigSecureRuleNetwork() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - CreateContext: resourceSysdigRuleNetworkCreate, - UpdateContext: resourceSysdigRuleNetworkUpdate, - ReadContext: resourceSysdigRuleNetworkRead, - DeleteContext: resourceSysdigRuleNetworkDelete, + DeprecationMessage: "sysdig_secure_rule_network is deprecated and no longer creates or updates against current Sysdig backends — the backend rejects ruleType NETWORK since list-matching policy code was removed (SSPROD-66298). Migrate to sysdig_secure_rule_falco with an equivalent Falco condition. Tracking: SSPROD-68481.", + CreateContext: resourceSysdigRuleNetworkCreate, + UpdateContext: resourceSysdigRuleNetworkUpdate, + ReadContext: resourceSysdigRuleNetworkRead, + DeleteContext: resourceSysdigRuleNetworkDelete, Importer: &schema.ResourceImporter{ StateContext: schema.ImportStatePassthroughContext, }, diff --git a/sysdig/resource_sysdig_secure_rule_process.go b/sysdig/resource_sysdig_secure_rule_process.go index ccba057f9..4ade345e4 100644 --- a/sysdig/resource_sysdig_secure_rule_process.go +++ b/sysdig/resource_sysdig_secure_rule_process.go @@ -17,10 +17,11 @@ func resourceSysdigSecureRuleProcess() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - CreateContext: resourceSysdigRuleProcessCreate, - UpdateContext: resourceSysdigRuleProcessUpdate, - ReadContext: resourceSysdigRuleProcessRead, - DeleteContext: resourceSysdigRuleProcessDelete, + DeprecationMessage: "sysdig_secure_rule_process is deprecated and no longer creates or updates against current Sysdig backends — the backend rejects ruleType PROCESS since list-matching policy code was removed (SSPROD-66298). Migrate to sysdig_secure_rule_falco with an equivalent Falco condition. Tracking: SSPROD-68481.", + CreateContext: resourceSysdigRuleProcessCreate, + UpdateContext: resourceSysdigRuleProcessUpdate, + ReadContext: resourceSysdigRuleProcessRead, + DeleteContext: resourceSysdigRuleProcessDelete, Importer: &schema.ResourceImporter{ StateContext: schema.ImportStatePassthroughContext, }, diff --git a/sysdig/resource_sysdig_secure_rule_syscall.go b/sysdig/resource_sysdig_secure_rule_syscall.go index a54e67753..2362d3e6c 100644 --- a/sysdig/resource_sysdig_secure_rule_syscall.go +++ b/sysdig/resource_sysdig_secure_rule_syscall.go @@ -16,10 +16,11 @@ func resourceSysdigSecureRuleSyscall() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - CreateContext: resourceSysdigRuleSyscallCreate, - UpdateContext: resourceSysdigRuleSyscallUpdate, - ReadContext: resourceSysdigRuleSyscallRead, - DeleteContext: resourceSysdigRuleSyscallDelete, + DeprecationMessage: "sysdig_secure_rule_syscall is deprecated and no longer creates or updates against current Sysdig backends — the backend rejects ruleType SYSCALL since list-matching policy code was removed (SSPROD-66298). Migrate to sysdig_secure_rule_falco with an equivalent Falco condition. Tracking: SSPROD-68481.", + CreateContext: resourceSysdigRuleSyscallCreate, + UpdateContext: resourceSysdigRuleSyscallUpdate, + ReadContext: resourceSysdigRuleSyscallRead, + DeleteContext: resourceSysdigRuleSyscallDelete, Importer: &schema.ResourceImporter{ StateContext: schema.ImportStatePassthroughContext, }, From 0c94daf7f78093c1ac18ed329d16e48b2f04dd1e Mon Sep 17 00:00:00 2001 From: ivanlysiuk-sysdig Date: Thu, 21 May 2026 14:27:01 -0700 Subject: [PATCH 2/2] drop internal tracker refs from deprecation messages MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Open-source repo convention — keep the user-visible warning focused on what to migrate to, not on the internal ticket that motivated the change. Co-Authored-By: Claude Opus 4.7 (1M context) --- sysdig/data_source_sysdig_secure_rule_container.go | 2 +- sysdig/data_source_sysdig_secure_rule_filesystem.go | 2 +- sysdig/data_source_sysdig_secure_rule_network.go | 2 +- sysdig/data_source_sysdig_secure_rule_process.go | 2 +- sysdig/data_source_sysdig_secure_rule_syscall.go | 2 +- sysdig/resource_sysdig_secure_rule_container.go | 2 +- sysdig/resource_sysdig_secure_rule_filesystem.go | 2 +- sysdig/resource_sysdig_secure_rule_network.go | 2 +- sysdig/resource_sysdig_secure_rule_process.go | 2 +- sysdig/resource_sysdig_secure_rule_syscall.go | 2 +- 10 files changed, 10 insertions(+), 10 deletions(-) diff --git a/sysdig/data_source_sysdig_secure_rule_container.go b/sysdig/data_source_sysdig_secure_rule_container.go index b6c828dd0..6961d2bc4 100644 --- a/sysdig/data_source_sysdig_secure_rule_container.go +++ b/sysdig/data_source_sysdig_secure_rule_container.go @@ -13,7 +13,7 @@ func dataSourceSysdigSecureRuleContainer() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - DeprecationMessage: "data source sysdig_secure_rule_container is deprecated — the backend no longer returns rules of ruleType CONTAINER (removed in SSPROD-66298). Use the sysdig_secure_rule_falco data source. Tracking: SSPROD-68481.", + DeprecationMessage: "data source sysdig_secure_rule_container is deprecated — the backend no longer returns rules of ruleType CONTAINER. Use the sysdig_secure_rule_falco data source.", ReadContext: dataSourceSysdigRuleContainerRead, Timeouts: &schema.ResourceTimeout{ diff --git a/sysdig/data_source_sysdig_secure_rule_filesystem.go b/sysdig/data_source_sysdig_secure_rule_filesystem.go index b2b69a27b..0749ee165 100644 --- a/sysdig/data_source_sysdig_secure_rule_filesystem.go +++ b/sysdig/data_source_sysdig_secure_rule_filesystem.go @@ -13,7 +13,7 @@ func dataSourceSysdigSecureRuleFilesystem() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - DeprecationMessage: "data source sysdig_secure_rule_filesystem is deprecated — the backend no longer returns rules of ruleType FILESYSTEM (removed in SSPROD-66298). Use the sysdig_secure_rule_falco data source. Tracking: SSPROD-68481.", + DeprecationMessage: "data source sysdig_secure_rule_filesystem is deprecated — the backend no longer returns rules of ruleType FILESYSTEM. Use the sysdig_secure_rule_falco data source.", ReadContext: dataSourceSysdigRuleFilesystemRead, Timeouts: &schema.ResourceTimeout{ diff --git a/sysdig/data_source_sysdig_secure_rule_network.go b/sysdig/data_source_sysdig_secure_rule_network.go index 39df46780..aa6218d5e 100644 --- a/sysdig/data_source_sysdig_secure_rule_network.go +++ b/sysdig/data_source_sysdig_secure_rule_network.go @@ -14,7 +14,7 @@ func dataSourceSysdigSecureRuleNetwork() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - DeprecationMessage: "data source sysdig_secure_rule_network is deprecated — the backend no longer returns rules of ruleType NETWORK (removed in SSPROD-66298). Use the sysdig_secure_rule_falco data source. Tracking: SSPROD-68481.", + DeprecationMessage: "data source sysdig_secure_rule_network is deprecated — the backend no longer returns rules of ruleType NETWORK. Use the sysdig_secure_rule_falco data source.", ReadContext: dataSourceSysdigRuleNetworkRead, Timeouts: &schema.ResourceTimeout{ diff --git a/sysdig/data_source_sysdig_secure_rule_process.go b/sysdig/data_source_sysdig_secure_rule_process.go index 31c204381..1912878d1 100644 --- a/sysdig/data_source_sysdig_secure_rule_process.go +++ b/sysdig/data_source_sysdig_secure_rule_process.go @@ -13,7 +13,7 @@ func dataSourceSysdigSecureRuleProcess() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - DeprecationMessage: "data source sysdig_secure_rule_process is deprecated — the backend no longer returns rules of ruleType PROCESS (removed in SSPROD-66298). Use the sysdig_secure_rule_falco data source. Tracking: SSPROD-68481.", + DeprecationMessage: "data source sysdig_secure_rule_process is deprecated — the backend no longer returns rules of ruleType PROCESS. Use the sysdig_secure_rule_falco data source.", ReadContext: dataSourceSysdigRuleProcessRead, Timeouts: &schema.ResourceTimeout{ diff --git a/sysdig/data_source_sysdig_secure_rule_syscall.go b/sysdig/data_source_sysdig_secure_rule_syscall.go index 76c685b98..856551902 100644 --- a/sysdig/data_source_sysdig_secure_rule_syscall.go +++ b/sysdig/data_source_sysdig_secure_rule_syscall.go @@ -13,7 +13,7 @@ func dataSourceSysdigSecureRuleSyscall() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - DeprecationMessage: "data source sysdig_secure_rule_syscall is deprecated — the backend no longer returns rules of ruleType SYSCALL (removed in SSPROD-66298). Use the sysdig_secure_rule_falco data source. Tracking: SSPROD-68481.", + DeprecationMessage: "data source sysdig_secure_rule_syscall is deprecated — the backend no longer returns rules of ruleType SYSCALL. Use the sysdig_secure_rule_falco data source.", ReadContext: dataSourceSysdigRuleSyscallRead, Timeouts: &schema.ResourceTimeout{ diff --git a/sysdig/resource_sysdig_secure_rule_container.go b/sysdig/resource_sysdig_secure_rule_container.go index a6eddcf70..c99f82eb9 100644 --- a/sysdig/resource_sysdig_secure_rule_container.go +++ b/sysdig/resource_sysdig_secure_rule_container.go @@ -17,7 +17,7 @@ func resourceSysdigSecureRuleContainer() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - DeprecationMessage: "sysdig_secure_rule_container is deprecated and no longer creates or updates against current Sysdig backends — the backend rejects ruleType CONTAINER since list-matching policy code was removed (SSPROD-66298). Migrate to sysdig_secure_rule_falco with an equivalent Falco condition. Tracking: SSPROD-68481.", + DeprecationMessage: "sysdig_secure_rule_container is deprecated and no longer functional against current Sysdig backends — the backend rejects ruleType CONTAINER. Migrate to sysdig_secure_rule_falco with an equivalent Falco condition.", CreateContext: resourceSysdigRuleContainerCreate, UpdateContext: resourceSysdigRuleContainerUpdate, ReadContext: resourceSysdigRuleContainerRead, diff --git a/sysdig/resource_sysdig_secure_rule_filesystem.go b/sysdig/resource_sysdig_secure_rule_filesystem.go index 8906b8ec0..610ce5996 100644 --- a/sysdig/resource_sysdig_secure_rule_filesystem.go +++ b/sysdig/resource_sysdig_secure_rule_filesystem.go @@ -17,7 +17,7 @@ func resourceSysdigSecureRuleFilesystem() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - DeprecationMessage: "sysdig_secure_rule_filesystem is deprecated and no longer creates or updates against current Sysdig backends — the backend rejects ruleType FILESYSTEM since list-matching policy code was removed (SSPROD-66298). Migrate to sysdig_secure_rule_falco with an equivalent Falco condition. Tracking: SSPROD-68481.", + DeprecationMessage: "sysdig_secure_rule_filesystem is deprecated and no longer functional against current Sysdig backends — the backend rejects ruleType FILESYSTEM. Migrate to sysdig_secure_rule_falco with an equivalent Falco condition.", CreateContext: resourceSysdigRuleFilesystemCreate, UpdateContext: resourceSysdigRuleFilesystemUpdate, ReadContext: resourceSysdigRuleFilesystemRead, diff --git a/sysdig/resource_sysdig_secure_rule_network.go b/sysdig/resource_sysdig_secure_rule_network.go index ba75b7670..bf845c716 100644 --- a/sysdig/resource_sysdig_secure_rule_network.go +++ b/sysdig/resource_sysdig_secure_rule_network.go @@ -17,7 +17,7 @@ func resourceSysdigSecureRuleNetwork() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - DeprecationMessage: "sysdig_secure_rule_network is deprecated and no longer creates or updates against current Sysdig backends — the backend rejects ruleType NETWORK since list-matching policy code was removed (SSPROD-66298). Migrate to sysdig_secure_rule_falco with an equivalent Falco condition. Tracking: SSPROD-68481.", + DeprecationMessage: "sysdig_secure_rule_network is deprecated and no longer functional against current Sysdig backends — the backend rejects ruleType NETWORK. Migrate to sysdig_secure_rule_falco with an equivalent Falco condition.", CreateContext: resourceSysdigRuleNetworkCreate, UpdateContext: resourceSysdigRuleNetworkUpdate, ReadContext: resourceSysdigRuleNetworkRead, diff --git a/sysdig/resource_sysdig_secure_rule_process.go b/sysdig/resource_sysdig_secure_rule_process.go index 4ade345e4..4b31a4857 100644 --- a/sysdig/resource_sysdig_secure_rule_process.go +++ b/sysdig/resource_sysdig_secure_rule_process.go @@ -17,7 +17,7 @@ func resourceSysdigSecureRuleProcess() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - DeprecationMessage: "sysdig_secure_rule_process is deprecated and no longer creates or updates against current Sysdig backends — the backend rejects ruleType PROCESS since list-matching policy code was removed (SSPROD-66298). Migrate to sysdig_secure_rule_falco with an equivalent Falco condition. Tracking: SSPROD-68481.", + DeprecationMessage: "sysdig_secure_rule_process is deprecated and no longer functional against current Sysdig backends — the backend rejects ruleType PROCESS. Migrate to sysdig_secure_rule_falco with an equivalent Falco condition.", CreateContext: resourceSysdigRuleProcessCreate, UpdateContext: resourceSysdigRuleProcessUpdate, ReadContext: resourceSysdigRuleProcessRead, diff --git a/sysdig/resource_sysdig_secure_rule_syscall.go b/sysdig/resource_sysdig_secure_rule_syscall.go index 2362d3e6c..a438a1980 100644 --- a/sysdig/resource_sysdig_secure_rule_syscall.go +++ b/sysdig/resource_sysdig_secure_rule_syscall.go @@ -16,7 +16,7 @@ func resourceSysdigSecureRuleSyscall() *schema.Resource { timeout := 5 * time.Minute return &schema.Resource{ - DeprecationMessage: "sysdig_secure_rule_syscall is deprecated and no longer creates or updates against current Sysdig backends — the backend rejects ruleType SYSCALL since list-matching policy code was removed (SSPROD-66298). Migrate to sysdig_secure_rule_falco with an equivalent Falco condition. Tracking: SSPROD-68481.", + DeprecationMessage: "sysdig_secure_rule_syscall is deprecated and no longer functional against current Sysdig backends — the backend rejects ruleType SYSCALL. Migrate to sysdig_secure_rule_falco with an equivalent Falco condition.", CreateContext: resourceSysdigRuleSyscallCreate, UpdateContext: resourceSysdigRuleSyscallUpdate, ReadContext: resourceSysdigRuleSyscallRead,