235 Commits
Author SHA1 Message Date
Leon Xu d21c6a73f1 doc: added BYO image for DigitalOcean
tfvalidate / list terraform addon directories (push) Waiting to run
tfvalidate.yml / terraform validate (${{ fromJson(needs.listaddons.outputs.matrix) }}) (push) Blocked by required conditions
2026-08-07 19:02:34 -07:00
Leon Xu 022e74f2f3 doc: added extreme-low-cost terraform for DigitalOcean 2026-08-07 18:59:41 -07:00
Leon Xu 5d522922ee doc: create terraform for DigitalOcean 2026-08-07 18:48:08 -07:00
Leon Xu c8b57ac68f doc: create extreme shell script 2026-08-07 18:47:04 -07:00
Leon Xu 60bd5066ef doc: added scripts and scripts for extreme low costs 2026-08-07 17:50:32 -07:00
Leon Xu e123c1895a doc: added extreme low cost configuration 2026-08-07 17:49:56 -07:00
Leon Xu 38831afc99 doc: added multile different terraform varables 2026-08-06 19:43:15 -07:00
Leon Xu f53e4b1d8e docs: added optimized and ultra scripts 2026-08-06 19:42:28 -07:00
Leon Xu 514f009c76 doc: move all the docs into the docs directory 2026-08-06 19:41:45 -07:00
Leon Xu 43e8f8cae9 doc: added docs 2026-08-06 19:40:43 -07:00
Leon Xu 00048c0a12 Merge branch 'main' into main 2026-08-06 19:01:58 -07:00
Leon Xu 7bd1776d7e doc: update gitignore file 2026-08-06 19:00:18 -07:00
Luke Heath 2f09a68085 Bump Fleet version to v4.90.0 (#273) 2026-08-05 21:09:57 -05:00
Robert Fairburn 97954e1551 Initial blue-green cutover for rds aurora (#266) 2026-07-23 10:23:52 -05:00
Jorge Falcon 1ce4979133 Document Restore/Rollback Process and Tooling for Fleet deploy on AWS (#236)
- Adds `tools/rds-db-restore/README.md` - Documentation for the restore
process.
- Adds `tools/rds-db-restore/db-restore.sh` - Script to restore and
rollback Fleet to an earlier state.
2026-07-21 12:02:49 -04:00
Leon Xu b2e4f9b4e8 docs: add Fleet Terraform to AWS CDK transformation design spec 2026-07-16 18:21:02 -07:00
George Karr 2837d1621f bumping version (#270) 2026-07-16 12:02:40 -07:00
Luke Heath 5c22e0388a Bump Fleet version to v4.89.0 (#269) 2026-07-15 12:07:17 -07:00
Robert Fairburn 35ad999822 S3 bucket tagging (#268) 2026-07-15 07:45:23 -05:00
Robert Fairburn d2cae029db Improve validdate (#267) 2026-07-15 00:37:35 -05:00
Leon Xu bd235f0ee6 Optimize default resource sizing for cost efficiency
- RDS: reduce replicas 2→1, monitoring_interval 10s→60s
- Redis: cluster_size 3→2, instance_type cache.m5.large→cache.t4g.small
- ECS: Fargate 50/50 FARGATE/SPOT split, disable Container Insights
- ECS log retention: 90→30 days
- Add dev.tfvars.example for aggressive dev/staging savings
2026-07-14 20:00:18 -07:00
George Karr c09d3aa68c bumping version (#265) 2026-07-10 18:33:56 -05:00
Robert Fairburn a4813b4242 Cloudfront blue green (#263) 2026-07-10 02:41:57 -05:00
George Karr f4a67ec750 bumping version (#259) 2026-07-07 13:09:32 -05:00
Robert Fairburn 151b7f745c Monitoring 1.14.0 docs (#255) 2026-07-05 09:39:19 -05:00
George Karr 60436c5569 bumping version (#258) 2026-07-01 10:05:51 -05:00
Robert Fairburn b099b04e08 tf-mod-addon-migrations-v2.3.0 examples (#257) 2026-06-22 07:56:28 -05:00
Robert Fairburn 02a5a25e61 Make migration timeouts configurable (#253) 2026-06-22 07:22:13 -05:00
Luke Heath 4e16c99b1c Bump Fleet version to 4.87.0 (#256) 2026-06-19 18:21:04 -07:00
Robert Fairburn ba70e93f65 Add alerting thresholds to monitoring. (#254) 2026-06-19 12:17:55 -05:00
Jorge Falcon 98cd54a428 Increase soft and hard ulimits for osquery-perf (#252) 2026-06-12 10:58:33 -04:00
Jorge Falcon 40751d25c3 Updating documentation and examples (#251) 2026-06-09 10:08:51 -04:00
Jorge Falcon 7b381e0bbb Enforce DENY non-HTTPS requests to s3 buckets (#250)
- Enforces access over HTTPS to all Fleet-terraform created buckets.
- Fixes vpc-flow-logs log retention; now allows configuring the
retention in days.
2026-06-08 18:37:48 -04:00
Jorge Falcon a276eb6a98 Updating Fleet terraform examples (#249) 2026-06-05 15:02:17 -04:00
Jorge Falcon b6bf32755b Support for managing default ACLs (#248) 2026-06-05 14:37:13 -04:00
George Karr 802881fcf2 bumping version (#247) 2026-06-03 11:55:14 -05:00
Luke Heath 3b21e8d9fa Bump Fleet version references to v4.86.0 (#246) 2026-05-29 18:37:50 -05:00
George Karr 716d24be0e bumping version (#237) 2026-05-27 10:42:39 -05:00
Robert Fairburn 70e1e1b800 Examples db fix (#241) 2026-05-26 14:56:16 -05:00
Robert Fairburn b4f2ffbf98 Support custom database user and database names properly (#240) 2026-05-26 14:23:56 -05:00
Robert Fairburn 1bfc9a14be update tagged module versions to latest (#239) 2026-05-26 10:35:09 -05:00
Robert Fairburn 95ead0f16d Govcloud partition refactor (#235) 2026-05-26 05:18:51 -05:00
Luke Heath 4763e68d85 Bump Fleet version references to v4.85.0 (#233) 2026-05-14 10:40:08 -05:00
George Karr 653ad24c5c bumping version (#232) 2026-05-07 14:01:00 -05:00
Jorge Falcon 10aebc2b8a Example and README updates (#224)
Example Updates:
- `../example/main.tf`

README Updates:
- `byo-cloudwatch-log-sharing/target-account-firehose/.header.md`
- `byo-cloudwatch-log-sharing/target-account-firehose/README.md`
- `byo-file-carving/target-account/README.md`
- `byo-firehose-logging-destination/target-account/README.md`
- `logging-destination-datadog/.header.md`
- `logging-destination-datadog/README.md`
- `logging-destination-firehose/README.md`
- `logging-destination-snowflake/.header.md`
- `logging-destination-snowflake/README.md`
- `logging-destination-splunk/.header.md`
- `logging-destination-splunk/README.md`
- `okta-conditional-access/.header.md`
- `okta-conditional-access/README.md`
- `osquery-carve/README.md`
- `../byo-vpc/example/README.md`
- `../byo-vpc/example/main.tf`
- `../example/README.md`
2026-05-05 13:01:21 -04:00
George Karr 44bd43b643 bumping version (#230) 2026-04-30 23:43:43 -05:00
Robert Fairburn 2924052a86 Fix typos in monitoring module (#227) 2026-04-29 08:20:24 -05:00
Luke Heath e92fccffcb Bump Fleet to v4.84.0 (#226) 2026-04-24 20:45:43 -05:00
George Karr 3455439b15 bumping version (#222) 2026-04-21 13:32:29 -05:00
Jorge Falcon 1aabfc3316 Fix resource iam_role_name length limitations in logging-alb module (#221)
- Adds `var.enable_reencrypt_sweep` to control when lambda functions and
permission resources should be created.
- Adds `var.iam_role_name_prefix` to allow overriding the prefix used
for iam_role naming, when `var.enable_reencrypt_sweep = true`
2026-04-10 09:46:55 -04:00