Leon Xu
d21c6a73f1
doc: added BYO image for DigitalOcean
tfvalidate / list terraform addon directories (push) Waiting to run
tfvalidate.yml / terraform validate (${{ fromJson(needs.listaddons.outputs.matrix) }}) (push) Blocked by required conditions
2026-08-07 19:02:34 -07:00
Leon Xu
022e74f2f3
doc: added extreme-low-cost terraform for DigitalOcean
2026-08-07 18:59:41 -07:00
Leon Xu
5d522922ee
doc: create terraform for DigitalOcean
2026-08-07 18:48:08 -07:00
Leon Xu
c8b57ac68f
doc: create extreme shell script
2026-08-07 18:47:04 -07:00
Leon Xu
60bd5066ef
doc: added scripts and scripts for extreme low costs
2026-08-07 17:50:32 -07:00
Leon Xu
e123c1895a
doc: added extreme low cost configuration
2026-08-07 17:49:56 -07:00
Leon Xu
38831afc99
doc: added multile different terraform varables
2026-08-06 19:43:15 -07:00
Leon Xu
f53e4b1d8e
docs: added optimized and ultra scripts
2026-08-06 19:42:28 -07:00
Leon Xu
514f009c76
doc: move all the docs into the docs directory
2026-08-06 19:41:45 -07:00
Leon Xu
43e8f8cae9
doc: added docs
2026-08-06 19:40:43 -07:00
Leon Xu
00048c0a12
Merge branch 'main' into main
2026-08-06 19:01:58 -07:00
Leon Xu
7bd1776d7e
doc: update gitignore file
2026-08-06 19:00:18 -07:00
Luke Heath
2f09a68085
Bump Fleet version to v4.90.0 ( #273 )
2026-08-05 21:09:57 -05:00
Robert Fairburn
97954e1551
Initial blue-green cutover for rds aurora ( #266 )
2026-07-23 10:23:52 -05:00
Jorge Falcon
1ce4979133
Document Restore/Rollback Process and Tooling for Fleet deploy on AWS ( #236 )
...
- Adds `tools/rds-db-restore/README.md` - Documentation for the restore
process.
- Adds `tools/rds-db-restore/db-restore.sh` - Script to restore and
rollback Fleet to an earlier state.
2026-07-21 12:02:49 -04:00
Leon Xu
b2e4f9b4e8
docs: add Fleet Terraform to AWS CDK transformation design spec
2026-07-16 18:21:02 -07:00
George Karr
2837d1621f
bumping version ( #270 )
2026-07-16 12:02:40 -07:00
Luke Heath
5c22e0388a
Bump Fleet version to v4.89.0 ( #269 )
2026-07-15 12:07:17 -07:00
Robert Fairburn
35ad999822
S3 bucket tagging ( #268 )
2026-07-15 07:45:23 -05:00
Robert Fairburn
d2cae029db
Improve validdate ( #267 )
2026-07-15 00:37:35 -05:00
Leon Xu
bd235f0ee6
Optimize default resource sizing for cost efficiency
...
- RDS: reduce replicas 2→1, monitoring_interval 10s→60s
- Redis: cluster_size 3→2, instance_type cache.m5.large→cache.t4g.small
- ECS: Fargate 50/50 FARGATE/SPOT split, disable Container Insights
- ECS log retention: 90→30 days
- Add dev.tfvars.example for aggressive dev/staging savings
2026-07-14 20:00:18 -07:00
George Karr
c09d3aa68c
bumping version ( #265 )
2026-07-10 18:33:56 -05:00
Robert Fairburn
a4813b4242
Cloudfront blue green ( #263 )
2026-07-10 02:41:57 -05:00
George Karr
f4a67ec750
bumping version ( #259 )
2026-07-07 13:09:32 -05:00
Robert Fairburn
151b7f745c
Monitoring 1.14.0 docs ( #255 )
2026-07-05 09:39:19 -05:00
George Karr
60436c5569
bumping version ( #258 )
2026-07-01 10:05:51 -05:00
Robert Fairburn
b099b04e08
tf-mod-addon-migrations-v2.3.0 examples ( #257 )
2026-06-22 07:56:28 -05:00
Robert Fairburn
02a5a25e61
Make migration timeouts configurable ( #253 )
2026-06-22 07:22:13 -05:00
Luke Heath
4e16c99b1c
Bump Fleet version to 4.87.0 ( #256 )
2026-06-19 18:21:04 -07:00
Robert Fairburn
ba70e93f65
Add alerting thresholds to monitoring. ( #254 )
2026-06-19 12:17:55 -05:00
Jorge Falcon
98cd54a428
Increase soft and hard ulimits for osquery-perf ( #252 )
2026-06-12 10:58:33 -04:00
Jorge Falcon
40751d25c3
Updating documentation and examples ( #251 )
2026-06-09 10:08:51 -04:00
Jorge Falcon
7b381e0bbb
Enforce DENY non-HTTPS requests to s3 buckets ( #250 )
...
- Enforces access over HTTPS to all Fleet-terraform created buckets.
- Fixes vpc-flow-logs log retention; now allows configuring the
retention in days.
2026-06-08 18:37:48 -04:00
Jorge Falcon
a276eb6a98
Updating Fleet terraform examples ( #249 )
2026-06-05 15:02:17 -04:00
Jorge Falcon
b6bf32755b
Support for managing default ACLs ( #248 )
2026-06-05 14:37:13 -04:00
George Karr
802881fcf2
bumping version ( #247 )
2026-06-03 11:55:14 -05:00
Luke Heath
3b21e8d9fa
Bump Fleet version references to v4.86.0 ( #246 )
2026-05-29 18:37:50 -05:00
George Karr
716d24be0e
bumping version ( #237 )
2026-05-27 10:42:39 -05:00
Robert Fairburn
70e1e1b800
Examples db fix ( #241 )
2026-05-26 14:56:16 -05:00
Robert Fairburn
b4f2ffbf98
Support custom database user and database names properly ( #240 )
2026-05-26 14:23:56 -05:00
Robert Fairburn
1bfc9a14be
update tagged module versions to latest ( #239 )
2026-05-26 10:35:09 -05:00
Robert Fairburn
95ead0f16d
Govcloud partition refactor ( #235 )
2026-05-26 05:18:51 -05:00
Luke Heath
4763e68d85
Bump Fleet version references to v4.85.0 ( #233 )
2026-05-14 10:40:08 -05:00
George Karr
653ad24c5c
bumping version ( #232 )
2026-05-07 14:01:00 -05:00
Jorge Falcon
10aebc2b8a
Example and README updates ( #224 )
...
Example Updates:
- `../example/main.tf`
README Updates:
- `byo-cloudwatch-log-sharing/target-account-firehose/.header.md`
- `byo-cloudwatch-log-sharing/target-account-firehose/README.md`
- `byo-file-carving/target-account/README.md`
- `byo-firehose-logging-destination/target-account/README.md`
- `logging-destination-datadog/.header.md`
- `logging-destination-datadog/README.md`
- `logging-destination-firehose/README.md`
- `logging-destination-snowflake/.header.md`
- `logging-destination-snowflake/README.md`
- `logging-destination-splunk/.header.md`
- `logging-destination-splunk/README.md`
- `okta-conditional-access/.header.md`
- `okta-conditional-access/README.md`
- `osquery-carve/README.md`
- `../byo-vpc/example/README.md`
- `../byo-vpc/example/main.tf`
- `../example/README.md`
2026-05-05 13:01:21 -04:00
George Karr
44bd43b643
bumping version ( #230 )
2026-04-30 23:43:43 -05:00
Robert Fairburn
2924052a86
Fix typos in monitoring module ( #227 )
2026-04-29 08:20:24 -05:00
Luke Heath
e92fccffcb
Bump Fleet to v4.84.0 ( #226 )
2026-04-24 20:45:43 -05:00
George Karr
3455439b15
bumping version ( #222 )
2026-04-21 13:32:29 -05:00
Jorge Falcon
1aabfc3316
Fix resource iam_role_name length limitations in logging-alb module ( #221 )
...
- Adds `var.enable_reencrypt_sweep` to control when lambda functions and
permission resources should be created.
- Adds `var.iam_role_name_prefix` to allow overriding the prefix used
for iam_role naming, when `var.enable_reencrypt_sweep = true`
2026-04-10 09:46:55 -04:00