Commit Graph
510 Commits
Author SHA1 Message Date
Jorge Falcon 115e00decd Configure software_installers defaults in Loadtest terraform (#41207)
- Adds software_installers {} configuration to loadtest terraform
- Modifies template/cloudfront.tf.disabled to use pkcs#8 format for the
private key
2026-03-19 20:17:54 -04:00
Victor Lyuboslavsky ecee908157 Bumping signoz resources for 100K hosts loadtest. (#41961) 2026-03-19 12:49:36 -05:00
Victor Lyuboslavsky fbc5b9d8b6 Updated go to 1.26.1 (#42027)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #41749

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
2026-03-19 07:01:00 -05:00
Luke Heath be1df61ffb Adding changes for Fleet v4.82.0 (#40233) (#41637) 2026-03-13 09:42:29 -05:00
George Karr 37c4497f61 Adding changes for Fleet v4.81.2 (#41127) 2026-03-10 10:31:48 -05:00
Robert Fairburn f13f376e47 Dogfood restore changes (#41310) 2026-03-09 20:11:27 -05:00
George KarrandIan Littman 4241585c31 Adding changes for Fleet v4.81.1 (#40705)
Co-authored-by: Ian Littman <iansltx@gmail.com>
2026-03-03 10:01:15 -06:00
Luke Heath b928ba83a4 Set env vars to enable gitops fiel name deprecation warnings (#40757) 2026-02-28 11:37:25 -06:00
Scott Gress 772fb12cf5 Add more deprecation logs and mute by default (#40305)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #40122

# Details

* Adds deprecation warnings to `fleetctl apply`
* Adds alias conflict errors (i.e. using both new and deprecated keys in
the same spec) to `fleetctl apply`
* Adds logic around all deprecated field warnings to check the topic
first
* Disables deprecation warnings by default for `fleet serve`, `fleetctl
gitops` and `fleetctl apply`
* Enables deprecation warnings for dogfood via env var

To turn on warnings:
* In `fleet serve`, use either
`--logging_enable_topics=deprecated-field-names` or the
`FLEET_LOGGING_ENABLE_TOPICS=deprecated-field-names` env var
* In `fleetctl gitops` / `fleetctl apply` use either
`--enable-log-topics=deprecated-field-names` or
`FLEET_ENABLE_LOG_TOPICS=deprecated-field-names`

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually

tested in `fleetctl apply`, `fleet serve` and `fleet gitops` that
warnings are suppressed by default and added when the appropriate env
var or CLI option is used
2026-02-23 23:09:08 -06:00
Jorge Falcon 17d8fc2ed2 Dogfood monitoring module to 1.9.0 and set mysql_tls_config = true (#40355)
- Monitoring module version updated to tf-mod-addon-monitoring-v1.9.0
- `mysql_tls_config` set to `true`
2026-02-23 19:52:04 -05:00
Luke Heath aba5efbec1 update changelog prepare 4.81.0 (#40225) (#40227) 2026-02-20 16:39:34 -06:00
Jorge Falcon 45c4e47fab Dogfood and loadtest - mysql require secure transport on (#40211)
- Adds require_secure_transport for mysql connections to the db_cluster
parameter group for dogfood and loadtest environments.

```
    db_cluster_parameters = {
      require_secure_transport = "ON"
    }
```
2026-02-20 15:57:10 -05:00
Robert Fairburn ba9d2c4c90 Add remote state for vpn configs (#40093) 2026-02-19 09:05:36 -06:00
Robert Fairburn 0f9c05577b Firehose resources were in us-east-1 (#39991) 2026-02-17 14:52:19 -06:00
Robert FairburnandJorge Falcon dac2ef18f0 Ensure terraform docker compatibility with github actions (#39988)
Co-authored-by: Jorge Falcon <22119513+BCTBB@users.noreply.github.com>
2026-02-17 15:09:50 -05:00
Robert Fairburn f9ca19dc09 Update version of geolite2 module (#39973) 2026-02-17 10:55:28 -06:00
Harrison Ravazzolo ffca20142b Enable firehose logging in Dogfood (#39954)
Reenable firehose log shipping in dogfood. Created new hoses and role in
SC account
2026-02-16 21:29:44 -08:00
Robert Fairburn 9f60dadae0 Allow gzip responses (#39700) 2026-02-12 10:24:49 -06:00
Jorge Falcon 502351dcde Add FLEET_MYSQL_READ_REPLICA_TLS_CONFIG environment variable to dogfood and loadtesting (#39692)
- Adds `FLEET_MYSQL_READ_REPLICA_TLS_CONFIG = "custom"` to dogfood and
loadtesting environments.
2026-02-11 13:05:11 -05:00
George Karr d105fc5929 Adding changes for Fleet v4.80.1 (#39486) 2026-02-10 09:32:21 -06:00
Ian Littman d4906dd3d6 Update to Go 1.25.7 (#39584)
- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
2026-02-09 17:47:51 -06:00
Luke Heath 6e9d46202e Adding changes for Fleet v4.80.0 (#38255) (#39217) 2026-02-03 08:38:20 -06:00
Victor Lyuboslavsky 0ae909fedf Updated loadtest OTEL config to match dogfood (#38991)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36494

I tried this with loadtest.
2026-01-29 10:18:02 -06:00
Ian Littman ec06952245 Bump Alpine (to 3.23.3), Go (to 1.25.6) to resolve vulns (#38973) 2026-01-28 18:51:15 -06:00
Jorge Falcon 9a8991ad64 Dogfood: Fix AWS Backup Role permissions to unblock cross-region replication (#38784)
- Adds permissions to fix/allow cross-region replication os Aurora and
S3 backups.
2026-01-26 12:59:32 -05:00
Robert Fairburn ffe6df25be Signoz action fixes (#38656) 2026-01-22 19:10:44 -06:00
Robert Fairburn e0631aff76 Dogfood signoz (#38569) 2026-01-22 12:33:27 -06:00
George Karr 68452b8a1d Adding changes for Fleet v4.79.1 (#38487) 2026-01-21 12:18:49 -06:00
Luke Heath d0fd8e06e9 update main 4.79.0 changes (#38253) 2026-01-13 14:12:17 -06:00
George Karr c2a913a4c7 Adding changes for Fleet v4.78.3 (#38201) 2026-01-13 14:01:48 -06:00
George Karr d820f800c6 Adding changes for Fleet v4.78.2 (#38150) 2026-01-10 21:24:15 -06:00
George KarrandLuke Heath dc5f1cb753 Adding changes for Fleet v4.78.1 (#37874)
Co-authored-by: Luke Heath <luke@fleetdm.com>
2026-01-06 16:54:45 -06:00
Luke Heath 8648105fe3 Adding changes for Fleet v4.78.0 (#36813) (#37584) 2025-12-19 17:25:22 -06:00
Jorge Falcon 7ac24d8752 Loadtest (new) - MDM Updates (#37420)
- Adds `FLEET_DEV_MDM_APPLE_DISABLE_PUSH = 1`
- Adds `FLEET_DEV_MDM_APPLE_DISABLE_DEVICE_INFO_CERT_VERIFY = 1`
- Updates osquery_perf/README.md, providing an example fetching and
using mdm scep challenge secret.
2025-12-17 17:55:13 -05:00
Jorge Falcon 3247b86aa0 Dogfood FLEET_SERVER_VPP_VERIFY_TIMEOUT and Inconsistent Plan Fix (#37163)
- Adds `FLEET_SERVER_VPP_VERIFY_TIMEOUT = "20m"`
- Updates `mysql_password_secret_name` to search by a string, rather
than the ID being forced by the AWS Terraform provider (v6) to Fix
inconsistent final plan errors
2025-12-12 13:00:12 -05:00
Luke Heath 70ab8c2925 Adding changes for Fleet v4.77.0 (#35382) (#36614) 2025-12-08 16:32:47 -06:00
Ian Littman 62755cbd82 Bump Go to 1.25.5, Alpine to 3.23.0 where relevant, bump Trivy to current version (#36848)
Fixes vulns reported in
https://github.com/fleetdm/fleet/actions/runs/19999992703. We'll
definitely want to at least cherry-pick this.
2025-12-07 20:04:14 -06:00
Jorge Falcon e8c3e26d60 cloudfront module update for dogfood to 1.1.0 (#36548)
- Updates dogfood cloudfront-software-installers module to 1.1.0
2025-12-01 20:08:33 -05:00
Victor Lyuboslavsky 6ab79dd5a7 Add more software to loadtest (#35756)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34677 and #35932

Adding ~450K software to the loadtest, including scripts to add more
software in the future.
Software is held in a `software.sql` file, which is used to create a
sqlite DB during osquery perf run/deployment.

# Checklist for submitter

## Testing

- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added support for loading software data from an external SQLite
database via a new `--software_db_path` command-line flag for more
realistic simulation scenarios.
* Added import and SQL generation tools to build and manage custom
software libraries.

* **Documentation**
* Added comprehensive README with setup instructions, tool usage, and
end-to-end workflow guidance for the software library.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-11-21 10:42:19 -06:00
Jorge Falcon e0be06fa76 Loadtesting - osquery deployment session timeout increase (#36097) 2025-11-20 21:08:52 -05:00
Jorge Falcon fb5c90ad9c Dogfood and loadtest module updates (#35990)
Updates `module.main` to `1.18.3` (dogfood)
- Adds `memory_tracking_target_value = 70` (dogfood and loadtesting)
- Adds `cpu_tracking_target_value = 70`  (dogfood and loadtesting)

Updates `module.migrations` to `2.2.1` (dogfood)
- Adds `max_capacity`

Updates `module.logging_alb` to `1.6.2` (dogfood)

Updates `module.monitoring` to `1.8.0` (dogfood)
- Adds `log_monitoring` configuration
2025-11-19 22:04:17 -05:00
Victor Lyuboslavsky f8ce47ec88 Grouping OTEL exceptions by type. (#35794)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34677 

Changing OTEL set up to group exceptions by type, which is an
OTEL/industry best practice.
2025-11-19 10:24:19 -06:00
George Karr ca5d02d471 Adding changes for Fleet v4.76.1 (#35760) 2025-11-18 14:35:31 -06:00
Victor Lyuboslavsky 3029a3ac44 Adjusting OTEL resources for high throughput. (#35878) 2025-11-18 06:53:49 -06:00
Jorge Falcon 0b0c67a5d5 Loadtest - osquery_perf scaling fixes (#35798)
- Removes timestamp from osquery_perf image
- Adds `default: 0` to loadtest osquery_perf workflow, `variable:
loadtest_containers_starting_index`
- Adds `variable: sleep_time` to loadtest osquery_perf workflow
- Adds osquery_perf docker repository in ECR
- Adds support for `sleep_time` to `enroll.sh`
- Updates terraform variables to enforce `git_branch` or `git_tag` for
osquery_perf
2025-11-17 10:21:18 -05:00
Robert Fairburn caf9e83968 Configure osquery-perf memory and cpu (#35786) 2025-11-14 14:35:42 -06:00
Jorge Falcon 776cd67647 Loadtest - Firehose logging removal, adds filesystem logging, and module updates (#35735)
- Removes `firehose` logging from loadtesting environment
- Sets `filesystem` logging in loadtesting environment
- Updates fleet image to 4.76.0 as the default value
- Updates `migrations` and `logging_alb` modules with latest versions
2025-11-13 19:16:00 -05:00
Jorge Falcon e2085bfd86 Loadtesting documentation - Removes (Coming Soon) from README (#35649)
- Removes `(Coming Soon)` from
`infrastructure/loadtesting/infra/README.md` with regards to deployment
via Github Actions
- Moves Signoz steps to `.header.md` to preserve steps in generated
`README.md`
2025-11-12 16:54:14 -05:00
Jorge FalconandRobert Fairburn 0471b8ce19 Loadtest - osquery_perf - Removal of fleet_image requirement (#35365)
- Adds support for `enroll.sh`, to deploy osquery_perf in batches
- Merges variables `tag` and `git_branch` into `git_tag_branch`. Only
one tag or git_branch should be specified.
  - Still used for osquery_perf to check out the correct tag/branch.
- Removes fleet_image requirement for cutting osquery_perf images

---------

Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2025-11-10 16:16:20 -05:00
Luke Heath 0056d36d81 Adding changes for Fleet v4.76.0 (#34486) (#35380) 2025-11-07 19:19:12 -06:00