Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity
5,834 Commits 2 Branches 0 Tags
2bb4ec2e6dce810bdf8d768759ea4892ddc1895f
Commit Graph
77 Commits
Author SHA1 Message Date
Robert Fairburn dc0427117e Add loadtesting ECR Cleanup one-liner (#8041) 2022-10-10 10:02:11 -05:00
Noah Talerman e98941aeaf Prepare for 4.21.0 (#8011) 
This PR addresses the instructions under number (1) in the releasing Fleet steps: https://fleetdm.com/docs/contributing/releasing-fleet#what-to-do

- Update CHANGELOG
- Bump versions
 2022-10-05 13:18:22 -07:00
Zachary Winnerman 5d001c90de Bump provider versions for dogfood (#8027) 2022-09-29 13:58:23 -04:00
Zachary Winnerman 75e49e9740 Remove lifecycle part for rds, terraform doesn't support it (#8025) 2022-09-29 13:28:13 -04:00
Zachary Winnerman 891bdc0e24 Some quick fixes that I noticed deploying sandbox dev (#7948) 2022-09-29 11:15:33 -04:00
Martin Angers 7356378d0f Update hashicorp/aws provider version for loadtesting and add CI validation (#7937) 
* Update hashicorp/aws provider version for loadtesting and add CI validation

* Update name of the new workflow
 2022-09-28 09:38:56 -05:00
KanchiMoe cde973293b server_side_encryption_configuration attribute is deprecated (#7866) 2022-09-21 14:25:08 -04:00
Zachary Winnerman 989db6bd25 Add fluentbit logging to sandbox EKS (#7880) 2022-09-21 13:44:49 -04:00
Zachary Winnerman 3525c3f897 Fix applies for rds terraform (#7862) 
* Fix applies for rds terraform

* fixup
 2022-09-20 17:09:24 -04:00
KanchiMoe fc3f980cff server_side_encryption_configuration argument is deprecated (#7577) 
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption
 2022-09-19 13:04:52 -04:00
Robert Fairburn 897b750b55 Add how to obtain email addresses from a sandbox (#7821) 2022-09-17 13:17:44 -05:00
Zachary Winnerman eeba487ea4 Add changes to clear activities table in sandbox (#7723) 
* Add changes to clear activities table in sandbox

* fixup

* fixup

* fixup

* Finished testing in dev

* fixup

* fixup
 2022-09-16 15:59:57 -04:00
Noah Talerman dab45f1180 Prepare for 4.20.1 (#7783) 2022-09-15 14:28:23 -05:00
Zachary Winnerman ac47c50ee8 Add sandbox dev stuff (#7782) 2022-09-15 13:33:49 -04:00
Zachary Winnerman a1a80c775f Upgrade database to mysql 8 compatible (#7703) 
* Upgrade database to mysql 8 compatible

* fixup

* Added changelog for mysql8 upgrade
 2022-09-15 13:29:59 -04:00
Tomas Touceda 8457e55b53 Bump go to 1.19.1 (#7690) 
* Bump go to 1.19.1

* Bump remaining go-version to the 1.19.1

* Add extra paths for test-go

* Oops, putting the right path in the right place

* gofmt file

* gofmt ALL THE THINGS

* Moar changes

* Actually, go.mod doesn't like minor versions
 2022-09-12 20:32:43 -03:00
Noah Talerman 26b610dde4 Prepare for 4.20.0 (#7651) 2022-09-09 16:01:03 -05:00
Noah Talerman 15a7f8a18c Prepare for 4.19.1 (#7453) 2022-09-01 12:14:44 -05:00
Tomas Touceda fa63c5b7ed Update docs for ease of use and send alerts to help-p1 (#7477) 2022-08-31 11:25:35 -03:00
Robert Fairburn cfe338dac7 Increase Elasticsearch VM size (#7447) 2022-08-30 12:34:15 -05:00
Zachary Winnerman 369c976e82 Quick sandbox fixup (#7386) 2022-08-24 11:49:39 -05:00
Robert Fairburn 6543c5d5ac Sandbox to use v4.19.0 tag (#7385) 2022-08-24 11:25:31 -05:00
Zachary Winnerman eca5d767e1 Increase probe timeouts so it can survive database scaling events (#7298) 2022-08-24 11:09:24 -05:00
Zachary Winnerman f16f848a7b noticed some tags being outdated in sandbox (#7382) 2022-08-24 12:09:16 -04:00
Zachary Winnerman 0b5a047da6 mark ecr as immutable in preperation for 4.19.0 release (#7324) 2022-08-24 12:09:53 +00:00
Noah Talerman 5ad3f9a2d6 Prepare for 4.19.0 (#7346) 
- Add CHANGELOG
- Bump versioning
- Remove `changes/` files
 2022-08-23 15:13:01 -04:00
Zachary Winnerman 1d83b2610c Delete now defunct workspaces (#7322) 2022-08-19 18:27:05 +00:00
Robert Fairburn 402585476e More sandbox docs (#7272) 
* Add "Environment Access" to Sandbox Readme

* Add spacing in sandbox readme

* Additional Documentation
 2022-08-17 14:26:55 -05:00
Zachary Winnerman 653f882c23 Add runbooks for sandbox (#7205) 
* Add runbooks for sandbox

* Added a note on athena workgroup
 2022-08-17 16:26:44 +00:00
Robert Fairburn 69c8eb088e SandboxProd SSO access to EKS (#7172) 
* SandboxProd SSO access to EKS

* Sandbox docker platform = linux/amd64

* Shorten SSO role ARN for EKS
 2022-08-16 13:16:48 -05:00
Zachary Winnerman d0aad25882 Added a redirect for instances that don't exist (#7168) 
* Added a redirect for instances that don't exist

* fixup

* Switched to using ECR for fleet deployments instead of dockerhub
 2022-08-12 17:43:13 -04:00
dependabot[bot]andTomas Touceda 6f0e0873ca Bump golang from 1.18.4-bullseye to 1.19.0-bullseye (#7039) 
* Bump golang from 1.18.4-bullseye to 1.19.0-bullseye

Bumps golang from 1.18.4-bullseye to 1.19.0-bullseye.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update other golang deps as well

* Update missing go mods

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tomas Touceda <chiiph@gmail.com>
 2022-08-10 17:00:01 -03:00
Robert Fairburn 1f1ee964ab Improve APM in Loadtesting (#7061) 
* Initial cloudwatch stub for loadtesting/apm

* Fix duplicate policy attachment name

* elastichsearch pull keys from ssh secret

* Set aws region for run-ansible

* Alternate way to specify region in run-ansible

* Fix elasticsearch_ansible ssh file modes

* Cloudwatch agent config elasticsearch

* Fix ansible indents

* Set platform to linux/amd64 for loadtesting docker image

* Use /dev/sdb on elasticsearch/apm

* fixup

* elasticsearch volume mounted

* elasticapm increase shards and size

* Increase elasticapm instance size

* Document how to get the IP for APM ec2 instance
 2022-08-10 12:33:49 -05:00
Zachary Winnerman 56910ea261 Add vuln database config for sandbox (#7126) 2022-08-10 09:22:13 -04:00
Zachary Winnerman 3a1c4e45f2 Add ALB logging for fleet sandbox (#7127) 
Closes #7121
 2022-08-09 13:38:14 -04:00
Zachary Winnerman 8b0b885613 Give fleet more memory (#7128) 2022-08-09 13:37:37 -04:00
Roberto Dip 8e554ca832 lock rcodesign version to 0.16.0 (#7113) 2022-08-09 14:07:13 -03:00
Zachary Winnerman f1d76d7e24 Testing applying basic config to sandbox instances (#7105) 
* Testing applying basic config to sandbox instances

* fixup

* Consistency nit from @lucasmrod
 2022-08-09 12:24:10 -03:00
Roberto Dip d3e2e2dca0 enable notarization on Sandbox pre-provisioner (#7100) 2022-08-08 14:25:01 -04:00
Zachary Winnerman 82ba1a00a2 Demo packaging (#7020) 
* checkin for testing

* Initial work on packaging, still need to configure fleet to use it

* Add the terraform stuff for installers

* Add iam permissions for packaging

* Add environment variables for installers to fleet

* Implement review fixes

* Add an extra state for provisioned, but not ready for customers

* Add secretsmanager stuff for apple

* fixup

* fixup

* Bugfixes

* fixup

* fixup and added some stuff to the readdme

* Add link to openapi.json in readme
 2022-08-05 11:41:41 -04:00
Zachary Winnerman b2d94b1cc5 Add some oneliners for cleaning up fleet sandbox (#7043) 2022-08-03 19:01:45 -04:00
Zachary Winnerman af5a1c7d2c Change fleet org to "Fleet Sandbox" (#7042) 
Closes #7016
 2022-08-03 16:53:27 -04:00
Katheryn Satterlee 4bcd14dc83 Fleet 4.18.0 changelog (#6951) 2022-08-01 13:39:13 -07:00
Zach Wasserman 6002324139 Bring 4.17.1 changelog into main (#6901) 2022-08-01 10:50:40 -07:00
Roberto Dip 90b723e45a consolidate sandbox env flags (#6917) 
Related to #6894, this entirely replaces FLEET_DEMO with the server config added in #6597

As part of this, I also implemented a small refactor to the integration test suite to allow setting a custom config when the server is initialized.
 2022-07-27 16:47:39 -03:00
Zachary Winnerman e2f2a4cb57 Fix monitoring IAM permissions (#6926) 2022-07-27 15:46:36 -04:00
Zachary Winnerman 7ff2c3d249 Add cors to sandbox jitprovisioner (#6900) 2022-07-26 16:30:44 -05:00
Luke Heath 6c1d74f14f Update sandbox env var and capitilization (#6896) 2022-07-26 13:58:00 -07:00
Luke Heathandzwinnerman-fleetdm 6804cc2a1f Change terraform sandbox deploy tag to main (#6880) 
* Change terraform sandbox deploy tag to main

* Add image pull policy

Co-authored-by: zwinnerman-fleetdm <zwinnerman@fleetdm.com>
 2022-07-26 09:44:38 -07:00
Zachary Winnerman 913acdc2ae Add auth header requirement for /new and fix openapi spec for timestamp (#6855) 2022-07-25 16:26:04 -04:00