Commit Graph
517 Commits
Author SHA1 Message Date
Jorge Falcon e7b5191c7f Dogfood temporary database restores (#42858)
- Adds a way to temporarily restore dogfood database
2026-04-01 17:51:53 -04:00
Luke Heath 57ea93859d Adding changes for Fleet v4.83.0 (#41764) (#42819) 2026-04-01 12:00:18 -05:00
Jorge Falcon 34cb7ab6d1 Loadtest internal alb logging and osquery-perf scaling updates (#42581)
- Configures internal alb to log to the same bucket as the public alb
- Adds support for osquery-perf task size (cpu/memory) configuration
- Updates defaults for osquery-perf extra_flags
- Updates default enroll.sh loop sleep_time from 60s -> 300s
2026-03-31 11:15:07 -04:00
George Karr d39578eb16 Adding changes for Fleet v4.82.2 (#42417) 2026-03-30 12:09:58 -05:00
Jorge Falcon 2d09916f60 Fix loadtest/infra docker_image resource (#42537)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves # N/A

- Resolves an issue that prevents some locally pulled docker images from
being pushed to ECR.
2026-03-27 01:17:37 -04:00
George Karr a4b5e56591 Adding changes for Fleet v4.82.1 (#41842) 2026-03-25 13:50:24 -05:00
Jorge Falcon 42b02483d4 Dogfood & Loadtest - Updating mysql engine version to 8.0.mysql_aurora.3.10.3 (#42120)
- Bumps Dogfood and Loadtest environment Aurora MySQL engine verison
from `8.0.mysql_aurora.3.08.2` -> `8.0.mysql_aurora.3.10.3`
2026-03-19 21:05:24 -05:00
Jorge Falcon 115e00decd Configure software_installers defaults in Loadtest terraform (#41207)
- Adds software_installers {} configuration to loadtest terraform
- Modifies template/cloudfront.tf.disabled to use pkcs#8 format for the
private key
2026-03-19 20:17:54 -04:00
Victor Lyuboslavsky ecee908157 Bumping signoz resources for 100K hosts loadtest. (#41961) 2026-03-19 12:49:36 -05:00
Victor Lyuboslavsky fbc5b9d8b6 Updated go to 1.26.1 (#42027)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #41749

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
2026-03-19 07:01:00 -05:00
Luke Heath be1df61ffb Adding changes for Fleet v4.82.0 (#40233) (#41637) 2026-03-13 09:42:29 -05:00
George Karr 37c4497f61 Adding changes for Fleet v4.81.2 (#41127) 2026-03-10 10:31:48 -05:00
Robert Fairburn f13f376e47 Dogfood restore changes (#41310) 2026-03-09 20:11:27 -05:00
George KarrandIan Littman 4241585c31 Adding changes for Fleet v4.81.1 (#40705)
Co-authored-by: Ian Littman <iansltx@gmail.com>
2026-03-03 10:01:15 -06:00
Luke Heath b928ba83a4 Set env vars to enable gitops fiel name deprecation warnings (#40757) 2026-02-28 11:37:25 -06:00
Scott Gress 772fb12cf5 Add more deprecation logs and mute by default (#40305)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #40122

# Details

* Adds deprecation warnings to `fleetctl apply`
* Adds alias conflict errors (i.e. using both new and deprecated keys in
the same spec) to `fleetctl apply`
* Adds logic around all deprecated field warnings to check the topic
first
* Disables deprecation warnings by default for `fleet serve`, `fleetctl
gitops` and `fleetctl apply`
* Enables deprecation warnings for dogfood via env var

To turn on warnings:
* In `fleet serve`, use either
`--logging_enable_topics=deprecated-field-names` or the
`FLEET_LOGGING_ENABLE_TOPICS=deprecated-field-names` env var
* In `fleetctl gitops` / `fleetctl apply` use either
`--enable-log-topics=deprecated-field-names` or
`FLEET_ENABLE_LOG_TOPICS=deprecated-field-names`

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [X] Added/updated automated tests
- [X] QA'd all new/changed functionality manually

tested in `fleetctl apply`, `fleet serve` and `fleet gitops` that
warnings are suppressed by default and added when the appropriate env
var or CLI option is used
2026-02-23 23:09:08 -06:00
Jorge Falcon 17d8fc2ed2 Dogfood monitoring module to 1.9.0 and set mysql_tls_config = true (#40355)
- Monitoring module version updated to tf-mod-addon-monitoring-v1.9.0
- `mysql_tls_config` set to `true`
2026-02-23 19:52:04 -05:00
Luke Heath aba5efbec1 update changelog prepare 4.81.0 (#40225) (#40227) 2026-02-20 16:39:34 -06:00
Jorge Falcon 45c4e47fab Dogfood and loadtest - mysql require secure transport on (#40211)
- Adds require_secure_transport for mysql connections to the db_cluster
parameter group for dogfood and loadtest environments.

```
    db_cluster_parameters = {
      require_secure_transport = "ON"
    }
```
2026-02-20 15:57:10 -05:00
Robert Fairburn ba9d2c4c90 Add remote state for vpn configs (#40093) 2026-02-19 09:05:36 -06:00
Robert Fairburn 0f9c05577b Firehose resources were in us-east-1 (#39991) 2026-02-17 14:52:19 -06:00
Robert FairburnandJorge Falcon dac2ef18f0 Ensure terraform docker compatibility with github actions (#39988)
Co-authored-by: Jorge Falcon <22119513+BCTBB@users.noreply.github.com>
2026-02-17 15:09:50 -05:00
Robert Fairburn f9ca19dc09 Update version of geolite2 module (#39973) 2026-02-17 10:55:28 -06:00
Harrison Ravazzolo ffca20142b Enable firehose logging in Dogfood (#39954)
Reenable firehose log shipping in dogfood. Created new hoses and role in
SC account
2026-02-16 21:29:44 -08:00
Robert Fairburn 9f60dadae0 Allow gzip responses (#39700) 2026-02-12 10:24:49 -06:00
Jorge Falcon 502351dcde Add FLEET_MYSQL_READ_REPLICA_TLS_CONFIG environment variable to dogfood and loadtesting (#39692)
- Adds `FLEET_MYSQL_READ_REPLICA_TLS_CONFIG = "custom"` to dogfood and
loadtesting environments.
2026-02-11 13:05:11 -05:00
George Karr d105fc5929 Adding changes for Fleet v4.80.1 (#39486) 2026-02-10 09:32:21 -06:00
Ian Littman d4906dd3d6 Update to Go 1.25.7 (#39584)
- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
2026-02-09 17:47:51 -06:00
Luke Heath 6e9d46202e Adding changes for Fleet v4.80.0 (#38255) (#39217) 2026-02-03 08:38:20 -06:00
Victor Lyuboslavsky 0ae909fedf Updated loadtest OTEL config to match dogfood (#38991)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #36494

I tried this with loadtest.
2026-01-29 10:18:02 -06:00
Ian Littman ec06952245 Bump Alpine (to 3.23.3), Go (to 1.25.6) to resolve vulns (#38973) 2026-01-28 18:51:15 -06:00
Jorge Falcon 9a8991ad64 Dogfood: Fix AWS Backup Role permissions to unblock cross-region replication (#38784)
- Adds permissions to fix/allow cross-region replication os Aurora and
S3 backups.
2026-01-26 12:59:32 -05:00
Robert Fairburn ffe6df25be Signoz action fixes (#38656) 2026-01-22 19:10:44 -06:00
Robert Fairburn e0631aff76 Dogfood signoz (#38569) 2026-01-22 12:33:27 -06:00
George Karr 68452b8a1d Adding changes for Fleet v4.79.1 (#38487) 2026-01-21 12:18:49 -06:00
Luke Heath d0fd8e06e9 update main 4.79.0 changes (#38253) 2026-01-13 14:12:17 -06:00
George Karr c2a913a4c7 Adding changes for Fleet v4.78.3 (#38201) 2026-01-13 14:01:48 -06:00
George Karr d820f800c6 Adding changes for Fleet v4.78.2 (#38150) 2026-01-10 21:24:15 -06:00
George KarrandLuke Heath dc5f1cb753 Adding changes for Fleet v4.78.1 (#37874)
Co-authored-by: Luke Heath <luke@fleetdm.com>
2026-01-06 16:54:45 -06:00
Luke Heath 8648105fe3 Adding changes for Fleet v4.78.0 (#36813) (#37584) 2025-12-19 17:25:22 -06:00
Jorge Falcon 7ac24d8752 Loadtest (new) - MDM Updates (#37420)
- Adds `FLEET_DEV_MDM_APPLE_DISABLE_PUSH = 1`
- Adds `FLEET_DEV_MDM_APPLE_DISABLE_DEVICE_INFO_CERT_VERIFY = 1`
- Updates osquery_perf/README.md, providing an example fetching and
using mdm scep challenge secret.
2025-12-17 17:55:13 -05:00
Jorge Falcon 3247b86aa0 Dogfood FLEET_SERVER_VPP_VERIFY_TIMEOUT and Inconsistent Plan Fix (#37163)
- Adds `FLEET_SERVER_VPP_VERIFY_TIMEOUT = "20m"`
- Updates `mysql_password_secret_name` to search by a string, rather
than the ID being forced by the AWS Terraform provider (v6) to Fix
inconsistent final plan errors
2025-12-12 13:00:12 -05:00
Luke Heath 70ab8c2925 Adding changes for Fleet v4.77.0 (#35382) (#36614) 2025-12-08 16:32:47 -06:00
Ian Littman 62755cbd82 Bump Go to 1.25.5, Alpine to 3.23.0 where relevant, bump Trivy to current version (#36848)
Fixes vulns reported in
https://github.com/fleetdm/fleet/actions/runs/19999992703. We'll
definitely want to at least cherry-pick this.
2025-12-07 20:04:14 -06:00
Jorge Falcon e8c3e26d60 cloudfront module update for dogfood to 1.1.0 (#36548)
- Updates dogfood cloudfront-software-installers module to 1.1.0
2025-12-01 20:08:33 -05:00
Victor Lyuboslavsky 6ab79dd5a7 Add more software to loadtest (#35756)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34677 and #35932

Adding ~450K software to the loadtest, including scripts to add more
software in the future.
Software is held in a `software.sql` file, which is used to create a
sqlite DB during osquery perf run/deployment.

# Checklist for submitter

## Testing

- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added support for loading software data from an external SQLite
database via a new `--software_db_path` command-line flag for more
realistic simulation scenarios.
* Added import and SQL generation tools to build and manage custom
software libraries.

* **Documentation**
* Added comprehensive README with setup instructions, tool usage, and
end-to-end workflow guidance for the software library.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-11-21 10:42:19 -06:00
Jorge Falcon e0be06fa76 Loadtesting - osquery deployment session timeout increase (#36097) 2025-11-20 21:08:52 -05:00
Jorge Falcon fb5c90ad9c Dogfood and loadtest module updates (#35990)
Updates `module.main` to `1.18.3` (dogfood)
- Adds `memory_tracking_target_value = 70` (dogfood and loadtesting)
- Adds `cpu_tracking_target_value = 70`  (dogfood and loadtesting)

Updates `module.migrations` to `2.2.1` (dogfood)
- Adds `max_capacity`

Updates `module.logging_alb` to `1.6.2` (dogfood)

Updates `module.monitoring` to `1.8.0` (dogfood)
- Adds `log_monitoring` configuration
2025-11-19 22:04:17 -05:00
Victor Lyuboslavsky f8ce47ec88 Grouping OTEL exceptions by type. (#35794)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #34677 

Changing OTEL set up to group exceptions by type, which is an
OTEL/industry best practice.
2025-11-19 10:24:19 -06:00
George Karr ca5d02d471 Adding changes for Fleet v4.76.1 (#35760) 2025-11-18 14:35:31 -06:00