Commit Graph

113 Commits

Author SHA1 Message Date
Luke Heath
7b91434452
Updating changelog for 4.48.0 (#18014) 2024-04-02 15:38:42 -05:00
George Karr
f2b3a58bff
Updating changelog for 4.47.3 (#17871) 2024-03-27 10:41:51 -05:00
Sharon Katz
b44848eeba
Updating changelog for 4.47.2 (#17804) 2024-03-26 09:18:34 -05:00
Benjamin Edwards
1d736d82df
update default in both places (#17741) 2024-03-20 15:28:49 -04:00
Benjamin Edwards
c0a7725988
fix typo in default maintance window (#17740)
should have been `thu` rather than `thurs`
2024-03-20 15:12:31 -04:00
Benjamin Edwards
7d156597d9
rds module maintenance window (#17739)
📝 docs(README.md): update alb_config and fleet_config tables to reflect
new changes
🔧 fix(main.tf): add preferred_maintenance_window to rds module to allow
for scheduled maintenance
🔧 fix(variables.tf): add preferred_maintenance_window to rds_config
variable to allow for scheduled maintenance
🔧 fix(README.md): update fleet_config image version to v4.47.1 for
latest features and bug fixes
2024-03-20 15:00:39 -04:00
Benjamin Edwards
909420d453
add redirect parameter to wget command for geoip db download (#17738) 2024-03-20 14:20:35 -04:00
George Karr
c6d5151198
Updating changelog for 4.47.1 (#17689) 2024-03-19 09:47:00 -05:00
Robert Fairburn
c10c75cb83
Update monitoring terraform module to support multiple albs (saml-auth-proxy support) (#17631) 2024-03-14 13:42:48 -05:00
Robert Fairburn
654a53f488
Allow adjusting log retention on cron monitoring lambda logs (#17613) 2024-03-13 23:19:20 -05:00
Robert Fairburn
dd7be66029
Terraform module example update (#17466) 2024-03-13 10:30:52 -05:00
Robert Fairburn
2f835e3e70
Mdm module naming (#17519) 2024-03-13 04:57:27 -05:00
Luke Heath
88d41915eb
Prepare Fleet v4.47.0 (#17581) 2024-03-12 17:45:26 -05:00
Benjamin Edwards
f57a6bafad
migrator addon vuln service compatibility (#17430)
initial pass after pairing session -- not yet tested but wanted to get
early feedback
2024-03-11 13:19:05 -04:00
George Karr
33bb67b7af
update changelog 4.46.2 (#17337)
- Updating changelog for 4.46.2
2024-03-06 15:41:55 -06:00
Benjamin Edwards
fc567cea2a
osquery carve update (#17426) 2024-03-06 13:38:35 -05:00
Benjamin Edwards
98da852c94
update example to be barebones working example (#17355)
@pacamaster and I reviewed the example directory and found that the
example terraform was a bit bloated. This streamlines the example to be
a bare-bones minimum to get started.
2024-03-04 16:39:57 -05:00
Sharon Katz
07511dc19c
4.46.1 changes (changelog, version numbers) (#17293) 2024-03-01 11:30:26 -05:00
Luke Heath
7361f4d8d5
Prepare v4.45.0 (#17005) 2024-02-21 11:32:22 -06:00
Benjamin Edwards
03873f6dcc
include all secrets in vuln task (#17033)
this change should fix the issue of vuln task interfering with MDM
settings.
2024-02-21 11:40:09 -05:00
George Karr
aac971145f
Update Versions for 4.44.1 (#16722) 2024-02-12 16:20:07 -06:00
Benjamin Edwards
9ba0dafa94
vuln processing as distinct service (#16544)
create a distinct service to managed vulnerability processing
2024-02-09 13:58:28 -05:00
Luke Heath
668fe41611
Prepare v4.44.0 (#16486) 2024-01-31 16:11:22 -06:00
Luke Heath
bcc1799e07
Prepare v4.43.3 (#16297) 2024-01-23 17:15:19 -06:00
Luke Heath
0430738030
Prepare v4.43.2 (#16261) 2024-01-22 15:55:43 -06:00
George Karr
48ef8f3933
Prepare new patch version 4.43.1 (#16087) 2024-01-12 16:54:42 -06:00
Luke Heath
502a811ce9
Prepare v4.43.0 (#15972) 2024-01-09 16:45:22 -06:00
Robert Fairburn
6c84209b73
Update migrations to scale down services before migrating (#15908) 2024-01-04 14:33:35 -06:00
Luke Heath
f5af49f766
Prepare v4.42.0 (#15812) 2023-12-21 15:30:40 -06:00
Robert Fairburn
255bcd8002
GeoLite2 addon for Dogfood and Cloud (#15643) 2023-12-14 13:22:11 -06:00
Benjamin Edwards
eb7f838125
firehose addon module updates (#15439) 2023-12-07 19:24:03 -05:00
Luke Heath
3dc40d667e
Prepare v4.41.1 (#15500) 2023-12-07 16:06:17 -06:00
Martin Angers
8b7d1a7e47
Remove Windows MDM feature flag (#15167)
For #14959 

---------

Co-authored-by: Gabriel Hernandez <ghernandez345@gmail.com>
2023-12-07 14:24:32 -03:00
Luke Heath
f6cb052e7a
Prepare v4.41.0 (#15350) 2023-11-28 19:18:05 -06:00
Robert Fairburn
ccd7ae82e5
Ensure CGO_ENABLED=0 is forced for cron_monitoring lambda (#15201) 2023-11-22 11:12:09 -06:00
Robert Fairburn
695ad26cb7
Allow Fleet terraform modules to configure lb timeouts (#15237) 2023-11-22 11:11:18 -06:00
Benjamin Edwards
29de567dc0
add module to enable bringing your own bucket file carving destination (#15206)
This PR adds support for a new terraform module that will make it easy
to configure Fleet instances for S3 backend for file carving results.
Its intended to be applied in two phases.

1) apply target-account which will provision the s3 bucket, IAM role and
policy permissions
2) apply carve on the fleet instance, bootstrapping environment
variables for Fleet server & attaching the IAM policy.

# Checklist for submitter
- [X] Manual QA for all new/changed functionality
2023-11-20 11:26:43 -05:00
Robert Fairburn
7b1ea9cdf1
Terraform aws provider v5 fixes for terraform modules (#15159) 2023-11-15 23:50:38 -06:00
Robert Fairburn
91063d8385
Terraform addon monitoring fix (#14994)
Fixes a problem with concurrency inside of an aws account (multiple
fleets using the monitoring module).
2023-11-07 10:59:26 -06:00
Luke Heath
8dbe690026
Prepare v4.40.0 (#14940) 2023-11-06 16:49:21 -06:00
Robert Fairburn
df3fd028cf
Simple fix for mdm module (#14885)
Since this was missing on the outputs, it broke apple mdm secret
population in existing implementations. This should re-assert backwards
compatibility.
2023-11-03 10:27:54 -05:00
Robert Fairburn
7b31344988
Dogfood github actions and monitoring module fixes (#14875)
These items fix the github action for use with the updates to the
monitoring module.

Additionally there were some changes needed to the monitoring module to
make it behave inside the GH action.

Once this is approved/merged, the new tag for them monitoring module
will be created as `tf-mod-addon-monitoring-v1.1.1`
2023-11-01 16:34:13 -05:00
Robert Fairburn
b74f2c059c
initial fleet-cron monitoring script (#14579) 2023-11-01 12:01:02 -05:00
Benjamin Edwards
7e85292d67
introduce variables to restrict ipv6 access by cidr block for alb config (#14836)
# Checklist for submitter
- [X] Documented any API changes (docs/REST API/rest-api.md or
docs/Contributing/API-for-contributors.md)
- [X] Manual QA for all new/changed functionality
2023-10-31 15:21:22 -04:00
Benjamin Edwards
d76c9bf3c9
terraform module -- replace redis cidr (#14768)
🔧 refactor(byo-vpc/main.tf): replace hardcoded cidr_blocks value with
dynamic data from aws_subnet.redis to ensure the CIDR blocks are always
up-to-date and accurate
2023-10-30 16:27:14 -04:00
Robert Fairburn
aa843e7725
Initial windows-only mdm option in terraform addon module (#14639) 2023-10-27 07:09:20 -05:00
Luke Heath
653aeceb06
Prepare v4.39.0 (#14647) 2023-10-26 15:07:58 -05:00
Benjamin Edwards
4416393d57
Fix vuln scans terraform addon (#14357) 2023-10-11 11:03:47 -04:00
Roberto Dip
6702e3ddb8
prepare v4.38.1 (#14303) 2023-10-05 11:13:24 -05:00
Robert Fairburn
4d5902108d
Update saml-auth-proxy addon to output its secret_id (#14231)
This is needed to automatically populate the secret from outside of the
module with an `aws_secretsmanager_secret_version`
2023-10-02 10:57:58 -05:00