Commit Graph

27 Commits

Author SHA1 Message Date
Zachary Winnerman
369c976e82
Quick sandbox fixup (#7386) 2022-08-24 11:49:39 -05:00
Robert Fairburn
6543c5d5ac
Sandbox to use v4.19.0 tag (#7385) 2022-08-24 11:25:31 -05:00
Zachary Winnerman
eca5d767e1
Increase probe timeouts so it can survive database scaling events (#7298) 2022-08-24 11:09:24 -05:00
Zachary Winnerman
f16f848a7b
noticed some tags being outdated in sandbox (#7382) 2022-08-24 12:09:16 -04:00
Zachary Winnerman
0b5a047da6
mark ecr as immutable in preperation for 4.19.0 release (#7324) 2022-08-24 12:09:53 +00:00
Zachary Winnerman
1d83b2610c
Delete now defunct workspaces (#7322) 2022-08-19 18:27:05 +00:00
Robert Fairburn
402585476e
More sandbox docs (#7272)
* Add "Environment Access" to Sandbox Readme

* Add spacing in sandbox readme

* Additional Documentation
2022-08-17 14:26:55 -05:00
Zachary Winnerman
653f882c23
Add runbooks for sandbox (#7205)
* Add runbooks for sandbox

* Added a note on athena workgroup
2022-08-17 16:26:44 +00:00
Robert Fairburn
69c8eb088e
SandboxProd SSO access to EKS (#7172)
* SandboxProd SSO access to EKS

* Sandbox docker platform = linux/amd64

* Shorten SSO role ARN for EKS
2022-08-16 13:16:48 -05:00
Zachary Winnerman
d0aad25882
Added a redirect for instances that don't exist (#7168)
* Added a redirect for instances that don't exist

* fixup

* Switched to using ECR for fleet deployments instead of dockerhub
2022-08-12 17:43:13 -04:00
dependabot[bot]
6f0e0873ca
Bump golang from 1.18.4-bullseye to 1.19.0-bullseye (#7039)
* Bump golang from 1.18.4-bullseye to 1.19.0-bullseye

Bumps golang from 1.18.4-bullseye to 1.19.0-bullseye.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update other golang deps as well

* Update missing go mods

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tomas Touceda <chiiph@gmail.com>
2022-08-10 17:00:01 -03:00
Zachary Winnerman
56910ea261
Add vuln database config for sandbox (#7126) 2022-08-10 09:22:13 -04:00
Zachary Winnerman
3a1c4e45f2
Add ALB logging for fleet sandbox (#7127)
Closes #7121
2022-08-09 13:38:14 -04:00
Zachary Winnerman
8b0b885613
Give fleet more memory (#7128) 2022-08-09 13:37:37 -04:00
Roberto Dip
8e554ca832
lock rcodesign version to 0.16.0 (#7113) 2022-08-09 14:07:13 -03:00
Zachary Winnerman
f1d76d7e24
Testing applying basic config to sandbox instances (#7105)
* Testing applying basic config to sandbox instances

* fixup

* Consistency nit from @lucasmrod
2022-08-09 12:24:10 -03:00
Roberto Dip
d3e2e2dca0
enable notarization on Sandbox pre-provisioner (#7100) 2022-08-08 14:25:01 -04:00
Zachary Winnerman
82ba1a00a2
Demo packaging (#7020)
* checkin for testing

* Initial work on packaging, still need to configure fleet to use it

* Add the terraform stuff for installers

* Add iam permissions for packaging

* Add environment variables for installers to fleet

* Implement review fixes

* Add an extra state for provisioned, but not ready for customers

* Add secretsmanager stuff for apple

* fixup

* fixup

* Bugfixes

* fixup

* fixup and added some stuff to the readdme

* Add link to openapi.json in readme
2022-08-05 11:41:41 -04:00
Zachary Winnerman
b2d94b1cc5
Add some oneliners for cleaning up fleet sandbox (#7043) 2022-08-03 19:01:45 -04:00
Zachary Winnerman
af5a1c7d2c
Change fleet org to "Fleet Sandbox" (#7042)
Closes #7016
2022-08-03 16:53:27 -04:00
Roberto Dip
90b723e45a
consolidate sandbox env flags (#6917)
Related to #6894, this entirely replaces FLEET_DEMO with the server config added in #6597

As part of this, I also implemented a small refactor to the integration test suite to allow setting a custom config when the server is initialized.
2022-07-27 16:47:39 -03:00
Zachary Winnerman
e2f2a4cb57
Fix monitoring IAM permissions (#6926) 2022-07-27 15:46:36 -04:00
Zachary Winnerman
7ff2c3d249
Add cors to sandbox jitprovisioner (#6900) 2022-07-26 16:30:44 -05:00
Luke Heath
6c1d74f14f
Update sandbox env var and capitilization (#6896) 2022-07-26 13:58:00 -07:00
Luke Heath
6804cc2a1f
Change terraform sandbox deploy tag to main (#6880)
* Change terraform sandbox deploy tag to main

* Add image pull policy

Co-authored-by: zwinnerman-fleetdm <zwinnerman@fleetdm.com>
2022-07-26 09:44:38 -07:00
Zachary Winnerman
913acdc2ae
Add auth header requirement for /new and fix openapi spec for timestamp (#6855) 2022-07-25 16:26:04 -04:00
Zachary Winnerman
9338fcbcbd
Fleet Sandbox (#5079)
* Add code for the shared infra part of the demo environment

* Checkin

* checkin

* Checkin for pre-provisioner, got terraform working

* Checkin with the pre-deployer working, now blocked by helm chart

* Add interface for helm

* Add some initial code for the JIT Provisioner lambda

Lots of code taken from https://gitlab.com/hmajid2301/articles/-/tree/master/41.%20Create%20a%20webapp%20with%20fizz

* Update helm chart to work with shared infra (#5621)

* Update helm chart to work with shared infra

* Update helm chart README to reflect changes.

* Checkin

* Checkin

* Checkin, Pre-provisioner actually works

* PreProvisioner is now complete

* Make changes to the JIT provisioner based off of actually learning how
to do stuff

* checkin

* Check in, broken currently

* Add all code except provisioning and emailing user

* Checkin

* Checkin, fixed kubernetes

* Checkin

* Forgot a file

* Finish jit provisioner, need to test now

* Checkin, switching to nginx ingress

* Fleets are now actually accessible

* JITProvisioner now returns working fleet instances

* Deprovisioner code done, just need a few bugs fixed

* Fix the deprovisioner so it works now and re-ip

* fixup

* Finished testing the deprovisioner

* Added monitoring and fixed some bugs

* Add stuff for #6548

* fixed per luke's suggestion

* Fix for inactive task definition arns

* move everything to the prod account

* Bump fleet version and fix a couple of bugs

* Fix a couple of bugs

* Lots of security fixes and a few bug fixes

* Rename demo to sandbox to match product's naming

* Revert "Update helm chart to work with shared infra (#5621)"

This reverts commit 610bbd1c00338620f6cc65fe2aff86139551f465.

Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2022-07-19 13:56:53 -05:00