Commit Graph

78 Commits

Author SHA1 Message Date
Noah Talerman
90f5fbb63a
Prepare for 4.22 (#8253) 2022-10-21 11:24:13 -07:00
Robert Fairburn
dc0427117e
Add loadtesting ECR Cleanup one-liner (#8041) 2022-10-10 10:02:11 -05:00
Noah Talerman
e98941aeaf
Prepare for 4.21.0 (#8011)
This PR addresses the instructions under number (1) in the releasing Fleet steps: https://fleetdm.com/docs/contributing/releasing-fleet#what-to-do

- Update CHANGELOG
- Bump versions
2022-10-05 13:18:22 -07:00
Zachary Winnerman
5d001c90de
Bump provider versions for dogfood (#8027) 2022-09-29 13:58:23 -04:00
Zachary Winnerman
75e49e9740
Remove lifecycle part for rds, terraform doesn't support it (#8025) 2022-09-29 13:28:13 -04:00
Zachary Winnerman
891bdc0e24
Some quick fixes that I noticed deploying sandbox dev (#7948) 2022-09-29 11:15:33 -04:00
Martin Angers
7356378d0f
Update hashicorp/aws provider version for loadtesting and add CI validation (#7937)
* Update hashicorp/aws provider version for loadtesting and add CI validation

* Update name of the new workflow
2022-09-28 09:38:56 -05:00
KanchiMoe
cde973293b
server_side_encryption_configuration attribute is deprecated (#7866) 2022-09-21 14:25:08 -04:00
Zachary Winnerman
989db6bd25
Add fluentbit logging to sandbox EKS (#7880) 2022-09-21 13:44:49 -04:00
Zachary Winnerman
3525c3f897
Fix applies for rds terraform (#7862)
* Fix applies for rds terraform

* fixup
2022-09-20 17:09:24 -04:00
KanchiMoe
fc3f980cff
server_side_encryption_configuration argument is deprecated (#7577)
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption
2022-09-19 13:04:52 -04:00
Robert Fairburn
897b750b55
Add how to obtain email addresses from a sandbox (#7821) 2022-09-17 13:17:44 -05:00
Zachary Winnerman
eeba487ea4
Add changes to clear activities table in sandbox (#7723)
* Add changes to clear activities table in sandbox

* fixup

* fixup

* fixup

* Finished testing in dev

* fixup

* fixup
2022-09-16 15:59:57 -04:00
Noah Talerman
dab45f1180
Prepare for 4.20.1 (#7783) 2022-09-15 14:28:23 -05:00
Zachary Winnerman
ac47c50ee8
Add sandbox dev stuff (#7782) 2022-09-15 13:33:49 -04:00
Zachary Winnerman
a1a80c775f
Upgrade database to mysql 8 compatible (#7703)
* Upgrade database to mysql 8 compatible

* fixup

* Added changelog for mysql8 upgrade
2022-09-15 13:29:59 -04:00
Tomas Touceda
8457e55b53
Bump go to 1.19.1 (#7690)
* Bump go to 1.19.1

* Bump remaining go-version to the 1.19.1

* Add extra paths for test-go

* Oops, putting the right path in the right place

* gofmt file

* gofmt ALL THE THINGS

* Moar changes

* Actually, go.mod doesn't like minor versions
2022-09-12 20:32:43 -03:00
Noah Talerman
26b610dde4
Prepare for 4.20.0 (#7651) 2022-09-09 16:01:03 -05:00
Noah Talerman
15a7f8a18c
Prepare for 4.19.1 (#7453) 2022-09-01 12:14:44 -05:00
Tomas Touceda
fa63c5b7ed
Update docs for ease of use and send alerts to help-p1 (#7477) 2022-08-31 11:25:35 -03:00
Robert Fairburn
cfe338dac7
Increase Elasticsearch VM size (#7447) 2022-08-30 12:34:15 -05:00
Zachary Winnerman
369c976e82
Quick sandbox fixup (#7386) 2022-08-24 11:49:39 -05:00
Robert Fairburn
6543c5d5ac
Sandbox to use v4.19.0 tag (#7385) 2022-08-24 11:25:31 -05:00
Zachary Winnerman
eca5d767e1
Increase probe timeouts so it can survive database scaling events (#7298) 2022-08-24 11:09:24 -05:00
Zachary Winnerman
f16f848a7b
noticed some tags being outdated in sandbox (#7382) 2022-08-24 12:09:16 -04:00
Zachary Winnerman
0b5a047da6
mark ecr as immutable in preperation for 4.19.0 release (#7324) 2022-08-24 12:09:53 +00:00
Noah Talerman
5ad3f9a2d6
Prepare for 4.19.0 (#7346)
- Add CHANGELOG
- Bump versioning
- Remove `changes/` files
2022-08-23 15:13:01 -04:00
Zachary Winnerman
1d83b2610c
Delete now defunct workspaces (#7322) 2022-08-19 18:27:05 +00:00
Robert Fairburn
402585476e
More sandbox docs (#7272)
* Add "Environment Access" to Sandbox Readme

* Add spacing in sandbox readme

* Additional Documentation
2022-08-17 14:26:55 -05:00
Zachary Winnerman
653f882c23
Add runbooks for sandbox (#7205)
* Add runbooks for sandbox

* Added a note on athena workgroup
2022-08-17 16:26:44 +00:00
Robert Fairburn
69c8eb088e
SandboxProd SSO access to EKS (#7172)
* SandboxProd SSO access to EKS

* Sandbox docker platform = linux/amd64

* Shorten SSO role ARN for EKS
2022-08-16 13:16:48 -05:00
Zachary Winnerman
d0aad25882
Added a redirect for instances that don't exist (#7168)
* Added a redirect for instances that don't exist

* fixup

* Switched to using ECR for fleet deployments instead of dockerhub
2022-08-12 17:43:13 -04:00
dependabot[bot]
6f0e0873ca
Bump golang from 1.18.4-bullseye to 1.19.0-bullseye (#7039)
* Bump golang from 1.18.4-bullseye to 1.19.0-bullseye

Bumps golang from 1.18.4-bullseye to 1.19.0-bullseye.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update other golang deps as well

* Update missing go mods

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tomas Touceda <chiiph@gmail.com>
2022-08-10 17:00:01 -03:00
Robert Fairburn
1f1ee964ab
Improve APM in Loadtesting (#7061)
* Initial cloudwatch stub for loadtesting/apm

* Fix duplicate policy attachment name

* elastichsearch pull keys from ssh secret

* Set aws region for run-ansible

* Alternate way to specify region in run-ansible

* Fix elasticsearch_ansible ssh file modes

* Cloudwatch agent config elasticsearch

* Fix ansible indents

* Set platform to linux/amd64 for loadtesting docker image

* Use /dev/sdb on elasticsearch/apm

* fixup

* elasticsearch volume mounted

* elasticapm increase shards and size

* Increase elasticapm instance size

* Document how to get the IP for APM ec2 instance
2022-08-10 12:33:49 -05:00
Zachary Winnerman
56910ea261
Add vuln database config for sandbox (#7126) 2022-08-10 09:22:13 -04:00
Zachary Winnerman
3a1c4e45f2
Add ALB logging for fleet sandbox (#7127)
Closes #7121
2022-08-09 13:38:14 -04:00
Zachary Winnerman
8b0b885613
Give fleet more memory (#7128) 2022-08-09 13:37:37 -04:00
Roberto Dip
8e554ca832
lock rcodesign version to 0.16.0 (#7113) 2022-08-09 14:07:13 -03:00
Zachary Winnerman
f1d76d7e24
Testing applying basic config to sandbox instances (#7105)
* Testing applying basic config to sandbox instances

* fixup

* Consistency nit from @lucasmrod
2022-08-09 12:24:10 -03:00
Roberto Dip
d3e2e2dca0
enable notarization on Sandbox pre-provisioner (#7100) 2022-08-08 14:25:01 -04:00
Zachary Winnerman
82ba1a00a2
Demo packaging (#7020)
* checkin for testing

* Initial work on packaging, still need to configure fleet to use it

* Add the terraform stuff for installers

* Add iam permissions for packaging

* Add environment variables for installers to fleet

* Implement review fixes

* Add an extra state for provisioned, but not ready for customers

* Add secretsmanager stuff for apple

* fixup

* fixup

* Bugfixes

* fixup

* fixup and added some stuff to the readdme

* Add link to openapi.json in readme
2022-08-05 11:41:41 -04:00
Zachary Winnerman
b2d94b1cc5
Add some oneliners for cleaning up fleet sandbox (#7043) 2022-08-03 19:01:45 -04:00
Zachary Winnerman
af5a1c7d2c
Change fleet org to "Fleet Sandbox" (#7042)
Closes #7016
2022-08-03 16:53:27 -04:00
Katheryn Satterlee
4bcd14dc83
Fleet 4.18.0 changelog (#6951) 2022-08-01 13:39:13 -07:00
Zach Wasserman
6002324139
Bring 4.17.1 changelog into main (#6901) 2022-08-01 10:50:40 -07:00
Roberto Dip
90b723e45a
consolidate sandbox env flags (#6917)
Related to #6894, this entirely replaces FLEET_DEMO with the server config added in #6597

As part of this, I also implemented a small refactor to the integration test suite to allow setting a custom config when the server is initialized.
2022-07-27 16:47:39 -03:00
Zachary Winnerman
e2f2a4cb57
Fix monitoring IAM permissions (#6926) 2022-07-27 15:46:36 -04:00
Zachary Winnerman
7ff2c3d249
Add cors to sandbox jitprovisioner (#6900) 2022-07-26 16:30:44 -05:00
Luke Heath
6c1d74f14f
Update sandbox env var and capitilization (#6896) 2022-07-26 13:58:00 -07:00
Luke Heath
6804cc2a1f
Change terraform sandbox deploy tag to main (#6880)
* Change terraform sandbox deploy tag to main

* Add image pull policy

Co-authored-by: zwinnerman-fleetdm <zwinnerman@fleetdm.com>
2022-07-26 09:44:38 -07:00