Commit graph

71 commits

Author SHA1 Message Date
KanchiMoe
cde973293b
server_side_encryption_configuration attribute is deprecated (#7866) 2022-09-21 14:25:08 -04:00
Zachary Winnerman
989db6bd25
Add fluentbit logging to sandbox EKS (#7880) 2022-09-21 13:44:49 -04:00
Zachary Winnerman
3525c3f897
Fix applies for rds terraform (#7862)
* Fix applies for rds terraform

* fixup
2022-09-20 17:09:24 -04:00
KanchiMoe
fc3f980cff
server_side_encryption_configuration argument is deprecated (#7577)
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption
2022-09-19 13:04:52 -04:00
Robert Fairburn
897b750b55
Add how to obtain email addresses from a sandbox (#7821) 2022-09-17 13:17:44 -05:00
Zachary Winnerman
eeba487ea4
Add changes to clear activities table in sandbox (#7723)
* Add changes to clear activities table in sandbox

* fixup

* fixup

* fixup

* Finished testing in dev

* fixup

* fixup
2022-09-16 15:59:57 -04:00
Noah Talerman
dab45f1180
Prepare for 4.20.1 (#7783) 2022-09-15 14:28:23 -05:00
Zachary Winnerman
ac47c50ee8
Add sandbox dev stuff (#7782) 2022-09-15 13:33:49 -04:00
Zachary Winnerman
a1a80c775f
Upgrade database to mysql 8 compatible (#7703)
* Upgrade database to mysql 8 compatible

* fixup

* Added changelog for mysql8 upgrade
2022-09-15 13:29:59 -04:00
Tomas Touceda
8457e55b53
Bump go to 1.19.1 (#7690)
* Bump go to 1.19.1

* Bump remaining go-version to the 1.19.1

* Add extra paths for test-go

* Oops, putting the right path in the right place

* gofmt file

* gofmt ALL THE THINGS

* Moar changes

* Actually, go.mod doesn't like minor versions
2022-09-12 20:32:43 -03:00
Noah Talerman
26b610dde4
Prepare for 4.20.0 (#7651) 2022-09-09 16:01:03 -05:00
Noah Talerman
15a7f8a18c
Prepare for 4.19.1 (#7453) 2022-09-01 12:14:44 -05:00
Tomas Touceda
fa63c5b7ed
Update docs for ease of use and send alerts to help-p1 (#7477) 2022-08-31 11:25:35 -03:00
Robert Fairburn
cfe338dac7
Increase Elasticsearch VM size (#7447) 2022-08-30 12:34:15 -05:00
Zachary Winnerman
369c976e82
Quick sandbox fixup (#7386) 2022-08-24 11:49:39 -05:00
Robert Fairburn
6543c5d5ac
Sandbox to use v4.19.0 tag (#7385) 2022-08-24 11:25:31 -05:00
Zachary Winnerman
eca5d767e1
Increase probe timeouts so it can survive database scaling events (#7298) 2022-08-24 11:09:24 -05:00
Zachary Winnerman
f16f848a7b
noticed some tags being outdated in sandbox (#7382) 2022-08-24 12:09:16 -04:00
Zachary Winnerman
0b5a047da6
mark ecr as immutable in preperation for 4.19.0 release (#7324) 2022-08-24 12:09:53 +00:00
Noah Talerman
5ad3f9a2d6
Prepare for 4.19.0 (#7346)
- Add CHANGELOG
- Bump versioning
- Remove `changes/` files
2022-08-23 15:13:01 -04:00
Zachary Winnerman
1d83b2610c
Delete now defunct workspaces (#7322) 2022-08-19 18:27:05 +00:00
Robert Fairburn
402585476e
More sandbox docs (#7272)
* Add "Environment Access" to Sandbox Readme

* Add spacing in sandbox readme

* Additional Documentation
2022-08-17 14:26:55 -05:00
Zachary Winnerman
653f882c23
Add runbooks for sandbox (#7205)
* Add runbooks for sandbox

* Added a note on athena workgroup
2022-08-17 16:26:44 +00:00
Robert Fairburn
69c8eb088e
SandboxProd SSO access to EKS (#7172)
* SandboxProd SSO access to EKS

* Sandbox docker platform = linux/amd64

* Shorten SSO role ARN for EKS
2022-08-16 13:16:48 -05:00
Zachary Winnerman
d0aad25882
Added a redirect for instances that don't exist (#7168)
* Added a redirect for instances that don't exist

* fixup

* Switched to using ECR for fleet deployments instead of dockerhub
2022-08-12 17:43:13 -04:00
dependabot[bot]
6f0e0873ca
Bump golang from 1.18.4-bullseye to 1.19.0-bullseye (#7039)
* Bump golang from 1.18.4-bullseye to 1.19.0-bullseye

Bumps golang from 1.18.4-bullseye to 1.19.0-bullseye.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update other golang deps as well

* Update missing go mods

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tomas Touceda <chiiph@gmail.com>
2022-08-10 17:00:01 -03:00
Robert Fairburn
1f1ee964ab
Improve APM in Loadtesting (#7061)
* Initial cloudwatch stub for loadtesting/apm

* Fix duplicate policy attachment name

* elastichsearch pull keys from ssh secret

* Set aws region for run-ansible

* Alternate way to specify region in run-ansible

* Fix elasticsearch_ansible ssh file modes

* Cloudwatch agent config elasticsearch

* Fix ansible indents

* Set platform to linux/amd64 for loadtesting docker image

* Use /dev/sdb on elasticsearch/apm

* fixup

* elasticsearch volume mounted

* elasticapm increase shards and size

* Increase elasticapm instance size

* Document how to get the IP for APM ec2 instance
2022-08-10 12:33:49 -05:00
Zachary Winnerman
56910ea261
Add vuln database config for sandbox (#7126) 2022-08-10 09:22:13 -04:00
Zachary Winnerman
3a1c4e45f2
Add ALB logging for fleet sandbox (#7127)
Closes #7121
2022-08-09 13:38:14 -04:00
Zachary Winnerman
8b0b885613
Give fleet more memory (#7128) 2022-08-09 13:37:37 -04:00
Roberto Dip
8e554ca832
lock rcodesign version to 0.16.0 (#7113) 2022-08-09 14:07:13 -03:00
Zachary Winnerman
f1d76d7e24
Testing applying basic config to sandbox instances (#7105)
* Testing applying basic config to sandbox instances

* fixup

* Consistency nit from @lucasmrod
2022-08-09 12:24:10 -03:00
Roberto Dip
d3e2e2dca0
enable notarization on Sandbox pre-provisioner (#7100) 2022-08-08 14:25:01 -04:00
Zachary Winnerman
82ba1a00a2
Demo packaging (#7020)
* checkin for testing

* Initial work on packaging, still need to configure fleet to use it

* Add the terraform stuff for installers

* Add iam permissions for packaging

* Add environment variables for installers to fleet

* Implement review fixes

* Add an extra state for provisioned, but not ready for customers

* Add secretsmanager stuff for apple

* fixup

* fixup

* Bugfixes

* fixup

* fixup and added some stuff to the readdme

* Add link to openapi.json in readme
2022-08-05 11:41:41 -04:00
Zachary Winnerman
b2d94b1cc5
Add some oneliners for cleaning up fleet sandbox (#7043) 2022-08-03 19:01:45 -04:00
Zachary Winnerman
af5a1c7d2c
Change fleet org to "Fleet Sandbox" (#7042)
Closes #7016
2022-08-03 16:53:27 -04:00
Katheryn Satterlee
4bcd14dc83
Fleet 4.18.0 changelog (#6951) 2022-08-01 13:39:13 -07:00
Zach Wasserman
6002324139
Bring 4.17.1 changelog into main (#6901) 2022-08-01 10:50:40 -07:00
Roberto Dip
90b723e45a
consolidate sandbox env flags (#6917)
Related to #6894, this entirely replaces FLEET_DEMO with the server config added in #6597

As part of this, I also implemented a small refactor to the integration test suite to allow setting a custom config when the server is initialized.
2022-07-27 16:47:39 -03:00
Zachary Winnerman
e2f2a4cb57
Fix monitoring IAM permissions (#6926) 2022-07-27 15:46:36 -04:00
Zachary Winnerman
7ff2c3d249
Add cors to sandbox jitprovisioner (#6900) 2022-07-26 16:30:44 -05:00
Luke Heath
6c1d74f14f
Update sandbox env var and capitilization (#6896) 2022-07-26 13:58:00 -07:00
Luke Heath
6804cc2a1f
Change terraform sandbox deploy tag to main (#6880)
* Change terraform sandbox deploy tag to main

* Add image pull policy

Co-authored-by: zwinnerman-fleetdm <zwinnerman@fleetdm.com>
2022-07-26 09:44:38 -07:00
Zachary Winnerman
913acdc2ae
Add auth header requirement for /new and fix openapi spec for timestamp (#6855) 2022-07-25 16:26:04 -04:00
Robert Fairburn
126fedfcd3
Allow VPN Access into Dogfood (#6805) 2022-07-21 13:38:50 -05:00
Zachary Winnerman
9338fcbcbd
Fleet Sandbox (#5079)
* Add code for the shared infra part of the demo environment

* Checkin

* checkin

* Checkin for pre-provisioner, got terraform working

* Checkin with the pre-deployer working, now blocked by helm chart

* Add interface for helm

* Add some initial code for the JIT Provisioner lambda

Lots of code taken from https://gitlab.com/hmajid2301/articles/-/tree/master/41.%20Create%20a%20webapp%20with%20fizz

* Update helm chart to work with shared infra (#5621)

* Update helm chart to work with shared infra

* Update helm chart README to reflect changes.

* Checkin

* Checkin

* Checkin, Pre-provisioner actually works

* PreProvisioner is now complete

* Make changes to the JIT provisioner based off of actually learning how
to do stuff

* checkin

* Check in, broken currently

* Add all code except provisioning and emailing user

* Checkin

* Checkin, fixed kubernetes

* Checkin

* Forgot a file

* Finish jit provisioner, need to test now

* Checkin, switching to nginx ingress

* Fleets are now actually accessible

* JITProvisioner now returns working fleet instances

* Deprovisioner code done, just need a few bugs fixed

* Fix the deprovisioner so it works now and re-ip

* fixup

* Finished testing the deprovisioner

* Added monitoring and fixed some bugs

* Add stuff for #6548

* fixed per luke's suggestion

* Fix for inactive task definition arns

* move everything to the prod account

* Bump fleet version and fix a couple of bugs

* Fix a couple of bugs

* Lots of security fixes and a few bug fixes

* Rename demo to sandbox to match product's naming

* Revert "Update helm chart to work with shared infra (#5621)"

This reverts commit 610bbd1c00.

Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2022-07-19 13:56:53 -05:00
Robert Fairburn
7afef3f035
Re-IP Loadtesting for TGW+VPN (#6635)
* Re-IP Loadtesting for TGW+VPN

* Further restrict VPN IPs for LoadTesting

* Update VPN IPs for Loadtesting
2022-07-19 13:25:14 -05:00
Zachary Winnerman
5edd551e2d
Add account perms for fleet cloud sandbox (#6615) 2022-07-12 12:48:14 -04:00
Zachary Winnerman
be9974acfb
Add stuff for the new infra state (#5731) 2022-07-12 12:36:02 -04:00
Benjamin Edwards
dc40c80e2e
add tf vars for cloudwatch log retention & rds snapshot backup retention (#6532)
* add tf vars for cloudwatch log retention & rds snapshot backup retention, update github workflow to deploy new dogfood configurations for new tf vars

* typo and tf fmt
2022-07-11 15:30:36 -04:00