Commit graph

181 commits

Author SHA1 Message Date
Robert Fairburn
6e5af7752a
Increase idle timeout for ALB to 15m across all configs (#23939) 2024-11-20 10:57:37 -06:00
Luke Heath
22ff5013e8
Adding changes for Fleet v4.59.1 (#23862) (#23929) 2024-11-18 16:30:23 -06:00
Luke Heath
ae92a7036f
Adding changes for Fleet v4.59.0 (#23292) (#23731) 2024-11-13 13:39:53 -06:00
Benjamin Edwards
6781d154fb
only render the policy document if we are creating the bucket (#23085) 2024-10-22 14:06:02 -04:00
Luke Heath
fdaf7be3ad
Prepare Fleet v4.58.0 (#22961) 2024-10-17 17:53:46 -05:00
Luke Heath
8979e8ff1b
Prepare Fleet v4.57.3 (#22869) (#22871) 2024-10-11 14:42:16 -05:00
George Karr
96771f46f4
Adding changes for Fleet v4.57.2 (#22599) 2024-10-04 10:21:46 -05:00
Robert Fairburn
54f209d338
Replace all lb idle timeouts with 605s (#22597) 2024-10-02 18:51:48 -05:00
George Karr
f7fc22d766
Adding changes for Fleet v4.57.1 (#22537) 2024-10-01 10:37:19 -05:00
Benjamin Edwards
cb581f151b
add force_destroy option to athena working group so resources do not … (#22505)
part 2 of 2 for https://github.com/fleetdm/confidential/issues/6747
2024-09-30 12:35:21 -04:00
Harrison Ravazzolo
0c3b203cd9
Update readme.md on byo-firehose (#22451)
Add an example module to the readme

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-09-26 17:36:27 -07:00
Luke Heath
c51c20a10b
Adding changes for Fleet v4.57.0 (#22109) (#22327) 2024-09-23 19:02:23 -05:00
Robert Fairburn
f71d399b13
Update mdmproxy module to force redeployment on secret change (#22065) 2024-09-12 19:45:17 -05:00
Robert Fairburn
eaa016b40c
saml-auth-proxy saves alb logs and outputs sec grp. (#22030) 2024-09-12 15:29:06 -05:00
Luke Heath
42b322e666
Fix changelog 4.56.0 (#21895) (#21901) 2024-09-11 10:19:01 -05:00
Robert Fairburn
4fb0fd5ede
Update ses addon module to have better SPF records (#21879)
This helps prevent invite emails from Fleet going to spam instead of
someone's inbox.
2024-09-09 10:35:41 -05:00
Roberto Dip
92c6c26d40
update to go1.23.1 (#21868)
for #21440

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-09-06 09:11:30 -03:00
Robert Fairburn
ef57640a5e
Update tf module example to latest version (#21620) 2024-08-28 11:02:45 -05:00
Robert Fairburn
d2ed76870c
Update engine version for mysql_aurora (#21585) 2024-08-28 03:42:37 -05:00
Roberto Dip
48e7066042
update Go to 1.22.6 (#21201)
for #21198

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-08-26 10:50:14 -03:00
Robert Fairburn
dc207e913d
Update WAF to support allowlists (#21448) 2024-08-21 10:42:43 -05:00
Robert Fairburn
53ef29b4f4
Fix redundant security group variable in terraform module (#21350) 2024-08-20 00:23:25 -05:00
allenhouchins
9e484b46f4
fixed typo in Apple Business Manager (#20915) 2024-08-01 14:56:42 -07:00
Sharon Katz
95fc48c110
Adding changes for Fleet v4.54.1 (#20719) 2024-07-25 15:02:19 -04:00
Luke Heath
1032841800
Adding changes for Fleet v4.54.0 (#20280) (#20561) 2024-07-17 16:50:26 -07:00
George Karr
415b0a7710
Adding changes for Fleet v4.53.1 (#20130)
Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2024-07-01 14:02:22 -05:00
Luke Heath
972988e39b
Adding changes for Fleet v4.53.0 (#19965) 2024-06-28 14:21:58 -07:00
Robert Fairburn
2547277095
mdmproxy terraform (#20009) 2024-06-28 14:40:05 -05:00
Robert Fairburn
bc6fc85113
Support https://github.com/fleetdm/fleet/pull/19935/ in tf example (#20026) 2024-06-26 12:35:57 -05:00
Robert Fairburn
05d70aed1c
Remove BYO-ECS hardcoded subnet (#19935) 2024-06-26 12:28:07 -05:00
Roberto Dip
2a9be32ffa
update Go to go1.22.4 (#19958)
for #19844

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
2024-06-25 10:55:36 -03:00
George Karr
2106767860
Adding changes for Fleet v4.52.0 (#19916) 2024-06-24 15:58:58 -05:00
Benjamin Edwards
2f38625190
ensure strict configuration outputs for terraform logging destination modules (#19807) 2024-06-17 16:02:33 -04:00
Robert Fairburn
72d8879118
Update tf examples (#19727) 2024-06-13 10:43:59 -05:00
Robert Fairburn
4ebed74f19
Use new carves env var in tf mods (#19721) 2024-06-13 10:31:22 -05:00
Robert Fairburn
42b1fc7e30
Tf software installers fix (#19715)
Fixed a typo in the name of the software installers bucket prefix env
var in terraform modules and removed the default prefix as the code
seems to create this prefix automatically. An additional prefix is still
supported for configuration, but can be left empty and will be so as the
default.
2024-06-13 10:07:48 -05:00
George Karr
5af2f9751a
Adding changes for Fleet v4.51.1 (#19649)
Co-authored-by: Luke Heath <luke@fleetdm.com>
2024-06-12 16:27:18 -05:00
Robert Fairburn
dcd551f671
initial osquery docker sidecar and osquery local builds (#19641) 2024-06-12 13:25:07 -05:00
Robert Fairburn
6b024ad4e4
TF modules create s3 software installers bucket (#19659) 2024-06-12 12:50:05 -05:00
Luke Heath
fbe9c1b498
Adding changes for Fleet v4.51.0 (#19601) 2024-06-10 09:47:23 -07:00
Sharon Katz
0d0d37d30d
Adding changes for Fleet v4.50.2 (#19410) 2024-05-31 16:51:21 -04:00
Sharon Katz
1047ed2622
Adding changes for Fleet v4.50.1 (#19334) 2024-05-30 12:23:59 -04:00
Robert Fairburn
5abfe5e4fa
Update terraform example to support FLEET_SERVER_PRIVATE_KEY (#19330) 2024-05-29 10:45:35 -05:00
Robert Fairburn
9283cb16a6
Terraform fleet server private key (#19321) 2024-05-29 10:26:08 -05:00
Noah Talerman
84a1c84244
Update docs: Best practice infra for deploy security agents (#19251)
- Add S3 to AWS reference architecture docs
- Add note that GCP support for add/install software (deploy security
agents) and file carves is coming soon
- Add note that Render support for add/install software (deploy security
agents) is coming soon
- Update links to best practice Terraform example
2024-05-28 14:41:54 -04:00
Benjamin Edwards
978a9413ee
kinesis logging destination module (#19269)
Create a Kinesis Logging Terraform Module similar to the existing
Firehose Logging Terraform Module.

- [X] Manual QA for all new/changed functionality

relates to https://github.com/fleetdm/confidential/issues/6548
2024-05-24 15:24:15 -04:00
Dave Herder
6dc8f2b639
Adding clarification on how to override availability zones (#19207)
If an end user wishes to host in some region other than us-east-2, the
availability zones need to be updated in this example main.tf

---------

Co-authored-by: Robert Fairburn <8029478+rfairburn@users.noreply.github.com>
2024-05-23 16:19:40 -04:00
Roberto Dip
987b64a0c7
update to go1.22.3 + dependencies (#19142)
For #16795, this:

- Updates Go to go1.22.3
- Per
https://github.com/fleetdm/fleet/issues/16795#issuecomment-2100450618, I
also ran the following to update the versions requested by @getvictor

```
go get github.com/kataras/golog@v0.1.12
go get github.com/kataras/iris/v12@v12.2.11
go get github.com/sethvargo/go-password@v0.3.0
```

**Notes**

After this is merged people will need to update their Go version. I use
gvm and I did it like:

```
$ gvm install go1.22.3
$ gvm use go1.22.3 --default
```

**Relevant changes**

The release notes mention:

> Previously, the variables declared by a “for” loop were created once
> and updated by each iteration. In Go 1.22, each iteration of the loop
> creates new variables, to avoid accidental sharing bugs.

However, we already have a lint rule (see
https://github.com/fleetdm/fleet/pull/13877) for this scenario, so it
shouldn't affect us.
2024-05-23 16:23:38 -03:00
Luke Heath
a540e0e38b
Adding changes for Fleet v4.50.0 (#19191) 2024-05-23 11:11:28 -05:00
Benjamin Edwards
677835e2c3
support external id in STS Assume Role calls (#18901) 2024-05-21 13:19:35 -04:00