Robert Fairburn
5d7900b388
Add scripts to update sandbox easier ( #8700 )
...
* Add scripts to update sandbox easier
* Sort unclaimed instances in cleanup tool
* Sandbox readme update
2022-11-16 13:30:01 -06:00
Luke Heath
af0c75e08b
Prepare for 4.23.0 ( #8663 )
2022-11-14 14:42:21 -08:00
Zach Wasserman
efbe4c0777
Update Go to 1.19.3 ( #8525 ) ( #8614 )
...
Co-authored-by: Tomas Touceda <chiiph@gmail.com>
2022-11-08 13:03:23 -03:00
Roberto Dip
f5d3aa233c
reduce the build time of loadtest.Dockerfile ( #8584 )
...
- yarn is not needed to build osquery-perf
- we can change the clone step to not fetch unnecessary data
2022-11-04 13:20:38 -03:00
Robert Fairburn
3c87299082
Improve loadtesting documentation ( #8576 )
2022-11-03 17:11:22 -05:00
Zachary Winnerman
6afcf161db
Guardduty ( #8553 )
...
* Added initial code for guard duty, tested some of it
* Add finished (*) guard duty code
* Removed temp workaround stuff
2022-11-03 13:59:35 -04:00
Zachary Winnerman
70524b6e3a
Sandbox data ( #8523 )
...
* Initial work on sandbox data pipeline
* Update python code to have preliminary code
* Added in final code for sandbox-data.
Huge delay because I needed to double check licensing
2022-11-01 12:41:13 -04:00
Roberto Dip
c51927e873
enhance support for orbit and fleet desktop in osquery-perf ( #8217 )
...
This improves osquery-perf with support for a more realistic orbit + fleet desktop simulation as described in #8212
This was based on the work done by @sharvilshah in his branch.
2022-10-28 14:27:21 -03:00
Roberto Dip
feaf46a55a
cherry-pick changes from fleet-v4.22.1 ( #8481 )
2022-10-28 12:24:30 -03:00
Benjamin Edwards
08b2ab5c18
update deployment guide ( #8447 )
...
* update deployment guide and add additional descriptions/comments for terraform resources
* add architecture diagram to deployment guide
2022-10-26 15:52:54 -04:00
Noah Talerman
90f5fbb63a
Prepare for 4.22 ( #8253 )
2022-10-21 11:24:13 -07:00
Robert Fairburn
dc0427117e
Add loadtesting ECR Cleanup one-liner ( #8041 )
2022-10-10 10:02:11 -05:00
Noah Talerman
e98941aeaf
Prepare for 4.21.0 ( #8011 )
...
This PR addresses the instructions under number (1) in the releasing Fleet steps: https://fleetdm.com/docs/contributing/releasing-fleet#what-to-do
- Update CHANGELOG
- Bump versions
2022-10-05 13:18:22 -07:00
Zachary Winnerman
5d001c90de
Bump provider versions for dogfood ( #8027 )
2022-09-29 13:58:23 -04:00
Zachary Winnerman
75e49e9740
Remove lifecycle part for rds, terraform doesn't support it ( #8025 )
2022-09-29 13:28:13 -04:00
Zachary Winnerman
891bdc0e24
Some quick fixes that I noticed deploying sandbox dev ( #7948 )
2022-09-29 11:15:33 -04:00
Martin Angers
7356378d0f
Update hashicorp/aws provider version for loadtesting and add CI validation ( #7937 )
...
* Update hashicorp/aws provider version for loadtesting and add CI validation
* Update name of the new workflow
2022-09-28 09:38:56 -05:00
KanchiMoe
cde973293b
server_side_encryption_configuration attribute is deprecated ( #7866 )
2022-09-21 14:25:08 -04:00
Zachary Winnerman
989db6bd25
Add fluentbit logging to sandbox EKS ( #7880 )
2022-09-21 13:44:49 -04:00
Zachary Winnerman
3525c3f897
Fix applies for rds terraform ( #7862 )
...
* Fix applies for rds terraform
* fixup
2022-09-20 17:09:24 -04:00
KanchiMoe
fc3f980cff
server_side_encryption_configuration argument is deprecated ( #7577 )
...
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#enable-default-server-side-encryption
2022-09-19 13:04:52 -04:00
Robert Fairburn
897b750b55
Add how to obtain email addresses from a sandbox ( #7821 )
2022-09-17 13:17:44 -05:00
Zachary Winnerman
eeba487ea4
Add changes to clear activities table in sandbox ( #7723 )
...
* Add changes to clear activities table in sandbox
* fixup
* fixup
* fixup
* Finished testing in dev
* fixup
* fixup
2022-09-16 15:59:57 -04:00
Noah Talerman
dab45f1180
Prepare for 4.20.1 ( #7783 )
2022-09-15 14:28:23 -05:00
Zachary Winnerman
ac47c50ee8
Add sandbox dev stuff ( #7782 )
2022-09-15 13:33:49 -04:00
Zachary Winnerman
a1a80c775f
Upgrade database to mysql 8 compatible ( #7703 )
...
* Upgrade database to mysql 8 compatible
* fixup
* Added changelog for mysql8 upgrade
2022-09-15 13:29:59 -04:00
Tomas Touceda
8457e55b53
Bump go to 1.19.1 ( #7690 )
...
* Bump go to 1.19.1
* Bump remaining go-version to the 1.19.1
* Add extra paths for test-go
* Oops, putting the right path in the right place
* gofmt file
* gofmt ALL THE THINGS
* Moar changes
* Actually, go.mod doesn't like minor versions
2022-09-12 20:32:43 -03:00
Noah Talerman
26b610dde4
Prepare for 4.20.0 ( #7651 )
2022-09-09 16:01:03 -05:00
Noah Talerman
15a7f8a18c
Prepare for 4.19.1 ( #7453 )
2022-09-01 12:14:44 -05:00
Tomas Touceda
fa63c5b7ed
Update docs for ease of use and send alerts to help-p1 ( #7477 )
2022-08-31 11:25:35 -03:00
Robert Fairburn
cfe338dac7
Increase Elasticsearch VM size ( #7447 )
2022-08-30 12:34:15 -05:00
Zachary Winnerman
369c976e82
Quick sandbox fixup ( #7386 )
2022-08-24 11:49:39 -05:00
Robert Fairburn
6543c5d5ac
Sandbox to use v4.19.0 tag ( #7385 )
2022-08-24 11:25:31 -05:00
Zachary Winnerman
eca5d767e1
Increase probe timeouts so it can survive database scaling events ( #7298 )
2022-08-24 11:09:24 -05:00
Zachary Winnerman
f16f848a7b
noticed some tags being outdated in sandbox ( #7382 )
2022-08-24 12:09:16 -04:00
Zachary Winnerman
0b5a047da6
mark ecr as immutable in preperation for 4.19.0 release ( #7324 )
2022-08-24 12:09:53 +00:00
Noah Talerman
5ad3f9a2d6
Prepare for 4.19.0 ( #7346 )
...
- Add CHANGELOG
- Bump versioning
- Remove `changes/` files
2022-08-23 15:13:01 -04:00
Zachary Winnerman
1d83b2610c
Delete now defunct workspaces ( #7322 )
2022-08-19 18:27:05 +00:00
Robert Fairburn
402585476e
More sandbox docs ( #7272 )
...
* Add "Environment Access" to Sandbox Readme
* Add spacing in sandbox readme
* Additional Documentation
2022-08-17 14:26:55 -05:00
Zachary Winnerman
653f882c23
Add runbooks for sandbox ( #7205 )
...
* Add runbooks for sandbox
* Added a note on athena workgroup
2022-08-17 16:26:44 +00:00
Robert Fairburn
69c8eb088e
SandboxProd SSO access to EKS ( #7172 )
...
* SandboxProd SSO access to EKS
* Sandbox docker platform = linux/amd64
* Shorten SSO role ARN for EKS
2022-08-16 13:16:48 -05:00
Zachary Winnerman
d0aad25882
Added a redirect for instances that don't exist ( #7168 )
...
* Added a redirect for instances that don't exist
* fixup
* Switched to using ECR for fleet deployments instead of dockerhub
2022-08-12 17:43:13 -04:00
dependabot[bot]
6f0e0873ca
Bump golang from 1.18.4-bullseye to 1.19.0-bullseye ( #7039 )
...
* Bump golang from 1.18.4-bullseye to 1.19.0-bullseye
Bumps golang from 1.18.4-bullseye to 1.19.0-bullseye.
---
updated-dependencies:
- dependency-name: golang
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* Update other golang deps as well
* Update missing go mods
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tomas Touceda <chiiph@gmail.com>
2022-08-10 17:00:01 -03:00
Robert Fairburn
1f1ee964ab
Improve APM in Loadtesting ( #7061 )
...
* Initial cloudwatch stub for loadtesting/apm
* Fix duplicate policy attachment name
* elastichsearch pull keys from ssh secret
* Set aws region for run-ansible
* Alternate way to specify region in run-ansible
* Fix elasticsearch_ansible ssh file modes
* Cloudwatch agent config elasticsearch
* Fix ansible indents
* Set platform to linux/amd64 for loadtesting docker image
* Use /dev/sdb on elasticsearch/apm
* fixup
* elasticsearch volume mounted
* elasticapm increase shards and size
* Increase elasticapm instance size
* Document how to get the IP for APM ec2 instance
2022-08-10 12:33:49 -05:00
Zachary Winnerman
56910ea261
Add vuln database config for sandbox ( #7126 )
2022-08-10 09:22:13 -04:00
Zachary Winnerman
3a1c4e45f2
Add ALB logging for fleet sandbox ( #7127 )
...
Closes #7121
2022-08-09 13:38:14 -04:00
Zachary Winnerman
8b0b885613
Give fleet more memory ( #7128 )
2022-08-09 13:37:37 -04:00
Roberto Dip
8e554ca832
lock rcodesign version to 0.16.0 ( #7113 )
2022-08-09 14:07:13 -03:00
Zachary Winnerman
f1d76d7e24
Testing applying basic config to sandbox instances ( #7105 )
...
* Testing applying basic config to sandbox instances
* fixup
* Consistency nit from @lucasmrod
2022-08-09 12:24:10 -03:00
Roberto Dip
d3e2e2dca0
enable notarization on Sandbox pre-provisioner ( #7100 )
2022-08-08 14:25:01 -04:00
