mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 13:37:30 +00:00
7d4acdc5c4
Fixes #40975. 8.0.32 (was running in Aurora managed cloud at the time) -> 8.0.39 (what we're running now) 8.0.36 -> 8.0.44 (latest 8.0.x version supported by Aurora; holding off on 8.0.45 until Aurora supports it) 8.4.7 -> 8.4.8 9.5.0 -> 9.6.0 Also bumped the supported Aurora version from 3.07.0 to 3.08.2 to match what we're running in managed cloud right now Fleet might work on older patch versions but we'll no longer dev/test on them. MySQL 9.x not testing previous minor versions matches with our previous approach for that version. Since these are all patch/minor bumps (and the overnight build cases are patch bumps/are covered by AWS envs) automated testing should be sufficient here.
49 lines
1.3 KiB
YAML
49 lines
1.3 KiB
YAML
services:
|
|
mysql:
|
|
platform: ${FLEET_MYSQL_PLATFORM:-linux/x86_64}
|
|
image: mysql:8.0.44
|
|
environment:
|
|
MYSQL_ROOT_PASSWORD: toor
|
|
MYSQL_DATABASE: fleet
|
|
MYSQL_USER: fleet
|
|
MYSQL_PASSWORD: fleet
|
|
ports:
|
|
- "3306"
|
|
|
|
redis:
|
|
image: redis:6
|
|
|
|
fleet:
|
|
image: fleetdm/fleet:${FLEET_VERSION:-latest}
|
|
environment:
|
|
FLEET_MYSQL_ADDRESS: mysql:3306
|
|
FLEET_MYSQL_DATABASE: fleet
|
|
FLEET_MYSQL_USERNAME: fleet
|
|
FLEET_MYSQL_PASSWORD: fleet
|
|
FLEET_REDIS_ADDRESS: redis:6379
|
|
FLEET_SERVER_ADDRESS: 0.0.0.0:8080
|
|
FLEET_SERVER_CERT: /fleet.crt
|
|
FLEET_SERVER_KEY: /fleet.key
|
|
FLEET_LOGGING_JSON: "true"
|
|
FLEET_OSQUERY_LABEL_UPDATE_INTERVAL: 1m
|
|
FLEET_VULNERABILITIES_CURRENT_INSTANCE_CHECKS: "yes"
|
|
FLEET_VULNERABILITIES_DATABASES_PATH: /fleet/vulndb
|
|
FLEET_VULNERABILITIES_PERIODICITY: 5m
|
|
FLEET_LOGGING_DEBUG: "true"
|
|
volumes:
|
|
- ./fleet.crt:/fleet.crt
|
|
- ./fleet.key:/fleet.key
|
|
ports:
|
|
- "8080"
|
|
depends_on:
|
|
- mysql
|
|
- redis
|
|
|
|
osquery:
|
|
image: "osquery/osquery:4.7.0-ubuntu20.04"
|
|
volumes:
|
|
- ./fleet.crt:/etc/osquery/fleet.crt
|
|
- ./osquery.flags:/etc/osquery/osquery.flags
|
|
environment:
|
|
ENROLL_SECRET: "${ENROLL_SECRET:-foobar}"
|
|
command: osqueryd --flagfile=/etc/osquery/osquery.flags
|