You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+13-13
Original file line number
Diff line number
Diff line change
@@ -18,7 +18,7 @@
18
18
- Add firewall manager to principal IAM policy.
19
19
20
20
## v0.33.3
21
-
- Remove apigatewayv2 from the principal IAM policy.
21
+
- Remove apigatewayv2 from the principal IAM policy.
22
22
- Update to the principal IAM policy name lex-models.
23
23
24
24
## v0.33.2
@@ -37,14 +37,14 @@
37
37
- Fix gosec issue related to G601 (CWE-118): Implicit memory aliasing in for loop
38
38
39
39
## v0.33.0
40
-
- Upgrade aws-nuke to v1.3.0
40
+
- Upgrade aws-nuke to v1.3.0
41
41
42
42
## v0.32.0
43
43
- Upgrade go to 1.15
44
44
- Upgrade go mod dependencies version.
45
45
- Improved test scenarios.
46
46
- Add `iotanalytics:*` policy to the set of allowed services.
47
-
- Increase timeout for functional test execution.
47
+
- Increase timeout for functional test execution.
48
48
49
49
## v0.31.3
50
50
- Fix data and update visualization for codebuild reset widget and error scrappers.
@@ -116,7 +116,7 @@ DCE API clients will need to be updated accordingly, to handle this response.
116
116
117
117
**Migration Notes**
118
118
119
-
This release changes the list of allowed regions to only include `us-east-1` by default. This is in order to reduce the time it takes for account reset CodeBuilds to run. Previously, these codebuilds would take 1h+ to nuke the 18 default regions, even on an empty account.
119
+
This release changes the list of allowed regions to only include `us-east-1` by default. This is in order to reduce the time it takes for account reset CodeBuilds to run. Previously, these codebuilds would take 1h+ to nuke the 18 default regions, even on an empty account.
120
120
121
121
The list of allowed regions is configurable as an `allowed_regions` Terraform variable, and may be set to any region names supported by AWS.
122
122
@@ -145,25 +145,25 @@ If you would like to maintain previous behavior and run aws-nuke in _Dry Run Mod
145
145
reset_nuke_toggle = false
146
146
```
147
147
148
-
See documentation on [_Configuring Terraform Variables_](https://dce.readthedocs.io/en/latest/terraform.html#configuring-terraform-variables).
148
+
See documentation.
149
149
150
150
## v0.23.0
151
151
152
152
- Added `/accounts?accountStatus=<status>` URL for querying accounts by status.
153
153
- Added Lease Validation for check against max budget amount, max budget period, principal budget amount and principal budget period
154
154
- Increase the threshold for Reset CodeBuild alarms to 10 failures over 5 hours.
155
155
- Support `metadata` field in `POST /leases` endpoint
156
-
- Fix bug where lease expiredOn/budgets/etc. were not being updated, if the account was previously used by the lease principal.
156
+
- Fix bug where lease expiredOn/budgets/etc. were not being updated, if the account was previously used by the lease principal.
157
157
158
158
## v0.22.0
159
159
160
160
**BREAKING CHANGES**
161
161
162
-
This release includes changes to rename every reference of "Redbox" to "DCE".
162
+
This release includes changes to rename every reference of "Redbox" to "DCE".
163
163
In many cases, we removed namespaces entirely: for example, we'll refer to an `account` rather
164
164
than a `dceAccount` wherever possible.
165
165
166
-
This release breaks a number of interfaces, which may require updates to DCE clients.
166
+
This release breaks a number of interfaces, which may require updates to DCE clients.
167
167
168
168
For example:
169
169
@@ -193,15 +193,15 @@ DynamoDB does not support in-place table renaming, so we will need to migrate da
193
193
194
194
To do this, you may run the migration script in [/scripts/migrations/v0.21.0_rename_db_tables_dce](https://github.com/Optum/dce/blob/master/scripts/migrations/v0.21.0_rename_db_tables_dce/main.go). This script will copy all data from the old tables to the new tables.
195
195
196
-
Note that this release does ***not*** delete the old tables, to provide the opportunity to migrate data. Subsequent releases _will_ destroy the old tables.
196
+
Note that this release does ***not*** delete the old tables, to provide the opportunity to migrate data. Subsequent releases _will_ destroy the old tables.
197
197
198
198
199
199
## v0.20.0
200
200
201
201
- Fixed a bug in a migration script
202
202
- Fixed output from publish_lease_events that was generating confusing log entries.
203
203
- Cleaned up naming for scheduling the update_lease_status lambda
204
-
- Cleaned up naming for scheduling populate_reset_queue lambda to remove
204
+
- Cleaned up naming for scheduling populate_reset_queue lambda to remove
205
205
"weekly" and scheduled the lambda for every six hours instead of weekly.
206
206
- Add `POST /leases/:id/auth` script, to generate STS creds for a leased account
207
207
@@ -242,7 +242,7 @@ In order to upgrade your DCE deployment to v0.19.0, you will need to:
242
242
- Sets a default expiration date for all existing `Lease` records
243
243
-**IMPORTANT** you must override [the default expiration date](https://github.com/Optum/dce/blob/master/scripts/migrations/v0.19.0_db_expiring_leases/main.go#L65)
244
244
- Marks all `*Locked` leases as `Inactive`
245
-
- Update any DCE API clients to include the `expiresOn` property in their `Lease` record.
245
+
- Update any DCE API clients to include the `expiresOn` property in their `Lease` record.
246
246
247
247
248
248
### _Expiring Leases Model_
@@ -258,7 +258,7 @@ Changes for this new behavior include:
258
258
- Changed SQS and SNS notifications for lease status change to be triggered by lease status change in DB.
- Added generation for API documentation from Swagger YAML to https://readthedocs.org/ format.
261
-
- Added defaults for leases; if ID isn't specified upon save in the DB a new one will be assigned, and if
261
+
- Added defaults for leases; if ID isn't specified upon save in the DB a new one will be assigned, and if
262
262
the expiration date isn't defined the environment variable `DEFAULT_LEASE_LENGTH_IN_DAYS` will be used and
263
263
if that is not defined, a default of seven (7) days will be used.
264
264
- Added migration for the leases to all be set to Inactive if they're anything but Active.
@@ -313,7 +313,7 @@ This release removes a number of Optum-specific configurations from the default
313
313
314
314
To specify a override nuke config, upload your own YAML file to an S3 bucket, and specify the S3 location using the `reset_nuke_template_bucket` and `reset_nuke_template_key` Terraform variables.
315
315
316
-
This release also disables `aws-nuke` by default, to prevent accidental destruction of critical AWS account resources. To re-enable `aws-nuke`, set the `reset_nuke_toggle` Terraform variable to `"true"`.
316
+
This release also disables `aws-nuke` by default, to prevent accidental destruction of critical AWS account resources. To re-enable `aws-nuke`, set the `reset_nuke_toggle` Terraform variable to `"true"`.
Copy file name to clipboardExpand all lines: docs/develop.md
+7-32
Original file line number
Diff line number
Diff line change
@@ -24,10 +24,10 @@ You will need the following:
24
24
25
25
### Configuring AWS CLI 2
26
26
27
-
The AWS CLI version 2 includes a breaking change that creates problems with the automation scripts. See
27
+
The AWS CLI version 2 includes a breaking change that creates problems with the automation scripts. See
28
28
https://docs.aws.amazon.com/cli/latest/userguide/cliv2-migration.html for more information.
29
29
30
-
For DCE, the recommeonded solution to this problem is to add the following line
30
+
For DCE, the recommeonded solution to this problem is to add the following line
31
31
in your `~/aws/config` file:
32
32
33
33
```ini
@@ -78,7 +78,7 @@ Execute unit tests by running:
78
78
79
79
```bash
80
80
make test
81
-
```
81
+
```
82
82
83
83
## Code Linting
84
84
@@ -89,7 +89,7 @@ the linting by itself by using the command:
89
89
make lint
90
90
```
91
91
92
-
During `make lint`, the `scripts/lint.sh` script executes [golangci-lint](https://github.com/golangci/golangci-lint). The configuration file is `.golangci.yml`. Enabled linters and
92
+
During `make lint`, the `scripts/lint.sh` script executes [golangci-lint](https://github.com/golangci/golangci-lint). The configuration file is `.golangci.yml`. Enabled linters and
93
93
rule exceptions can be found in this file.
94
94
95
95
The `make lint` target also executes [tflint](https://github.com/terraform-linters/tflint)
@@ -111,8 +111,8 @@ terraform apply
111
111
112
112
# Deploy application code to AWS
113
113
cd ..
114
-
make deploy
115
-
```
114
+
make deploy
115
+
```
116
116
117
117
See `Deploying DCE With Terraform <terraform.html#deploy-with-terraform>`_ for more details.
118
118
@@ -138,29 +138,4 @@ make test
138
138
139
139
## Building the documentation
140
140
141
-
The documentation is located in `docs` and is based on the [Sphinx project](https://docs.readthedocs.io/en/stable/intro/getting-started-with-sphinx.html) and hosted on http://readthedocs.io.
142
-
143
-
If you are making changes to documenation and would like to verify the build of the
144
-
documentation, you will need to make sure Python 3 is installed. It is _highly recommended_
145
-
that you use `virtualenv` and configure your workspace with the commands shown here:
146
-
147
-
```bash
148
-
virtualenv -p python3 ENV
149
-
source ENV/bin/activate
150
-
pip install -r docs/requirements.txt
151
-
```
152
-
153
-
With the Python requirements installed and the virtualenv sourced, use the
154
-
following command from the base project directory:
155
-
156
-
```bash
157
-
make documentation
158
-
```
159
-
160
-
To serve the documentation locally, run the following command:
161
-
162
-
```bash
163
-
make serve_docs
164
-
```
165
-
166
-
By default, the documenation will be served at `http://127.0.0.1:8000`.
0 commit comments