geodesic | Kubernetes Ecosystem Directory

Bot releases are visible (Hide)

geodesic - v2.8.5

Published by cloudpossebot 9 months ago

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.32.30` -> `==1.32.34`
boto3	`==1.34.30` -> `==1.34.34`

api-change:datazone: [botocore] Add new skipDeletionCheck to DeleteDomain. Add new skipDeletionCheck to DeleteProject which also automatically deletes dependent objects
api-change:route53: [botocore] Update the SDKs for text changes in the APIs.

🏗️ Build/Release Maintenance

what

Update actions in workflows to current versions using NodeJS v20
Minor revisions to README

why

Earlier versions of NodeJS are now deprecated
Improve the readability

geodesic - v2.8.4

Published by cloudpossebot 9 months ago

what

Emphasize current Geodesic version over historical versions
Remove remnants of explanation of why Geodesic was not supporting Apple Silicon
Make documentation of historical changes more concsise

why

Give the most relevant information first
Make historical information easier to understand

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.32.23` -> `==1.32.30`
boto3	`==1.34.23` -> `==1.34.30`

api-change:appconfigdata: [botocore] Fix FIPS Endpoints in aws-us-gov.
api-change:cloud9: [botocore] Doc-only update around removing AL1 from list of available AMIs for Cloud9
api-change:cloudfront-keyvaluestore: [botocore] This release improves upon the DescribeKeyValueStore API by returning two additional fields, Status of the KeyValueStore and the FailureReason in case of failures during creation of KeyValueStore.
api-change:connectcases: [botocore] This release adds the ability to view audit history on a case and introduces a new parameter, performedBy, for CreateCase and UpdateCase API's.
api-change:ec2: [botocore] Documentation updates for Amazon EC2.
api-change:ecs: [botocore] This release adds support for Transport Layer Security (TLS) and Configurable Timeout to ECS Service Connect. TLS facilitates privacy and data security for inter-service communications, while Configurable Timeout allows customized per-request timeout and idle timeout for Service Connect services.
api-change:finspace: [botocore] Allow customer to set zip default through command line arguments.
api-change:organizations: [botocore] Doc only update for quota increase change
api-change:rds: [botocore] Introduced support for the InsufficientDBInstanceCapacityFault error in the RDS CreateDBCluster API method. This provides enhanced error handling, ensuring a more robust experience when creating database clusters with insufficient instance capacity.
api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version

geodesic - v2.8.3

Published by cloudpossebot 9 months ago

🏗️ Build/Release Maintenance

what

add a repo banner

why

Spruce up the readme

what

Add explicit permissions to labeler

why

Labeler needs write permission to update labels, which was previously granted by default but now must be explicit

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.32.17` -> `==1.32.23`
boto3	`==1.34.17` -> `==1.34.23`

api-change:connect: [botocore] Supervisor Barge for Chat is now supported through the MonitorContact API.
api-change:connectparticipant: [botocore] Introduce new Supervisor participant role
api-change:location: [botocore] Location SDK documentation update. Added missing fonts to the MapConfiguration data type. Updated note for the SubMunicipality property in the place data type.
api-change:mwaa: [botocore] This Amazon MWAA feature release includes new fields in CreateWebLoginToken response model. The new fields IamIdentity and AirflowIdentity will let you match identifications, as the Airflow identity length is currently hashed to 64 characters.
api-change:s3control: [botocore] S3 On Outposts team adds dualstack endpoints support for S3Control and S3Outposts API calls.
api-change:supplychain: [botocore] This release includes APIs CreateBillOfMaterialsImportJob and GetBillOfMaterialsImportJob.
api-change:transfer: [botocore] AWS Transfer Family now supports static IP addresses for SFTP & AS2 connectors and for async MDNs on AS2 servers.
api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version

geodesic - v2.8.2

Published by cloudpossebot 9 months ago

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.31.6` -> `==1.32.17`
boto3	`==1.33.6` -> `==1.34.17`

api-change:billingconductor: [botocore] This release adds the ability to specify a linked account of the billing group for the custom line item resource.
api-change:braket: [botocore] This release enhances service support to create quantum tasks and hybrid jobs associated with Braket Direct Reservations.
api-change:cloud9: [botocore] This release adds the requirement to include the imageId parameter in the CreateEnvironmentEC2 API call.
api-change:cloudformation: [botocore] Including UPDATE_* states as a success status for CreateStack waiter.
api-change:finspace: [botocore] Release General Purpose type clusters
api-change:medialive: [botocore] Adds support for custom color correction on channels using 3D LUT files.
api-change:servicecatalog-appregistry: [botocore] Documentation-only updates for Dawn
api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version

geodesic - v2.8.1

Published by cloudpossebot 9 months ago

REMINDER

This PR fixes an issue with using bindfs to work around file ownership issues caused by running the Docker daemon as root (#594). This support is provided as a courtesy, but the better solution is to run Docker in "rootless" mode, which is done automatically when you use Docker Desktop. Support for running Docker as root should be considered deprecated.

what

Use bi-directional UID and GUID mapping in bindfs mount of host filesystem
Remove host username ($USER) from Geodesic environment

why

To guard against CVE-2022-24765, git checks the ownership of all directories it looks at for configuration, and complains if it finds a directory with a different owner.
The host's username was injected to support ansible 8 years ago (#65). It was never working properly on Debian due to the different structure of the adduser command on Debian vs Alpine, and should not be necessary now. If it turns out to be needed for some reason, we should develop a more robust solution.

references

Git vulnerability to configuration injection
Supersedes and closes #900

📚️ Documentation

what

Updated demo with automation
See

why

Video was hopelessly out of date, with this change we can keep it regularly updated with each PR.

🏗️ Build/Release Maintenance

geodesic - v2.8.0 Core updates

Published by cloudpossebot 11 months ago

🚀 Enhancements

Enhance kubectl-auto-select to work with Debian

🧰 Included Tools

what

Enhance kubectl-auto-select to work with Debian
Configure Debian version by codename
Upgrade Alpine to use Fuse 3
For Alpine, configure bindfs version via Docker ARG and upgrade bindfs v1.15.1 -> 1.17.6
Upgrade Python on Debian from v3.10.10 to v3.11.6
Upgrade Google Cloud SDK v422.0.0 -> 455.0.0
Upgrade kubectx v0.9.4 -> v0.9.5
Upgrade helm-diff v3.6.0 -> v3.8.1

why

kubectl-auto-select was written for Alpine and failed on Debian due to differing package managers
Python is configured by Debian codename, so keep it in sync with Debian by using codename is both places
Debian upgraded to Fuse 3 in v11 "bullseye" so keep Alpine relatively in sync
Alpine bindfs version was hard coded, but not easily changed, and was old. Debian installs bindfs via package, and for some reason is sticking to v1.14.7.
Alpine is using Python 3.11.6, so update Debian to corresponding version
Update tools not tracked by automation to current versions

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cryptography (changelog)	`==41.0.5` -> `==41.0.7`

Release Notes

`v41.0.7`

Compare Source

This PR contains the following updates:

Package	Type	Update	Change
alpine	final	patch	`3.18.4` -> `3.18.5`
alpine	stage	patch	`3.18.4` -> `3.18.5`

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.29.78` -> `==1.31.6`
boto3	`==1.28.78` -> `==1.33.6`

enhancement:AWSCRT: [botocore] Update awscrt version to 0.19.17
api-change:accessanalyzer: [botocore] IAM Access Analyzer now continuously monitors IAM roles and users in your AWS account or organization to generate findings for unused access. Additionally, IAM Access Analyzer now provides custom policy checks to validate that IAM policies adhere to your security standards ahead of deployments.
api-change:amp: [botocore] This release adds support for the Amazon Managed Service for Prometheus collector, a fully managed, agentless Prometheus metrics scraping capability.
api-change:bcm-data-exports: [botocore] Users can create, read, update, delete Exports of billing and cost management data. Users can get details of Export Executions and details of Tables for exporting. Tagging support is provided for Exports
api-change:cloudtrail: [botocore] CloudTrail Lake now supports federating event data stores. giving users the ability to run queries against their event data using Amazon Athena.
api-change:codestar-connections: [botocore] This release adds support for the CloudFormation Git sync feature. Git sync enables updating a CloudFormation stack from a template stored in a Git repository.
api-change:compute-optimizer: [botocore] This release enables AWS Compute Optimizer to analyze and generate recommendations with customization and discounts preferences.
api-change:config: [botocore] Support Periodic Recording for Configuration Recorder
api-change:controltower: [botocore] Add APIs to create and manage a landing zone.
api-change:cost-optimization-hub: [botocore] This release launches Cost Optimization Hub, a new AWS Billing and Cost Management feature that helps you consolidate and prioritize cost optimization recommendations across your AWS Organizations member accounts and AWS Regions, so that you can get the most out of your AWS spend.
api-change:detective: [botocore] Added new APIs in Detective to support resource investigations
api-change:ecs: [botocore] Adds a new 'type' property to the Setting structure. Adds a new AccountSetting - guardDutyActivate for ECS.
api-change:efs: [botocore] Update efs client to latest version
api-change:eks-auth: [botocore] This release adds support for EKS Pod Identity feature. EKS Pod Identity makes it easy for customers to obtain IAM permissions for their applications running in the EKS clusters.
api-change:eks: [botocore] This release adds support for EKS Pod Identity feature. EKS Pod Identity makes it easy for customers to obtain IAM permissions for the applications running in their EKS clusters.
api-change:elbv2: [botocore] Update elbv2 client to latest version
api-change:freetier: [botocore] This is the initial SDK release for the AWS Free Tier GetFreeTierUsage API
api-change:fsx: [botocore] Added support for FSx for ONTAP scale-out file systems and FlexGroup volumes. Added the HAPairs field and ThroughputCapacityPerHAPair for filesystem. Added AggregateConfiguration (containing Aggregates and ConstituentsPerAggregate) and SizeInBytes for volume.
api-change:guardduty: [botocore] Add support for Runtime Monitoring for ECS and ECS-EC2.
api-change:iotfleetwise: [botocore] AWS IoT FleetWise introduces new APIs for vision system data, such as data collected from cameras, radars, and lidars. You can now model and decode complex data types.
api-change:lakeformation: [botocore] This release adds four new APIs "DescribeLakeFormationIdentityCenterConfiguration", "CreateLakeFormationIdentityCenterConfiguration", "DescribeLakeFormationIdentityCenterConfiguration", and "DeleteLakeFormationIdentityCenterConfiguration", and also updates the corresponding documentation.
api-change:lexv2-models: [botocore] Update lexv2-models client to latest version
api-change:lexv2-runtime: [botocore] Update lexv2-runtime client to latest version
api-change:logs: [botocore] Added APIs to Create, Update, Get, List and Delete LogAnomalyDetectors and List and Update Anomalies in Detector. Added LogGroupClass attribute for LogGroups to classify loggroup as Standard loggroup with all capabilities or InfrequentAccess loggroup with limited capabilities.
api-change:managedblockchain: [botocore] Add optional NetworkType property to Accessor APIs
api-change:personalize-events: [botocore] This release enables PutActions and PutActionInteractions
api-change:personalize-runtime: [botocore] Enables metadata in recommendations and next best action recommendations
api-change:personalize: [botocore] Enables metadata in recommendations, recommendations with themes, and next best action recommendations
api-change:quicksight: [botocore] This release launches new APIs for trusted identity propagation setup and supports creating datasources using trusted identity propagation as authentication method for QuickSight accounts configured with IAM Identity Center.
api-change:redshift: [botocore] This release adds support for multi-data warehouse writes through data sharing.
api-change:repostspace: [botocore] Initial release of AWS re:Post Private
api-change:s3: [botocore] Adding new params - Key and Prefix, to S3 API operations for supporting S3 Access Grants. Note - These updates will not change any of the existing S3 API functionality.
api-change:s3control: [botocore] Introduce Amazon S3 Access Grants, a new S3 access control feature that maps identities in directories such as Active Directory, or AWS Identity and Access Management (IAM) Principals, to datasets in S3.
api-change:secretsmanager: [botocore] AWS Secrets Manager has released the BatchGetSecretValue API, which allows customers to fetch up to 20 Secrets with a single request using a list of secret names or filters.
api-change:securityhub: [botocore] Adds and updates APIs to support customizable security controls. This feature allows Security Hub customers to provide custom parameters for security controls. With this release, findings for controls that support custom parameters will include the parameters used to generate the findings.
api-change:stepfunctions: [botocore] Update stepfunctions client to latest version
api-change:transcribe: [botocore] This release adds support for transcriptions from audio sources in 64 new languages and introduces generative call summarization in Transcribe Call Analytics (Post call)
api-change:workspaces-thin-client: [botocore] Initial release of Amazon WorkSpaces Thin Client
api-change:workspaces: [botocore] The release introduces Multi-Region Resilience one-

geodesic - v2.7.3

Published by cloudpossebot 12 months ago

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.29.74` -> `==1.29.78`
boto3	`==1.28.74` -> `==1.28.78`

api-change:amplify: [botocore] Add backend field to CreateBranch and UpdateBranch requests. Add pagination support for ListApps, ListDomainAssociations, ListBranches, and ListJobs
api-change:application-insights: [botocore] Automate attaching managed policies
api-change:ec2: [botocore] Capacity Blocks for ML are a new EC2 purchasing option for reserving GPU instances on a future date to support short duration machine learning (ML) workloads. Capacity Blocks automatically place instances close together inside Amazon EC2 UltraClusters for low-latency, high-throughput networking.
api-change:m2: [botocore] Added name filter ability for ListDataSets API, added ForceUpdate for Updating environment and BatchJob submission using S3BatchJobIdentifier
api-change:neptunedata: [botocore] Minor change to not retry CancelledByUserException
api-change:translate: [botocore] Added support for Brevity translation settings feature.

geodesic - v2.7.2

Published by cloudpossebot 12 months ago

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cryptography (changelog)	`==41.0.4` -> `==41.0.5`

Release Notes

`v41.0.5`

Compare Source

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.29.68` -> `==1.29.74`
boto3	`==1.28.68` -> `==1.28.74`

api-change:marketplacecommerceanalytics: [botocore] The StartSupportDataExport operation has been deprecated as part of the Product Support Connection deprecation. As of December 2022, Product Support Connection is no longer supported.
api-change:networkmanager: [botocore] This release adds API support for Tunnel-less Connect (NoEncap Protocol) for AWS Cloud WAN
api-change:redshift-serverless: [botocore] This release adds support for customers to see the patch version and workgroup version in Amazon Redshift Serverless.
api-change:rekognition: [botocore] Amazon Rekognition introduces StartMediaAnalysisJob, GetMediaAnalysisJob, and ListMediaAnalysisJobs operations to run a bulk analysis of images with a Detect Moderation model.

geodesic - v2.7.1

Published by cloudpossebot 12 months ago

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.29.63` -> `==1.29.68`
boto3	`==1.28.63` -> `==1.28.68`

api-change:cloudformation: [botocore] SDK and documentation updates for UpdateReplacePolicy
api-change:drs: [botocore] Updated exsiting API to allow AWS Elastic Disaster Recovery support of launching recovery into existing EC2 instances.
api-change:entityresolution: [botocore] This launch expands our matching techniques to include provider-based matching to help customer match, link, and enhance records with minimal data movement. With data service providers, we have removed the need for customers to build bespoke integrations,.
api-change:managedblockchain-query: [botocore] This release introduces two new APIs: GetAssetContract and ListAssetContracts. This release also adds support for Bitcoin Testnet.
api-change:mediapackagev2: [botocore] This release allows customers to manage MediaPackage v2 resource using CloudFormation.
api-change:opensearch: [botocore] This release allows customers to list and associate optional plugin packages with compatible Amazon OpenSearch Service clusters for enhanced functionality.
api-change:redshift-serverless: [botocore] Added support for managing credentials of serverless namespace admin using AWS Secrets Manager.
api-change:redshift: [botocore] Added support for managing credentials of provisioned cluster admin using AWS Secrets Manager.
api-change:sesv2: [botocore] This release provides enhanced visibility into your SES identity verification status. This will offer you more actionable insights, enabling you to promptly address any verification-related issues.
api-change:transfer: [botocore] Documentation updates for AWS Transfer Family
api-change:xray: [botocore] This releases enhances GetTraceSummaries API to support new TimeRangeType Service to query trace summaries by segment end time.

geodesic - v2.7.0

Published by cloudpossebot about 1 year ago

This PR contains the following updates:

Package	Type	Update	Change
debian	final	minor	`11.7-slim` -> `11.8-slim`

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.29.62` -> `==1.29.63`
boto3	`==1.28.62` -> `==1.28.63`

Release Notes

`v1.29.63`

Compare Source

=======

api-change:auditmanager: This release introduces a new limit to the awsAccounts parameter. When you create or update an assessment, there is now a limit of 200 AWS accounts that can be specified in the assessment scope.
api-change:autoscaling: Update the NotificationMetadata field to only allow visible ascii characters. Add paginators to DescribeInstanceRefreshes, DescribeLoadBalancers, and DescribeLoadBalancerTargetGroups
api-change:config: Add enums for resource types supported by Config
api-change:controltower: Added new EnabledControl resource details to ListEnabledControls API and added new GetEnabledControl API.
api-change:customer-profiles: Adds sensitive trait to various shapes in Customer Profiles Calculated Attribute API model.
api-change:ec2: This release adds Ubuntu Pro as a supported platform for On-Demand Capacity Reservations and adds support for setting an Amazon Machine Image (AMI) to disabled state. Disabling the AMI makes it private if it was previously shared, and prevents new EC2 instance launches from it.
api-change:elbv2: Update elbv2 command to latest version
api-change:glue: Extending version control support to GitLab and Bitbucket from AWSGlue
api-change:inspector2: Add MacOs ec2 platform support
api-change:ivs-realtime: Update GetParticipant to return additional metadata.
api-change:lambda: Adds support for Lambda functions to access Dual-Stack subnets over IPv6, via an opt-in flag in CreateFunction and UpdateFunctionConfiguration APIs
api-change:location: This release adds endpoint updates for all AWS Location resource operations.
api-change:machinelearning: This release marks Password field as sensitive
api-change:pricing: Documentation updates for Price List
api-change:rds: This release adds support for adding a dedicated log volume to open-source RDS instances.
api-change:rekognition: Amazon Rekognition introduces support for Custom Moderation. This allows the enhancement of accuracy for detect moderation labels operations by creating custom adapters tuned on customer data.
api-change:sagemaker: Amazon SageMaker Canvas adds KendraSettings and DirectDeploySettings support for CanvasAppSettings
api-change:textract: This release adds 9 new APIs for adapter and adapter version management, 3 new APIs for tagging, and updates AnalyzeDocument and StartDocumentAnalysis API parameters for using adapters.
api-change:transcribe: This release is to enable m4a format to customers
api-change:workspaces: Updated the CreateWorkspaces action documentation to clarify that the PCoIP protocol is only available for Windows bundles.

`v1.28.63`

Compare Source

=======

api-change:auditmanager: [botocore] This release introduces a new limit to the awsAccounts parameter. When you create or update an assessment, there is now a limit of 200 AWS accounts that can be specified in the assessment scope.
api-change:autoscaling: [botocore] Update the NotificationMetadata field to only allow visible ascii characters. Add paginators to DescribeInstanceRefreshes, DescribeLoadBalancers, and DescribeLoadBalancerTargetGroups
api-change:config: [botocore] Add enums for resource types supported by Config
api-change:controltower: [botocore] Added new EnabledControl resource details to ListEnabledControls API and added new GetEnabledControl API.
api-change:customer-profiles: [botocore] Adds sensitive trait to various shapes in Customer Profiles Calculated Attribute API model.
api-change:ec2: [botocore] This release adds Ubuntu Pro as a supported platform for On-Demand Capacity Reservations and adds support for setting an Amazon Machine Image (AMI) to disabled state. Disabling the AMI makes it private if it was previously shared, and prevents new EC2 instance launches from it.
api-change:elbv2: [botocore] Update elbv2 client to latest version
api-change:glue: [botocore] Extending version control support to GitLab and Bitbucket from AWSGlue
api-change:inspector2: [botocore] Add MacOs ec2 platform support
api-change:ivs-realtime: [botocore] Update GetParticipant to return additional metadata.
api-change:lambda: [botocore] Adds support for Lambda functions to access Dual-Stack subnets over IPv6, via an opt-in flag in CreateFunction and UpdateFunctionConfiguration APIs
api-change:location: [botocore] This release adds endpoint updates for all AWS Location resource operations.
api-change:machinelearning: [botocore] This release marks Password field as sensitive
api-change:pricing: [botocore] Documentation updates for Price List
api-change:rds: [botocore] This release adds support for adding a dedicated log volume to open-source RDS instances.
api-change:rekognition: [botocore] Amazon Rekognition introduces support for Custom Moderation. This allows the enhancement of accuracy for detect moderation labels operations by creating custom adapters tuned on customer data.
api-change:sagemaker: [botocore] Amazon SageMaker Canvas adds KendraSettings and DirectDeploySettings support for CanvasAppSettings
api-change:textract: [botocore] This release adds 9 new APIs for adapter and adapter version management, 3 new APIs for tagging, and updates AnalyzeDocument and StartDocumentAnalysis API parameters for using adapters.
api-change:transcribe: [botocore] This release is to enable m4a format to customers
api-change:workspaces: [botocore] Updated the CreateWorkspaces action documentation to clarify that the PCoIP protocol is only available for Windows bundles.

geodesic - v2.6.0

Published by cloudpossebot about 1 year ago

This PR contains the following updates:

Package	Type	Update	Change
alpine	final	patch	`3.18.3` -> `3.18.4`
alpine	stage	patch	`3.18.3` -> `3.18.4`

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.29.30` -> `==1.29.62`
boto3	`==1.28.30` -> `==1.28.62`

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
crudini	`==0.9.4` -> `==0.9.5`

Release Notes

`v0.9.5`

Compare Source

Support converting whole ini file to shell syntax
Support getting/setting multiple items per invocation
Support indented ini files

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cryptography (changelog)	`==41.0.3` -> `==41.0.4`

GitHub Vulnerability Alerts

GHSA-v8gr-m533-ghj9

pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 2.5-41.0.3 are vulnerable to several security issues. More details about the vulnerabilities themselves can be found in https://www.openssl.org/news/secadv/20230908.txt.

If you are building cryptography source ("sdist") then you are responsible for upgrading your copy of OpenSSL. Only users installing from wheels built by the cryptography project (i.e., those distributed on PyPI) need to update their cryptography versions.

Release Notes

`v41.0.4`

Compare Source

geodesic - v2.5.1

Published by cloudpossebot about 1 year ago

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.29.25` -> `==1.29.30`
boto3	`==1.28.25` -> `==1.28.30`

api-change:mediapackage: [botocore] Fix SDK logging of certain fields.
api-change:omics: [botocore] This release provides support for annotation store versioning and cross account sharing for Omics Analytics
api-change:transfer: [botocore] Documentation updates for AWS Transfer Family

geodesic - v2.5.0 update `set-cluster` and `eks-update-kubeconfig` commands

Published by cloudpossebot about 1 year ago

🚀 Enhancements

what

Update eks-update-kubeconfig (and, indirectly, set-cluster) to support Tenants and new aws-teams configuration

why

Improved compatibility with current Cloud Posse reference architecture

usage and other support notes

The Geodesic set-cluster and eks-update-kubeconfig commands are helpers that are intended to make it easier to configure EKS cluster access for people using the Cloud Posse reference architecture. While admittedly brittle and somewhat complex, please keep in mind they are completely optional shortcuts that you are in no way forced to use if you do not like them. They are simply shortcuts to manage multiple KUBECONFIG files and build the full command, which you can use directly:

aws --profile <profile in cluster's account> --region <cluster region> eks update-kubeconfig --name=<cluster name>

The full set-cluster command is

set-cluster <cluster short name> <role short name>

The cluster short name is [tenant-]environment-stage which expands to namespace-[tenant-]-environment-stage-eks-cluster. If your cluster name does not follow this pattern, you can set a new pattern with EKS_CLUSTER_NAME_PATTERN but it is admittedly unwieldy.

The role short name is something like "admin" or "terraform" and is expected to be the suffix to an AWS config profile prefix of namespace-[tenant-]-gbl-stage-. So, for example, with NAMESPACE=eg and a Tenant named core:

set-cluster core-use1-dev developer

Would set up the eg-core-use1-dev-eks-cluster to be accessed by the eg-core-gbl-dev-developer profile.

The previous default role name is whatever role name you currently had. Now that we encourage aws-teams to use managers and devops as team names, this is no longer appropriate. The new default role name is admin, but this can be changed via the environment variable EKS_DEFAULT_AWS_ROLE.

Users using "tenant" labels can set a default Tenant value via export TENANT.

Other configuration is possible via environment variables; see the source at

rootfs/usr/local/bin/eks-update-kubeconfig
rootfs/etc/profile.d/set-cluster.sh

roadmap and other support notes

The Geodesic set-cluster and eks-update-kubeconfig are helper functions that are intended to make it easier to configure EKS cluster access for people using the Cloud Posse reference architecture. They do so by making a lot of assumptions about the name of the cluster, the structure of the name of the cluster, the name of available AWS "profiles", and the desired profile to use. This update is an interim update to better support recent changes in the Cloud Posse reference architecture.

These commands will never be fully general purpose. If you are not following Cloud Posse conventions, or even if you are but are using blue/green deployments, these commands may not work for you. Cloud Posse is NOT committed to making them more broadly usable. You can use them as starting points for your own shortcuts.

geodesic - v2.4.0 Update Alpine to v3.18.3

Published by cloudpossebot about 1 year ago

This PR contains the following updates:

Package	Type	Update	Change
alpine	final	patch	`3.18.2` -> `3.18.3`
alpine	stage	patch	`3.18.2` -> `3.18.3`

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.29.20` -> `==1.29.25`
boto3	`==1.28.20` -> `==1.28.25`

api-change:detective: [botocore] Updated the email validation regex to be in line with the TLD name specifications.
api-change:ivs-realtime: [botocore] Add QUOTA_EXCEEDED and PUBLISHER_NOT_FOUND to EventErrorCode for stage health events.
api-change:kinesis-video-archived-media: [botocore] This release enables minimum of Images SamplingInterval to be as low as 200 milliseconds in Kinesis Video Stream Image feature.
api-change:kinesisvideo: [botocore] This release enables minimum of Images SamplingInterval to be as low as 200 milliseconds in Kinesis Video Stream Image feature.
api-change:rekognition: [botocore] This release adds code snippets for Amazon Rekognition Custom Labels.

geodesic - v2.3.2

Published by cloudpossebot about 1 year ago

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.29.16` -> `==1.29.20`
boto3	`==1.28.16` -> `==1.28.20`

api-change:batch: [botocore] This release adds support for price capacity optimized allocation strategy for Spot Instances.
api-change:dms: [botocore] Adding new API describe-engine-versions which provides information about the lifecycle of a replication instance's version.
api-change:internetmonitor: [botocore] This release adds a new feature for Amazon CloudWatch Internet Monitor that enables customers to set custom thresholds, for performance and availability drops, for impact limited to a single city-network to trigger creation of a health event.
api-change:medialive: [botocore] AWS Elemental Link devices now report their Availability Zone. Link devices now support the ability to change their Availability Zone.
api-change:polly: [botocore] Amazon Polly adds new French Belgian voice - Isabelle. Isabelle is available as Neural voice only.
api-change:rds: [botocore] Added support for deleted clusters PiTR.
api-change:sagemaker: [botocore] Add Stairs TrafficPattern and FlatInvocations to RecommendationJobStoppingConditions

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cryptography (changelog)	`==41.0.2` -> `==41.0.3`

GitHub Vulnerability Alerts

GHSA-jm77-qphf-c4w8

pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 0.8-41.0.2 are vulnerable to several security issues. More details about the vulnerabilities themselves can be found in https://www.openssl.org/news/secadv/20230731.txt, https://www.openssl.org/news/secadv/20230719.txt, and https://www.openssl.org/news/secadv/20230714.txt.

Release Notes

`v41.0.3`

Compare Source

🏗️ Build/Release Maintenance

what

Update labeler from v2.1.0 to v4

why

Labeler version prior to v4 run on obsolete node12.

references

Runners use node16
Labeler update for node16

geodesic - v2.3.1

Published by cloudpossebot about 1 year ago

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.29.9` -> `==1.29.16`
boto3	`==1.28.9` -> `==1.28.16`

api-change:apigatewayv2: [botocore] Documentation updates for Amazon API Gateway.
api-change:ce: [botocore] This release introduces the new API 'GetSavingsPlanPurchaseRecommendationDetails', which retrieves the details for a Savings Plan recommendation. It also updates the existing API 'GetSavingsPlansPurchaseRecommendation' to include the recommendation detail ID.
api-change:chime-sdk-media-pipelines: [botocore] AWS Media Pipeline compositing enhancement and Media Insights Pipeline auto language identification.
api-change:cloudformation: [botocore] This release supports filtering by DRIFT_STATUS for existing API ListStackInstances and adds support for a new API ListStackInstanceResourceDrifts. Customers can now view resource drift information from their StackSet management accounts.
api-change:ec2: [botocore] Add "disabled" enum value to SpotInstanceState.
api-change:glue: [botocore] Added support for Data Preparation Recipe node in Glue Studio jobs
api-change:quicksight: [botocore] This release launches new Snapshot APIs for CSV and PDF exports, adds support for info icon for filters and parameters in Exploration APIs, adds modeled exception to the DeleteAccountCustomization API, and introduces AttributeAggregationFunction's ability to add UNIQUE_VALUE aggregation in tooltips.

geodesic - v2.3.0

Published by cloudpossebot about 1 year ago

🚀 Enhancements

what

Fix detection of GEODESIC_TRACE
Make Debian the default OS for make build

why

Bug fix
Debian is our recommended OS; Alpine is deprecated

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
PyYAML (source)	`==5.4.1` -> `==6.0.1`

Release Notes

`v6.0.1`

Compare Source

`v6.0`

Compare Source

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.27.165` -> `==1.29.9`
boto3	`==1.26.165` -> `==1.28.9`

feature:Useragent: [botocore] Update User-Agent header format
api-change:batch: [botocore] This feature allows customers to use AWS Batch with Linux with ARM64 CPU Architecture and X86_64 CPU Architecture with Windows OS on Fargate Platform.
api-change:sagemaker: [botocore] SageMaker Inference Recommender now accepts new fields SupportedEndpointType and ServerlessConfiguration to support serverless endpoints.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cryptography (changelog)	`==41.0.1` -> `==41.0.2`

GitHub Vulnerability Alerts

CVE-2023-38325

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.

Release Notes

`v41.0.2`

Compare Source

geodesic - v2.2.4

Published by cloudpossebot over 1 year ago

what

Remove --quiet option from Docker command that checks if Geodesic is already running

why

Starting with Docker CLI version 24.0.0, the --quiet option overrides the --format option. For backward compatibility, we prefer to continue to use the --format option, even thought the format is that same as that produced by v24 --quiet.

notes

Resolves warning on starting Geodesic:

WARNING: Ignoring custom format, because both --format and --quiet are set.

This PR contains the following updates:

Package	Type	Update	Change
alpine	final	minor	`3.17.3` -> `3.18.2`
alpine	stage	minor	`3.17.3` -> `3.18.2`

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.27.157` -> `==1.27.165`
boto3	`==1.26.157` -> `==1.26.165`

api-change:dynamodb: [botocore] Documentation updates for DynamoDB
api-change:emr: [botocore] Update emr client to latest version
api-change:inspector2: [botocore] This release adds support for Software Bill of Materials (SBOM) export and the general availability of code scanning for AWS Lambda functions.
api-change:mediaconvert: [botocore] This release introduces the bandwidth reduction filter for the HEVC encoder, increases the limits of outputs per job, and updates support for the Nagra SDK to version 1.14.7.
api-change:mq: [botocore] The Cross Region Disaster Recovery feature allows to replicate a brokers state from one region to another in order to provide customers with multi-region resiliency in the event of a regional outage.
api-change:sagemaker: [botocore] This release provides support in SageMaker for output files in training jobs to be uploaded without compression and enable customer to deploy uncompressed model from S3 to real-time inference Endpoints. In addition, ml.trn1n.32xlarge is added to supported instance type list in training job.
api-change:transfer: [botocore] This release adds a new parameter StructuredLogDestinations to CreateServer, UpdateServer APIs.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.27.153` -> `==1.27.157`
boto3	`==1.26.153` -> `==1.26.157`

api-change:auditmanager: [botocore] This release introduces 2 Audit Manager features: CSV exports and new manual evidence options. You can now export your evidence finder results in CSV format. In addition, you can now add manual evidence to a control by entering free-form text or uploading a file from your browser.
api-change:efs: [botocore] Update efs client to latest version
api-change:guardduty: [botocore] Updated descriptions for some APIs.
api-change:location: [botocore] Amazon Location Service adds categories to places, including filtering on those categories in searches. Also, you can now add metadata properties to your geofences.

geodesic - v2.2.3

Published by cloudpossebot over 1 year ago

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.27.146` -> `==1.27.153`
boto3	`==1.26.146` -> `==1.26.153`

api-change:cloudformation: [botocore] AWS CloudFormation StackSets provides customers with three new APIs to activate, deactivate, and describe AWS Organizations trusted access which is needed to get started with service-managed StackSets.
api-change:ec2: [botocore] Making InstanceTagAttribute as the required parameter for the DeregisterInstanceEventNotificationAttributes and RegisterInstanceEventNotificationAttributes APIs.
api-change:finspace: [botocore] Releasing new Managed kdb Insights APIs
api-change:frauddetector: [botocore] Added new variable types, new DateTime data type, and new rules engine functions for interacting and working with DateTime data types.
api-change:keyspaces: [botocore] This release adds support for MRR GA launch, and includes multiregion support in create-keyspace, get-keyspace, and list-keyspace.
api-change:kms: [botocore] This release includes feature to import customer's asymmetric (RSA and ECC) and HMAC keys into KMS. It also includes feature to allow customers to specify number of days to schedule a KMS key deletion as a policy condition key.
api-change:lambda: [botocore] Add Ruby 3.2 (ruby3.2) Runtime support to AWS Lambda.
api-change:mwaa: [botocore] This release adds ROLLING_BACK and CREATING_SNAPSHOT environment statuses for Amazon MWAA environments.

geodesic - v2.2.2

Published by cloudpossebot over 1 year ago

what

fixed intent typo

why

should be spelled "indent"

references

https://cloudposse.slack.com/archives/C01EY65H1PA/p1685638634845009

🧰 Included Tools

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
awscli (source, changelog)	`==1.27.137` -> `==1.27.146`
boto3	`==1.26.137` -> `==1.26.146`

api-change:backup: [botocore] Added support for tags on restore.
api-change:pinpoint: [botocore] Amazon Pinpoint is deprecating the tags parameter in the UpdateSegment, UpdateCampaign, UpdateEmailTemplate, UpdateSmsTemplate, UpdatePushTemplate, UpdateInAppTemplate and UpdateVoiceTemplate. Amazon Pinpoint will end support tags parameter by May 22, 2023.
api-change:quicksight: [botocore] Add support for Asset Bundle, Geospatial Heatmaps.