Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/ooni/devops

https://github.com/ooni/devops

Airflow/pg allow

hellais opened this pull request 4 days ago

Changed ooniprobe service branch to test new login and register endpoint

LDiazN opened this pull request 8 days ago

Modify postgresql config

hellais opened this pull request 10 days ago

There are EC2 instances and ECS services that expose HTTP/HTTPS to the internet rather than only accepting connections via the load balancer

jbonisteel opened this issue 11 days ago

The CloudWatch retention period is not set

jbonisteel opened this issue 11 days ago

VPC flow logs are not enabled in the VPC

jbonisteel opened this issue 11 days ago

ESC task definitions use the bridge networking mode rather than the recommended awsvpc mode

jbonisteel opened this issue 11 days ago

The ooniapi, oonidata, and oonith services are exposed without a web application firewall

jbonisteel opened this issue 11 days ago

The length of an email address is not validated before the email address is checked for validity with a regular expression

jbonisteel opened this issue 11 days ago

There are SecretsManager secret resources without a KMS ID supplied, leading to the default Customer Master Key being used

jbonisteel opened this issue 11 days ago

The AWS Application Load balancer can drop requests with invalid headers, but this is not enabled

jbonisteel opened this issue 11 days ago

HTTP services do not automatically redirect to HTTPS

jbonisteel opened this issue 11 days ago

Fix expiration and rotate JWT secret in dev

hellais opened this pull request 11 days ago

Increase clickhouse memory

hellais opened this pull request 15 days ago

Finish setup of clickhouse proxy

hellais opened this issue 16 days ago

refactor: move clickhouseproxy to use generic ec2 module

DecFox opened this pull request 16 days ago

Update configuration and deploy new oonimeasurements service to dev

hellais opened this issue 16 days ago

Add tony luis

hellais opened this pull request 17 days ago

Add Tony to ssh users

hynnot opened this pull request 18 days ago

Access Request

LDiazN opened this pull request 18 days ago

Move clickhouse from backend-fsn over to clickhouse cluster

hellais opened this issue 18 days ago

Updates to devops docs

hellais opened this pull request 18 days ago

Integrate docs from ooni/docs into devops repo

hellais opened this pull request 19 days ago

Add support for deploying airflow

hellais opened this pull request about 1 month ago

Setup hot-standby replica for clickhouse cluster

hellais opened this issue about 1 month ago

refactor: drop monitoring for db1 and amsmatomo

DecFox opened this pull request about 1 month ago

Migrate ams-matomo.ooni.nu

hellais opened this issue about 1 month ago

Migrate db-1.proteus.ooni.io

hellais opened this issue about 1 month ago

Investigate login issues for codesign-box

hellais opened this issue about 1 month ago

Investigate potential redirect loop in reverse proxy setup

hellais opened this issue about 1 month ago

Deploy airflow instance for periodic tasks

hellais opened this issue about 1 month ago

Request access to notebook.ooni.org

agiix opened this pull request about 1 month ago

Add support for deploying backend/api using Docker

hellais opened this issue about 2 months ago

Allow running backend-fsn/hel on EC2

hellais opened this issue about 2 months ago

Migrate/Discontinue greenhost machines

hellais opened this issue about 2 months ago

Epic: Discontinue, migrate or document legacy hosts

hellais opened this issue about 2 months ago

refactor: make backend-hel functional as the test server

DecFox opened this pull request about 2 months ago

Add monitoring

hellais opened this pull request about 2 months ago

feat: add ansible config to make `backend-hel` as the primary test server

DecFox opened this pull request about 2 months ago

Oonidata

hellais opened this pull request 2 months ago

Add credentials for notebook server

felixhoffmnn opened this pull request 2 months ago

Switch to using parameter store for storing secrets

hellais opened this issue 2 months ago

fix: forward X-Real-IP header

DecFox opened this pull request 2 months ago

Prod pipeline v5

hellais opened this pull request 2 months ago

Setup replication on production clickhouse instance

hellais opened this issue 3 months ago

Setup `backend-hel.ooni.org` as the primary test server

DecFox opened this issue 3 months ago

Consolidate ooni data related hosts

hellais opened this issue 3 months ago

Rotate docker log files after 100MB

hellais opened this pull request 3 months ago

refactor(prod): switch to using t3a.medium instances

DecFox opened this pull request 4 months ago

fix(prod): increase asg min capacity

DecFox opened this pull request 4 months ago

Data.ooni.org

hellais opened this pull request 4 months ago

Setup monitoring of ECS nodes

hellais opened this issue 4 months ago

Setup direct monitoring of digital ocean VPSs

hellais opened this issue 4 months ago

Support accessing production api via api.ooni.org

hellais opened this pull request 4 months ago

Manage upgrade of data.ooni.org disk

hellais opened this issue 5 months ago

feat: add clickhouse proxy instance

DecFox opened this pull request 5 months ago

refactor frontend ELB to allow access to metric endpoint paths

DecFox opened this issue 5 months ago

fix: remove microservice hosts from alerts

DecFox opened this pull request 5 months ago

refactor: remove individual load balancers from services

DecFox opened this pull request 5 months ago

Consolidate dev and prod deployments and switch th back to DO

hellais opened this pull request 5 months ago

Setup communication between AWS and clickhouse DB running on backend-hel.ooni.org

hellais opened this issue 5 months ago

Switch api.ooni.io to be served from AWS

hellais opened this issue 5 months ago

Reduce the number of load balancer groups on dev and prod

hellais opened this issue 5 months ago

Reproduce the same setup without NAT gateways and all optimizations on prod

hellais opened this issue 5 months ago

Move test helpers back to digital ocean

hellais opened this issue 5 months ago

fix(scripts): add missing tags column while migrating

DecFox opened this pull request 5 months ago

feat: add oonifindings migration script

DecFox opened this pull request 5 months ago

fix: allow egress routing from private subnet

DecFox opened this pull request 6 months ago

fix: remove nat gateways from dev environment

DecFox opened this pull request 6 months ago

`backend-hel.ooni.org` is out of sync with `backend-fsn.ooni.org`

DecFox opened this issue 6 months ago

Investigate high costs related to cloudwatch

hellais opened this issue 6 months ago

Drop NAT gateways and public IPs from dev environment

hellais opened this issue 6 months ago

Code sign box

hellais opened this pull request 6 months ago

Initial setup of OONI Pipeline v5 deployment

hellais opened this issue 6 months ago

Cloudhsm debug

hellais opened this pull request 6 months ago

Openvpn

hellais opened this pull request 6 months ago

Start fleshing out the playbook for data.ooni.org

hellais opened this pull request 6 months ago

feat: use galaxy module to configure sshd

DecFox opened this pull request 6 months ago

feat: deploy ooniprobe service to prod

DecFox opened this pull request 6 months ago

Add support for setting up ansible-galaxy on the controller node

jbonisteel opened this issue 7 months ago

Add support for setting up ansible-galaxy on the controller node

hellais opened this pull request 7 months ago

feat: add norbel to admin users

DecFox opened this pull request 7 months ago

Add support for applying ssh_users role to legacy hosts

hellais opened this pull request 7 months ago

Ensure ssh_users works on legacy hosts

hellais opened this issue 7 months ago

Add new user and role for ansible

hellais opened this pull request 7 months ago

Drop pg from monitoring

hellais opened this pull request 7 months ago

Setup controller

hellais opened this pull request 7 months ago

Add terraform config for the ansible_controller

hellais opened this pull request 7 months ago

Create a control node for running ansible

hellais opened this issue 7 months ago

Setup incident response and status page for OONI related resources

hellais opened this issue 7 months ago

Setup production deployment for data.ooni.org

hellais opened this issue 7 months ago

Shut down all unneeded droplets on Digital Ocean

hellais opened this issue 7 months ago

Move oonidata and data from sysadmin to devops

DecFox opened this issue 7 months ago

Optimize Infrastructure for reduced AWS costs

DecFox opened this issue 7 months ago

feat: ipv6 support in ooni-backendproxy

DecFox opened this pull request 8 months ago

cleanup: sync github user config with console config

DecFox opened this pull request 8 months ago

feat: add trigger filters to aws codepipeline

DecFox opened this pull request 8 months ago

feat: oonimeasurements service deployment

DecFox opened this pull request 8 months ago

feat: oonifindings container deployment

DecFox opened this pull request 8 months ago

cleanup: destroy quic.ooni.org domain

DecFox opened this pull request 8 months ago