From 96e04fde07586b7bcc0d7ba64be160e6d6f1a0ce Mon Sep 17 00:00:00 2001 From: Hemanth Gokavarapu Date: Mon, 8 Aug 2022 12:18:25 +0530 Subject: [PATCH 1/3] Test changes with new changeset Signed-off-by: Hemanth Gokavarapu --- .../AutoScaling/AutoScalingMultiAZWithNotifications.yaml | 2 +- kubernetes/job/prowler.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/cloudformation/AutoScaling/AutoScalingMultiAZWithNotifications.yaml b/cloudformation/AutoScaling/AutoScalingMultiAZWithNotifications.yaml index 5e08054..d2a7617 100644 --- a/cloudformation/AutoScaling/AutoScalingMultiAZWithNotifications.yaml +++ b/cloudformation/AutoScaling/AutoScalingMultiAZWithNotifications.yaml @@ -13,7 +13,7 @@ Parameters: InstanceType: Description: WebServer EC2 instance type Type: String - Default: t2.small + Default: m1.xlarge AllowedValues: [t1.micro, t2.nano, t2.micro, t2.small, t2.medium, t2.large, m1.small, m1.medium, m1.large, m1.xlarge, m2.xlarge, m2.2xlarge, m2.4xlarge, m3.medium, m3.large, m3.xlarge, m3.2xlarge, m4.large, m4.xlarge, m4.2xlarge, m4.4xlarge, diff --git a/kubernetes/job/prowler.yaml b/kubernetes/job/prowler.yaml index c48d52a..43a6a6b 100644 --- a/kubernetes/job/prowler.yaml +++ b/kubernetes/job/prowler.yaml @@ -11,4 +11,4 @@ spec: imagePullPolicy: Always #command: [ "/prowler/soluble-prowler" ] args: [ "-M", "json,html" ] - restartPolicy: Never + restartPolicy: Always From ca9a5b61c68974a4aaccb2ebf0c179cddf111528 Mon Sep 17 00:00:00 2001 From: Hemanth Gokavarapu Date: Mon, 8 Aug 2022 12:30:09 +0530 Subject: [PATCH 2/3] Introduce some vulnerability and check Signed-off-by: Hemanth Gokavarapu --- kubernetes/deployments/aws-deployment.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/kubernetes/deployments/aws-deployment.yaml b/kubernetes/deployments/aws-deployment.yaml index b9aa6e5..cfd09e2 100644 --- a/kubernetes/deployments/aws-deployment.yaml +++ b/kubernetes/deployments/aws-deployment.yaml @@ -30,6 +30,7 @@ spec: labels: app: my-app spec: + hostIPC: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: From c4a5a6022eaafb239de871f213d3de1f3ac3ed1a Mon Sep 17 00:00:00 2001 From: Hemanth Gokavarapu Date: Mon, 8 Aug 2022 12:41:07 +0530 Subject: [PATCH 3/3] Test the cloudformation changes Signed-off-by: Hemanth Gokavarapu --- .../ELBGuidedAutoScalingRollingUpgrade.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cloudformation/ElasticLoadBalancing/ELBGuidedAutoScalingRollingUpgrade.yaml b/cloudformation/ElasticLoadBalancing/ELBGuidedAutoScalingRollingUpgrade.yaml index 591c9af..e3ed403 100644 --- a/cloudformation/ElasticLoadBalancing/ELBGuidedAutoScalingRollingUpgrade.yaml +++ b/cloudformation/ElasticLoadBalancing/ELBGuidedAutoScalingRollingUpgrade.yaml @@ -1,5 +1,5 @@ AWSTemplateFormatVersion: '2010-09-09' -Metadata: +Metadata: License: Apache-2.0 Description: 'AWS CloudFormation Sample Template ELBGuidedAutoScalingRollingUpdates: This example creates an auto scaling group behind a load balancer with a simple @@ -463,7 +463,7 @@ Resources: - IpProtocol: tcp FromPort: '22' ToPort: '22' - CidrIp: !Ref 'SSHLocation' + CidrIp: 0.0.0.0/0 - IpProtocol: tcp FromPort: '80' ToPort: '80'