cfn-guardian 0.7.12 → 0.7.15

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 417f7145c2f3ed6aad68367aed3a0390079df27be61d8cf8ac32909d349b3483
-  data.tar.gz: c5626e55e419a321a3be745dabb9cedb268a6552bedbf45834ebe448c42ecaf4
+  metadata.gz: 567efd39fc8d796033685c545fd64681422c060455c92581400dc9fe6345595b
+  data.tar.gz: 645a2e2184b33a38e1f53f2a7fd88746f9a16424d80df81070e5703857a9a1cf
 SHA512:
-  metadata.gz: 19940d4b1a253b4fd2a87994a6232ecc0e93108fb565fe1d6ad20b9f813ad7a8a05ce2c67a3307bddcbb28142f48907f246a8da1328facf8be5567c0e4a7856b
-  data.tar.gz: 99c1c4aae4a204495e47010a81e091a3ebf20a33df5746a69ba964bb23af90cfdaba322d1f948a3978893b86e419269e1f9a6da793816d1fb05b48324361b3df
+  metadata.gz: 108eae0146b64f8a3d68027fd8b97509cfedb838aa7ecb0f4dff8cdb55c238112a379deb9ce5003bc04146a1bd400a4ca9983e54a24deff8dbb619136af8ba22
+  data.tar.gz: 9df078700af6df291765e7ef78ab100ef0076e54a5b846f9ed161a8d4349f04c2b46e655ea975808ee3f8388d6a56d5b77fb32c275bd0ce1357a43e0cb5ea1f9

data/.github/workflows/push.yml

@@ -0,0 +1,36 @@
+name: build image
+on:
+  push:
+    branches:
+      - master
+      - feature/*
+    
+jobs:
+  build:
+    name: Build + Publish Container Image
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Check out the repo
+      uses: actions/checkout@v2
+
+    - name: Inject slug/short variables
+      uses: rlespinasse/github-slug-action@v3.x  
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v1
+
+    - name: Login to  GitHub Container Repository
+      uses: docker/login-action@v1
+      with:
+        registry: ghcr.io
+        username: ${{ github.repository_owner }}
+        password: ${{ secrets.GHCR_PUSH_TOKEN }}
+
+    - name: Build and push Container Image to GitHub Container Repository
+      uses: docker/build-push-action@v2
+      with:
+        context: .
+        file: ./Dockerfile
+        push: true
+        tags: ghcr.io/base2services/guardian:snapshot_${{env.GITHUB_REF_SLUG}}

data/Dockerfile

@@ -1,6 +1,8 @@
 FROM ruby:2.7-alpine
 
-ARG GUARDIAN_VERSION="0.7.7"
+LABEL "org.opencontainers.image.source"="https://github.com/base2Services/cfn-guardian"
+
+ARG GUARDIAN_VERSION="*"
 
 COPY . /src
 

data/docs/notifiers.md

@@ -24,10 +24,10 @@ Topics:
   Informational: arn:aws:sns:ap-southeast-2:123456789012:Informational
   Custom: arn:aws:sns:ap-southeast-2:123456789012:Custom
 
-Template:
+Templates:
   Ec2Instance:
     GroupOverrides:
-      AlarmActions:
+      AlarmAction:
       - Critical
       - Custom
 ```

data/docs/overview.md

@@ -6,7 +6,7 @@
 3. [Alarm Templates](alarm_templates.md)
 4. Custom Checks
     1. [HTTP](custom_checks/http.md)
-    2. [Domain Expirey](custom_checks/domain_expirey.md)
+    2. [Domain Expiry](custom_checks/domain_expiry.md)
     3. [LogGroup Metric Filters](custom_checks/log_group_metric_filters.md)
     4. [NRPE](custom_checks/nrpe.md)
     5. [Port](custom_checks/port.md)

data/docs/resources.md

@@ -56,6 +56,8 @@ Resources:
 | CloudFrontDistribution      | Id               |
 | SQSQueue                    | Id               |
 | ElasticSearch               | Id, Domain       |
+| DMSCluster                  | Id               |
+| DMSTask                     | Id, Instance     |
 
 
 ## Custom Resource Groups

data/lib/cfnguardian/compile.rb

@@ -12,6 +12,8 @@ require 'cfnguardian/resources/autoscaling_group'
 require 'cfnguardian/resources/cloudfront_distribution'
 require 'cfnguardian/resources/autoscaling_group'
 require 'cfnguardian/resources/domain_expiry'
+require 'cfnguardian/resources/dms_task'
+require 'cfnguardian/resources/dms_cluster'
 require 'cfnguardian/resources/documentdb_cluster'
 require 'cfnguardian/resources/dynamodb_table'
 require 'cfnguardian/resources/ec2_instance'

data/lib/cfnguardian/models/alarm.rb

@@ -154,6 +154,29 @@ module CfnGuardian
       end
     end
 
+    class DMSTaskAlarm < BaseAlarm
+      def initialize(resource)
+        super(resource)
+        @group = 'DMSTask'
+        @namespace = 'AWS/DMS'
+        @dimensions = { 
+          ReplicationTaskIdentifier: resource['Id'],
+          ReplicationInstanceIdentifier: resource['Instance']
+         }
+      end
+    end
+
+    class DMSClusterAlarm < BaseAlarm
+      def initialize(resource)
+        super(resource)
+        @group = 'DMSCluster'
+        @namespace = 'AWS/DMS'
+        @dimensions = { 
+          ReplicationInstanceIdentifier: resource['Id']
+         }
+      end
+    end
+
     class DocumentDBClusterAlarm < BaseAlarm
       def initialize(resource)
         super(resource)
@@ -506,7 +529,11 @@ module CfnGuardian
         super(resource)
         @group = 'Jenkins'
         @namespace = 'Ciinabox/Jenkins'
-        @dimensions = { Jenkins: resource['Id'], Monitoring: 'JenkMon' }
+        @dimensions = { 
+          Jenkins: resource['Id'],
+          Label: resource['Label'],
+          Monitoring: 'JenkMon'
+        }
       end
     end
 

data/lib/cfnguardian/models/check.rb

@@ -64,7 +64,7 @@ module CfnGuardian
         @package = 'port-check'
         @handler = 'handler.port_check'
         @version = '356203b2a720ba0730622f978e677b88f8d0c328'
-        @runtime = 'python3.6'
+        @runtime = 'python3.7'
       end
     end
     
@@ -152,7 +152,7 @@ module CfnGuardian
         @package = 'ecs-containder-instance-check'
         @handler = 'handler.run_check'
         @version = '4f650d5846d6e8d19f0139bccdeeb147f03f0dd6'
-        @runtime = 'python3.6'
+        @runtime = 'python3.7'
       end
     end
     

data/lib/cfnguardian/resources/dms_cluster.rb

@@ -0,0 +1,40 @@
+module CfnGuardian::Resource
+  class DMSCluster < Base
+    
+    def default_alarms 
+      alarm = CfnGuardian::Models::DMSClusterAlarm.new(@resource)
+      alarm.name = 'CPUUtilizationHighSpike'
+      alarm.metric_name = 'CPUUtilization'
+      alarm.threshold = 90
+      alarm.statistic = 'Minimum'
+      alarm.evaluation_periods = 10
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::DMSClusterAlarm.new(@resource)
+      alarm.name = 'CPUUtilizationHighBase'
+      alarm.metric_name = 'CPUUtilization'
+      alarm.threshold = 95
+      alarm.evaluation_periods = 2
+      alarm.statistic = 'Maximum'
+      alarm.alarm_action = 'Warning'
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::DMSClusterAlarm.new(@resource)
+      alarm.name = 'FreeStorageSpaceCrit'
+      alarm.metric_name = 'FreeStorageSpace'
+      alarm.statistic = 'Minimum'
+      alarm.threshold = 10000000000
+      alarm.evaluation_periods = 1
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::DMSClusterAlarm.new(@resource)
+      alarm.name = 'FreeStorageSpaceWarn'
+      alarm.metric_name = 'FreeStorageSpace'
+      alarm.statistic = 'Minimum'
+      alarm.threshold = 20000000000
+      alarm.evaluation_periods = 1
+      alarm.alarm_action = 'Warning'
+      @alarms.push(alarm)
+    end
+  end
+end

data/lib/cfnguardian/resources/dms_task.rb

@@ -0,0 +1,42 @@
+module CfnGuardian::Resource
+  class DMSTask < Base
+    
+    def default_alarms             
+      alarm = CfnGuardian::Models::DMSTaskAlarm.new(@resource)
+      alarm.name = 'CDCLatencySourceCritical'
+      alarm.metric_name = 'CDCLatencySource'
+      alarm.statistic = 'Minimum'
+      alarm.threshold = 30
+      alarm.evaluation_periods = 10
+      alarm.enabled = false
+      @alarms.push(alarm)
+      
+      alarm = CfnGuardian::Models::DMSTaskAlarm.new(@resource)
+      alarm.name = 'CDCLatencySourceWarn'
+      alarm.metric_name = 'CDCLatencySource'
+      alarm.statistic = 'Minimum'
+      alarm.threshold = 30
+      alarm.evaluation_periods = 1
+      alarm.enabled = false
+      @alarms.push(alarm)
+
+      alarm = CfnGuardian::Models::DMSTaskAlarm.new(@resource)
+      alarm.name = 'CDCLatencyTargetCritical'
+      alarm.metric_name = 'CDCLatencyTarget'
+      alarm.statistic = 'Minimum'
+      alarm.threshold = 30
+      alarm.evaluation_periods = 10
+      alarm.enabled = false
+      @alarms.push(alarm)
+
+      alarm = CfnGuardian::Models::DMSTaskAlarm.new(@resource)
+      alarm.name = 'CDCLatencyTargetWarn'
+      alarm.metric_name = 'CDCLatencyTarget'
+      alarm.statistic = 'Minimum'
+      alarm.threshold = 30
+      alarm.evaluation_periods = 1
+      alarm.enabled = false
+      @alarms.push(alarm)
+    end
+  end
+end

data/lib/cfnguardian/resources/jenkins.rb

@@ -1,14 +1,15 @@
 module CfnGuardian::Resource
     class Jenkins < Base
-
         def default_alarms
+            # evaluate this alarm every hour but only alert if there is no data point after 25 hours
             alarm = CfnGuardian::Models::JenkinsAlarm.new(@resource)
-            alarm.name = 'NoSuccess'
-            alarm.metric_name = 'Success'
+            alarm.name = 'HealthyAgent'
+            alarm.metric_name = 'HealthyAgent'
             alarm.statistic = 'Maximum'
             alarm.treat_missing_data = 'breaching'
             alarm.alarm_action = 'Warning'
-            alarm.period = 3600
+            alarm.period = 3600 # 1 hour
+            alarm.evaluation_periods = 24 # 24 hours
             alarm.comparison_operator = 'LessThanThreshold'
             alarm.threshold = 1
             @alarms.push(alarm)

data/lib/cfnguardian/version.rb

@@ -1,4 +1,4 @@
 module CfnGuardian
-  VERSION = "0.7.12"
+  VERSION = "0.7.15"
   CHANGE_SET_VERSION = VERSION.gsub('.', '-').freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cfn-guardian
 version: !ruby/object:Gem::Version
-  version: 0.7.12
+  version: 0.7.15
 platform: ruby
 authors:
 - Guslington
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-02-08 00:00:00.000000000 Z
+date: 2022-05-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor
@@ -222,6 +222,7 @@ extra_rdoc_files: []
 files:
 - ".dockerignore"
 - ".github/workflows/build-gem.yml"
+- ".github/workflows/push.yml"
 - ".github/workflows/release-gem.yml"
 - ".github/workflows/release-image.yml"
 - ".gitignore"
@@ -280,6 +281,8 @@ files:
 - lib/cfnguardian/resources/base.rb
 - lib/cfnguardian/resources/batch.rb
 - lib/cfnguardian/resources/cloudfront_distribution.rb
+- lib/cfnguardian/resources/dms_cluster.rb
+- lib/cfnguardian/resources/dms_task.rb
 - lib/cfnguardian/resources/documentdb_cluster.rb
 - lib/cfnguardian/resources/domain_expiry.rb
 - lib/cfnguardian/resources/dynamodb_table.rb