docs: add aws ami build & deploy workflow guide#67
Merged
Conversation
**Added:** - Introduced a comprehensive AWS AMI build & deploy workflow guide detailing warpgate AMI creation, Terragrunt configuration, infrastructure deployment, and Ansible provisioning in `docs/mkdocs/docs/providers/aws-ami-workflow.md` **Changed:** - Updated main `README.md` to reference the new AWS AMI workflow guide for easier discoverability - Added the AWS AMI Workflow page to the MkDocs navigation in `docs/mkdocs/mkdocs.yml` for better documentation structure and access
dreadnode-renovate-bot
Bot
added
area/readme
**Added:** - Detailed explanation of `--env` and `--region` flags, including their mapping to Terragrunt directories and Ansible inventories, with usage table and config options - Guidance on duplicating environment directory trees and editing `env.hcl` for new environments - Example CLI commands showing how to specify `--env` and `--region` for provisioning, health checks, and validation - Tips on using persistent config defaults to simplify CLI usage **Changed:** - Updated CLI command examples throughout to explicitly include `--env` and `--region` flags for clarity and to match new documentation sections - Clarified workflow steps to emphasize the importance of consistent environment and region selection across provisioning and validation tasks
**Added:** - Documented the recommended workflow for stopping, fixing, and resuming provisioning in `provisioning.md`, including usage of `--from` and retry strategies - Described how to resume failed provisioning runs and clarified CLI behavior in `aws-ami-workflow.md` - Added `network_setup.yml` as the initial playbook in the default playbook sequence to ensure network setup precedes other provisioning steps **Changed:** - Improved SSM session management by cleaning up stale sessions before and between playbook runs, and waiting for SSM agent reconnection after reboots in `provision.go` - Refactored SSM session cleanup to a public `CleanupSSMSessions` function in `retry.go` and updated all internal calls accordingly - Enhanced instance-to-IP mapping generation to always run before provisioning to avoid slow Ansible runtime detection in AWS environments - Updated `dev-inventory` with explicit `dc_ipv4` and `host_ipv4` mappings for all domain controllers and servers, and added a flag to indicate AWS instances use a single network adapter - Refined documentation in `GOAD-vulnerabilities-comprehensive.md` for clarity, conciseness, and up-to-date coverage information - Improved related documentation references and removed outdated support info in `validation.md` - Updated `.gitignore` to exclude Ansible artifact files matching `*AnsiballZ*` - Set `fact_caching_connection` in `ansible.cfg` to ensure consistent fact caching location **Removed:** - Removed the unused `lab` variable from the `ad-trusts.yml` playbook to clean up inputs - Removed repetitive and obsolete conclusion and support sections from documentation files
dreadnode-renovate-bot
Bot
added
the
area/playbooks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Key Changes:
Added:
using warpgate, Terragrunt, and Ansible - added
docs/mkdocs/docs/providers/aws-ami-workflow.mddeploying infrastructure, and provisioning with Ansible
Changed:
visibility of AWS deployment instructions
documentation easier to access from the sidebar
Removed: