Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add fips mode to the Agent #28659

Closed
wants to merge 20 commits into from
Closed

Add fips mode to the Agent #28659

wants to merge 20 commits into from

Commits on Sep 5, 2024

  1. feat: update buildimages to use microsoft Go toolchain 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    ef7bc1c View commit details
    Browse the repository at this point in the history

  2. feat: add fips_mode arguments in build tasks 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    6be8c31 View commit details
    Browse the repository at this point in the history

  3. feat: create openssl fips software definition and add resources for o… 

    …penssl installation

Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    5338625 View commit details
    Browse the repository at this point in the history

  4. feat: run fipsinstall.sh after installing package and before running … 

    …container cmd

Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    11b5d12 View commit details
    Browse the repository at this point in the history

  5. test: add job to check openssl symbols in agent binaries 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    c3069b1 View commit details
    Browse the repository at this point in the history

  6. feat: enable fips_mode only for linux and windows 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    638e529 View commit details
    Browse the repository at this point in the history

Commits on Sep 9, 2024

  1. feat: use openssl 3.0.9 FIPS provider 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 9, 2024
    Configuration menu
    Copy the full SHA
    f568f17 View commit details
    Browse the repository at this point in the history

Commits on Sep 11, 2024

  1. chore: update openssl to version 3.0.15 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 11, 2024
    Configuration menu
    Copy the full SHA
    235a5ef View commit details
    Browse the repository at this point in the history

Commits on Sep 12, 2024

  1. fix: remove fipsmodule by hand to make sure the whole /opt/datadog-ag… 

    …ent is removed during uninstall

Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 12, 2024
    Configuration menu
    Copy the full SHA
    1a76b81 View commit details
    Browse the repository at this point in the history

Commits on Sep 23, 2024

  1. test: add compliance e2e tests 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 23, 2024
    Configuration menu
    Copy the full SHA
    b38e818 View commit details
    Browse the repository at this point in the history

  2. test: check symbols before stripping symbols 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 23, 2024
    Configuration menu
    Copy the full SHA
    da4668a View commit details
    Browse the repository at this point in the history

  3. fix: lint issues 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 23, 2024
    Configuration menu
    Copy the full SHA
    1d31f3d View commit details
    Browse the repository at this point in the history

Commits on Sep 24, 2024

  1. fix: fix typos 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 24, 2024
    Configuration menu
    Copy the full SHA
    0e3ad3f View commit details
    Browse the repository at this point in the history

  2. Merge branch 'main' into nicolas.guerguadj/add-fips-mode

    @Kaderinho
    Kaderinho committed Sep 24, 2024
    Configuration menu
    Copy the full SHA
    f060eec View commit details
    Browse the repository at this point in the history

Commits on Sep 25, 2024

  1. debug: add temporary workaround to avoid failure when building system… 

    …-probe binaries
    @Kaderinho
    Kaderinho committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    554a829 View commit details
    Browse the repository at this point in the history

  2. fix: filter internal deps and add a few deps coming from MSGO

    @Kaderinho
    Kaderinho committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    12da110 View commit details
    Browse the repository at this point in the history

  3. fix: forward fips_mode argument when building system probe on windows 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    5a170c1 View commit details
    Browse the repository at this point in the history

  4. fix: move fips_compliance e2e tests after containers release stage 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    98faafe View commit details
    Browse the repository at this point in the history

  5. fix: don't source bashrc for kmt sysprobe tests 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    9406eb3 View commit details
    Browse the repository at this point in the history

  6. fix: give more time before restarting fips-server in e2e tests 

    Signed-off-by: Nicolas Guerguadj <nicolas.guerguadj@datadoghq.com>
    @Kaderinho
    Kaderinho committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    8122e72 View commit details
    Browse the repository at this point in the history