Vijay Veeranki

## Background We often get question relating to modsec which requires workarounds or guidance. We should create a runbook for frequently asked questions and solutions. We will add to this...

## Background We received an alert related to EBS Active snapshots, where the limit is 100000 and the current usage is 80205. Looking further noticed that we have snapshots from...

## Background Update runbook: Get an audit log from modsec, to get the audit log from the new v1 modsec ingress controller https://runbooks.cloud-platform.service.justice.gov.uk/get-audit-log-from-modsec.html#get-an-audit-log-from-modsec ## Proposed user journey The pod names...

Update userguide on sending sensitive logs to stdout

1

## Background Modsec v1 ingress controller global config has set to "SecAuditLogParts AEFHKZ" in except the body (I) as this is exposing "Compact request body alternative (to part C)" ....

## Background Cloudwatch Log Group created with options does not get auto destroyed because of this issue: https://github.com/terraform-aws-modules/terraform-aws-eks/issues/920 ## Proposed user journey Update the destroy script to check if log...

Delete EBS snapshots older than 1 year

2

## Background We received an alert related to EBS Active snapshots, where the limit is 100000 and the current usage is 80205. Looking further noticed that we have snapshots from...

## Background There are a couple of references to live-1 still in the concourse 1) terraform state bucket is still named live-1 https://github.com/ministryofjustice/cloud-platform-terraform-concourse/blob/25672cf860f55354f748c19e00f52b0529e8cc51/pipelines/manager/main/environments-live.yaml#L93 2) cluster_name is named as live-1( which...

Fix destroy cluster failure

1

Destroy cluster pipeline is failing to delete components, which may be due to ingress controller module dependency added in other modules, [here](https://github.com/ministryofjustice/cloud-platform-infrastructure/blob/main/terraform/aws-accounts/cloud-platform-aws/vpc/eks/components/components.tf#L126) and [here](https://github.com/ministryofjustice/cloud-platform-infrastructure/blob/main/terraform/aws-accounts/cloud-platform-aws/vpc/eks/components/components.tf#L179-L180) Every weekday, create a test destroy...

## Background Add your new Terraform version to the cloud-platform-tools image along with the old version. This will allow you to run both versions simultaneously. Upgrade Paths: 0.14 - 1.0.11...

## Background Upgrading to Terraform v1.2.5 https://github.com/ministryofjustice/cloud-platform-environments Upgrade Paths: 0.14 - 1.0.11 1.0.11 to currently 1.2.5 This may split into multiple tickets to upgrade to 1.0.11 and create a release...