jvanzyl

IceGuard Deployment Guide

IceGuard is a security and compliance data platform built on Trino. It ingests cloud audit trails and third-party event feeds, provides a KQL query interface for security analysts, and serves an operator web UI.

This guide covers the architecture, networking, and access model for an IceGuard deployment.

System Context

jvanzyl

---
properties:
  type: object
  ClusterConfig:
    $ref: '#/definitions/ClusterConfig'

definitions:
  ClusterCloudWatch:
    additionalProperties: false
    properties:

jvanzyl

[ERROR] DOCKER> I/O Error [Unable to start container id [326b5affcd0e] : Mounts denied: 
The path /var/folders/d3/kkn5dhcd40zgzhwc8ry35b71mf__mn/T/
is not shared from OS X and is not known to Docker.
You can configure shared paths from Docker -> Preferences... -> File Sharing.
See https://docs.docker.com/docker-for-mac/osxfs/#namespaces for more info.
. (Bad Gateway: 502)]
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for com.walmartlabs.concord:parent 1.19.2-SNAPSHOT:
[INFO] 
[INFO] com.walmartlabs.concord:parent ..................... SUCCESS [  1.340 s]

jvanzyl

package com.oneops;

import java.util.Map;

public class Component {

  public String id;
  public Map<String,String> configuration;
}

jvanzyl

name: awesome-assembly

variables:
  key-0: value-0
  key-1: value-1

platforms:
  platform-0:
    pack: pack-platform-0
    variables:

jvanzyl

1. Install Graphviz on your machine
2. Create a script called graph with the following contents:

#!/bin/sh

dot -T pdf | open -a /Applications/Preview.app -f

Create a simple graph using Graphviz notation and place in graph.txt:

jvanzyl

Locate the section for your github remote in the .git/config file. It looks like this:

[remote "origin"]
	fetch = +refs/heads/*:refs/remotes/origin/*
	url = git@github.com:joyent/node.git

Now add the line fetch = +refs/pull/*/head:refs/remotes/origin/pr/* to this section. Obviously, change the github url to match your project's URL. It ends up looking like this:

jvanzyl

public class Looper {
  public Looper() {
    WebServer server = new WebServerBuilder()
      .port(9000)
      .serve("/api/*").withJaxRs()
      .build();
    server.start();
  }
}

jvanzyl

mvn clean package -T8

[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO] 
[INFO] JGit - Parent ...................................... SUCCESS [  1.613 s]
[INFO] JGit - Core ........................................ SUCCESS [ 18.842 s]
[INFO] JGit - Ant Tasks ................................... SUCCESS [  4.271 s]
[INFO] JGit Archive Formats ............................... SUCCESS [  4.890 s]
[INFO] JGit - AWT User Interface .......................... SUCCESS [  5.801 s]

jvanzyl

package io.takari.resolution;

import java.io.Serializable;

public class Artifact implements Serializable {

  private static final long serialVersionUID = 1L;

  private final String groupId;
  private final String artifactId;