Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

2429/single clamav #2718

Merged
merged 44 commits into from
Oct 12, 2023
Merged
Changes from 1 commit
Commits
Show all changes
44 commits
Select commit Hold shift + click to select a range
99531e7
removed clamav from being deployed unless in production. Pointed AV S…
Aug 14, 2023
43527f5
added network policy to connect to prod clamAV
Aug 23, 2023
58cf0d1
use prod clam av in cloudgov.py too
Aug 25, 2023
4a55e18
Merge branch 'develop' into 2429/single-clamav
Aug 25, 2023
8c98ce2
fixing 'f-string is missing placeholders' now that we are hardcoding …
Aug 25, 2023
dab98ab
removed quotes from add-network-policy command when interpolation not…
Aug 28, 2023
fd2d8a0
removed add-network-policy from deploy-backend.sh and added documenta…
Aug 29, 2023
9131789
add nginx router and manifest
raftmsohani Sep 6, 2023
648e3a5
Merge branch 'develop' into 2429/single-clamav
Sep 6, 2023
f5afac6
Merge branch '2429/single-clamav' of github.com:raft-tech/TANF-app in…
Sep 6, 2023
a32ead7
cleaned up
Sep 6, 2023
b55aa57
Update README for CLAMAV
raftmsohani Sep 11, 2023
d7a9bee
Merge branch '2429/single-clamav' of https://github.com/raft-tech/TAN…
raftmsohani Sep 11, 2023
b005aa0
updated README file with deployment commands
raftmsohani Sep 19, 2023
71d77d4
added network policy for backend to clamav router
raftmsohani Sep 19, 2023
35048bb
updated boundry diagram
raftmsohani Sep 19, 2023
d31f037
updated boundry diagram
raftmsohani Sep 19, 2023
8ea10f1
Removed AV_SCAN url from cloud.gov settings file
raftmsohani Sep 19, 2023
e14fd82
update setting environment variable
raftmsohani Sep 19, 2023
ca4c5f1
refactored circle ci for static clam av vars since only one server no…
Sep 19, 2023
73677dd
Merge branch '2429/single-clamav' of github.com:raft-tech/TANF-app in…
Sep 19, 2023
a2b5089
needs env_var_name, not string for login-cloud-dot-gov
Sep 20, 2023
38d8c0a
revert back to env_var_name type for downstream login_cloud_dot_gov c…
Sep 21, 2023
006d60d
added prod prefix back in
Sep 21, 2023
acf6814
Merge branch 'develop' into 2429/single-clamav
Sep 22, 2023
9b72df8
readd AV_SCAN_URL
Sep 22, 2023
ee6c265
changed the inline comment in common.py settings
raftmsohani Sep 24, 2023
d695c41
Merge branch '2429/single-clamav' of https://github.com/raft-tech/TAN…
raftmsohani Sep 24, 2023
3c6467e
README file rewrite
raftmsohani Sep 25, 2023
19ee517
added note
Sep 25, 2023
79c1f85
Merge branch '2429/single-clamav' of github.com:raft-tech/TANF-app in…
Sep 25, 2023
1f39173
Merge branch 'develop' into 2429/single-clamav
raftmsohani Sep 28, 2023
714bbc8
Merge branch 'develop' into 2429/single-clamav
raftmsohani Sep 28, 2023
16ab89f
readded clam av nginx router url to manifest and setting network poli…
Sep 29, 2023
9e2c437
updated for using backend to set ENV for ClamAV URL.
Sep 29, 2023
cc603c9
Merge branch 'develop' into 2429/single-clamav
raftmsohani Sep 29, 2023
6415c92
getting rid of spaces on empty last line of manifest
Sep 29, 2023
a1fb14d
Merge branch '2429/single-clamav' of github.com:raft-tech/TANF-app in…
Sep 29, 2023
1638950
Remove AV_SCAN_URL from deploy-backend
raftmsohani Oct 2, 2023
6193455
updated README for clarification for clam-av-nginx-router naming
Oct 11, 2023
92727a2
changed https to http for internal routing to clamav-nginx server
Oct 11, 2023
9c401ed
Merge branch 'develop' into 2429/single-clamav
Oct 11, 2023
3526604
moving setting vars for clamav server to above cf push
Oct 11, 2023
799affe
Merge branch 'develop' into 2429/single-clamav
andrew-jameson Oct 12, 2023
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
removed add-network-policy from deploy-backend.sh and added documenta…
…tion for how to do manually.
George Hudson committed Aug 29, 2023
commit fd2d8a0f35b7b51f18e4d6d347035530771ef9db
1 change: 1 addition & 0 deletions docs/Technical-Documentation/README.md
Original file line number Diff line number Diff line change
@@ -12,6 +12,7 @@ This directory contains system and architecture documentation including diagrams
- [buildpack-changelog.md](./buildpack-changelog.md) : A running log of updates to our Cloud.gov buildpacks in use.
- [circle-ci-audit-template.md](./circle-ci-audit-template.md) : This is a checklist document used during audits of our continuous intergration pipeline tool.
- [circle-ci.md](./circle-ci.md) : Overview of our CI/CD platform jobs.
- [clamav.md](./clamav.md) : How to access ClamAV for different apps/spaces.
- [cypress-integration-tests.md](./cypress-integration-tests.md) : Shows how we use Cypress to manage our end to end integration testing.
- [data-file-downloads.md](./data-file-downloads.md) : Provides an architecture-level view of data file storage and downloading.
- [django-admin-logging.md](./django-admin-logging.md) : Outlines sections of the Django Administrator Console and details what should be logged.
8 changes: 8 additions & 0 deletions docs/Technical-Documentation/clamav.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
# ClamAV connection
We are reducing the number of ClamAV servers and just hitting the one in the prod space.
This is to increase resources available in lower environments.

Before connections to the single ClamAV server can be made, a network policy needs to be created.

Add network policy to allow conection to prod clamAV to access backend
`cf add-network-policy "$CGAPPNAME_BACKEND" clamav-rest -s tanf-prod --protocol tcp --port 9000`
3 changes: 0 additions & 3 deletions scripts/deploy-backend.sh
Original file line number Diff line number Diff line change
@@ -106,9 +106,6 @@ update_backend()

# Add network policy to allow frontend to access backend
cf add-network-policy "$CGAPPNAME_FRONTEND" "$CGAPPNAME_BACKEND" --protocol tcp --port 8080

# Add network policy to allow conection to prod clamAV to access backend
cf add-network-policy "$CGAPPNAME_BACKEND" clamav-rest -s tanf-prod --protocol tcp --port 9000

cd ..
}