CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

v6.27.0 (2024-09-13)

Full Changelog

Added

• Add signing verification behaviour and fix windows config option #1370 (@wolfeidau)

v6.26.0 (2024-09-11)

Full Changelog

Added

• Add the option to create a KMS key for signing of pipelines #1366 (@wolfeidau)

Changed

• Bump agent to v3.81.0 #1368 (@wolfeidau)
• Bump agent to v3.80.0 #1365 (@wolfeidau)

Agent Changelog

v3.81.0 (2024-09-10)

Full Changelog

Fixed

• Fix for region discovery issue with aws sdkv2 when running in ec2 #2977 (@wolfeidau)
• Explain verification-failure-behavior in more detail #2984 (@DrJosh9000)

Added

• Add sha256 checksum output to the formatting options #2974 (@patrobinson)

Internal

• Dependabot churn: #2978, #2980 (@dependabot[bot])

v3.80.0 (2024-09-06)

Full Changelog

Added

• Support AWS KMS for signing and verifying pipelines #2960 (@wolfeidau)

Changed

• Allow buildkite-agent to run a job when JWK is unavailable but failure behaviour is set to warn #2945 (@CheeseStick)

Fixed

• coda-content-type pass content-type to the server when specified #2967 (@SorchaAbel)
• Updated to support only ECC_NIST_P256 keyspec for initial release #2973 (@wolfeidau)

Internal

• Dependabot churn: #2964, #2965, #2952, #2972, #2963 (@dependabot[bot])

Internal

• Bump golang.org/x/sys from 0.24.0 to 0.25.0 #1367 (@dependabot[bot])

v6.25.0 (2024-08-30)

Full Changelog

Changed

• Bump agent to v3.79.0 #1362 (@wolfeidau)

Agent Changelog

v3.79.0 (2024-08-29)

Full Changelog

Fixed

• Fix error when hook cannot be run due to missing interpreter #2948 (@mcncl)

Added

• Support for multiple trace context encodings #2947 (@DrJosh9000)

Internal

• Bump github.com/buildkite/go-pipeline from 0.11.0 to 0.12.0 #2959 (@wolfeidau)
• Dependabot churn: #2951, #2955, #2949, #2956, #2954, #2950, #2953 (@dependabot[bot])

v6.24.0 (2024-08-21)

Full Changelog

Changed

• docs: update RootVolumeIops to include gp3 #1359 (@joemiller)
• Bump agent to v3.78.0 #1360 (@CerealBoy)

Internal

• Dependabot updates: #1358 (@dependabot[bot])

Agent Changelog

v3.78.0 (2024-08-20)

Full Changelog

Fixed

• fix for layout issues with log messages #2933 (@wolfeidau)
• Prevent Cancel from running when a k8s job is cancelled already #2935 (@CerealBoy)
• k8s: Unconditionally set BUILDKITE_AGENT_ACCESS_TOKEN #2942 (@DrJosh9000)

Changed

• Add a bit more context to the debugging for failing signature verify #2926 (@wolfeidau)
• Update description for the 'priority' option for the 'buildkite-agent annotate' command. #2934 (@gilesgas)

Internal

Dependabot churn: #2927, #2928, #2929, #2930, #2931, #2937, #2939, #2940, #2943 (@dependabot[bot])

v6.23.0 (2024-08-09)

Full Changelog

Changed

• Bump agent to v3.77.0 #1355 (@wolfeidau)

Internal

• Dependabot updates: #1354 (@dependabot[bot])

Agent Changelog

v3.77.0 (2024-08-08)

Full Changelog

v6.22.4 (2024-07-31)

Full Changelog

Changed

• Bump agent to v3.76.2 #1353, #1351 (@DrJosh9000)
• Bump Test Splitter version to v0.8.0 #1349 (@nprizal)
• Upgrade test-splitter-client to v0.7.3 #1344 (@wooly)

Agent Changelog

v3.76.2 (2024-08-01)

Full Changelog

[!NOTE] v3.76.0 fixed an issue which caused the HTTP client in the agent to fall back to HTTP/1.1, see #2908. If you need to disable HTTP/2.0 in your environment you can do this using the --no-http2 flag or matching configuration option.

Fixed

• Only override TLSClientConfig if set #2913 (@DrJosh9000)

v3.76.1 (2024-07-31)

Full Changelog

[!NOTE] v3.76.0 fixed an issue which caused the HTTP client in the agent to fall back to HTTP/1.1, see #2908. If you need to disable HTTP/2.0 in your environment you can do this using the --no-http2 flag or matching configuration option.

Changed

• Pass cancel grace period to bootstrap #2910 (@DrJosh9000)

v3.76.0 (2024-07-31)

Full Changelog

[!NOTE] This release fixed an issue which caused the HTTP client in the agent to fall back to HTTP/1.1, see #2908. If you need to disable HTTP/2.0 in your environment you can do this using the --no-http2 flag or matching configuration option.

Changed

• fix enable http/2 by default as intended by flags #2908 (@wolfeidau)

Fixed

• Let artifact phase and post-command run in grace period #2899 (@DrJosh9000)

Internal

• Dependabot updates: #2902, #2907, #2903, #2904, #2901, #2905, #2896, #2897 (@dependabot[bot])

v6.22.3 (2024-07-22)

Full Changelog

Changed

• Bump Agent to v3.75.1 and Scaler to v1.8.0 #1345 (@DrJosh9000)

Note

Depending on how you upgrade existing stacks, you may not automatically be upgraded to v1.8.0 of Buildkite Agent Scaler. A work around exists for this known issue.

Agent Changelog

v3.75.1 (2024-07-22)

Full Changelog

Fixed

• Fix downloaded artifact permissions #2894 (@DrJosh9000)

v6.22.2 (2024-07-18)

Full Changelog

Changed

• Bump agent version to v3.75.0 #1342 (@wolfeidau)

Added

• First pass at adding test-splitter to the elastic-ci linux stack. #1337 (@wooly)

Dependencies

• Bump golang.org/x/sys from 0.21.0 to 0.22.0 #1340 (@dependabot[bot])

Agent Changelog

Full Changelog

Added

• Introduce riscv64 architecture #2877 (@TimePrinciple)
• Add a SHA256SUMS file #2890 (@DrJosh9000)

Changed

• Reject more secrets #2884 (@DrJosh9000)
• Include repo name in Packages image path #2871 (@swebb)

Fixed

• Fix some common artifact download bugs #2878 (@DrJosh9000)
• SUP-2343: remove "retry" example from "buildkite-agent step get" as not valid #2879 (@tomowatt)

Internal

• Log in to buildkite packages right before pushing images #2892 (@moskyb)
• Update LICENSE.txt #2885 (@wooly)
• Remove Packagecloud agent publish steps from agent pipeline #2873 (@tommeier)
• Release Docker images on Buildkite Packages #2837 (@swebb)
• Fix the OIDC login for Packages #2875 (@swebb)
• Fix the Packages registry name #2874 (@swebb)
• Fix image name when pushing to Buildkite packages #2870 (@swebb)
• Dependabot updates: #2888, #2887, #2882, #2883, #2880 (@dependabot[bot])

v6.22.1 (2024-07-04)

Full Changelog

Changed

• bump the agent version to v3.74.1 #1338 (@wolfeidau)

Internal

• Create dependabot.yml, update some Go things #1332 (@DrJosh9000)

Agent Changelog

Full Changelog

Added

• Log public signing key thumbprint and signed step payload #2853 (@jordandcarter)

Fixed

• Don't try to early-set env vars #2852 (@DrJosh9000)
• Convey env vars between k8s containers #2851 (@DrJosh9000)
• Fix typo in "kuberentes" #2836 (@moskyb)

Internal

• Make the graphql endpoint for buildkite-agent tool sign configurable #2841 (@moskyb)
• Dependabot updates: #2863, #2862, #2857, #2860, #2864, #2856, #2867, #2846, #2848, #2847, #2845, #2840, #2844, #2842, #2843, #2849 (@dependabot[bot])

v6.22.0 (2024-06-19)

Full Changelog

Added

• Add new stack parameter for enabling dualstack docker [PLT-2325] #1306 (@yob)

Changed

• Upgrade agent to 3.74.0 #1328 (@zhming0)

Agent Changelog

Full Changelog

Security

• ⚠️ When using artifact download, artifacts that were uploaded with paths containing .. will no longer be able to traverse up from the destination path. This change is unlikely to break the vast majority of pipelines, however if you are relying on .. for path traversal and cannot fix your pipeline, you can enable the new experiment allow-artifact-path-traversal #2815 (@DrJosh9000)
• Redact Job API token like other env vars #2834 (@DrJosh9000)

Added

• Add logs to allowed-[repositories|plugins] #2810 (@jakubm-canva)

Fixed

• Fix error in k8s after job completes #2804 (@DrJosh9000)

Changed

• PTY rows/cols increased #2806 (@pda)
• Dont sign initial steps with interpolations #2813 (@moskyb)

Internal

• kubernetes-exec is now a flag #2814 (@DrJosh9000)
• shell logger: Use fmt functions once #2805 (@DrJosh9000)
• Update deprecated import #2811 (@DrJosh9000)
• Use Rand per-test in agent/plugin/error_test.go #2795 (@moskyb)
• Publish debian and rpm packages to Buildkite Packages #2824 #2826 #2831 #2830 #2833 (@sj26)
• Dependabot updates: #2809, #2816, #2800, #2801, #2802, #2803, #2787, #2798, #2808, #2827 #2817, #2818, #2819, #2822, #2829, #2832, #2835 (@dependabot[bot])

Important

When using artifact download, artifacts that were uploaded with paths containing .. will no longer be able to traverse up from the destination path. This change is unlikely to break the vast majority of pipelines, however if you are relying on .. for path traversal and cannot fix your pipeline, you can enable the new experiment allow-artifact-path-traversal

Fixed

• Lazy-unmount /tmp before masking #1327 (@DrJosh9000)

Dependencies

• Bump Docker buildx to v0.15.0 #1329 (@rianmcguire)

v6.21.0 (2024-05-27)

Full Changelog

Changed

• Bump agent version to 3.73.1 #1323 #1321 #1320 (@DrJosh9000 + @moskyb)

v6.20.0 (2024-05-03)

Full Changelog

Fixed

• Fix windows agent not restarting #1318 (@patrobinson)
• Fix SSH key clearance in buildkite-ami.pkr.hcl #1316 (@Gezi-lzq @123sarahj123)

Dependencies

• Bump Docker buildx to v0.14.0 and Docker Compose to v2.27.0 #1317 (@orien)

v6.19.0 (2024-04-30)

Full Changelog

Changed

• Bump agent version #1314 (@patrobinson)
• Only allow SSH to reach Packer instance from Elastic Stack #1308 (@steveh)
• Restore "Packer Builder" tag for Packer instances #1307 (@steveh)

v6.18.0 (2024-03-28)

Full Changelog

Changed

• Bump agent version to v3.67.0 #1303 (@DrJosh9000)

v6.17.0 (2024-03-14)

Full Changelog

Changed

• Bump Docker to v25.0.3 from repositories configured for the Base Amazon Linux 2023 AMI
• Update agent to 3.66 #1301 (@moskyb) #1295 (@matthewborden)
• Bump Docker buildx to v0.13.0 and Docker Compose to v2.24.6 #1299 (@orien)
• Update ECR plugin to v2.8.0 #1300 (@lucaswilric)

v6.16.0 (2024-02-15)

Full Changelog

Changed

• Bump agent version to v3.63.0 #1292 (@DrJosh9000)

v6.15.0 (2024-02-02)

Full Changelog

Security

• For linux, the Base AMI has been updated to Amazon Linux 2023.3.20240131 which fixes CVE-2024-21626.

Added

• Support configurable log retention for scaler with the LogRetentionDays parameter. #1278 (@grahamc)

Fixed

• Fix path for cfn-env on windows elastic stack did not always work #1286 (@triarius)

v6.14.0 (2024-01-30)

Full Changelog

Added

• A parameter, RootVolumeThroughput, to be set for gp3 root volumes #1282 (@cmanou)

Changed

• Allow specifying IOPS for gp3 #1283 (@bradleyayers)

Dependencies

• Bump buildx to v0.12.1 and docker-compose to v2.24.4 #1284 (@triarius)

v6.13.0 (2024-01-23)

Full Changelog

Dependencies

• Bump agent version to v3.62.0 #1280 (@tessereth)

v6.12.0 (2023-12-14)

Full Changelog

Added

• Add MountTmpfsAtTmp parameter #1274 (@DrJosh9000)

Dependencies

• Bump buildkite-agent to v3.61.0 #1275 (@DrJosh9000)

v6.11.0 (2023-12-07)

Full Changelog

Added

• BuildkiteAgentCancelGracePeriod option to linux stack #1258 (@njgrisafi)
• RootVolumeIops parameter to allow io1 and io2 RootVolumeTypes #1269 (@triarius)

Fixed

• Allow hyphens in all InstanceTypes values #1266 (@pH14)

Dependencies

• Bump agent to v3.60.1 #1260 (@DrJosh9000) #1265 (@moskyb) #1271 (@triarius)
• Bump buildx to v0.12.0 #1262 (@triarius)
• Bump docker-compose to v2.23.3 #1272 (@triarius)

Internal

• Launch test elastic stacks using templates from S3 #1267 (@moskyb)
• Ensure tag builds have the tag #1259 (@triarius)

v6.10.0 (2023-11-02)

Full Changelog

Added

• Enable optionally changing EC2 Instance Types used for AMI Creation #1252 (@tomowatt)
• Add support for graviton3 with local nvme #1253 (@joemiller)

Fixed

• Build fix-perms in Makefile #1254 (@DrJosh9000)

Changed

• Bump agent version to v3.58.0 #1256 (@DrJosh9000)

Internal

• Mention docker 20.10.25 to 24.0.5 upgrade in v6.8.0 changelog #1249 (@yob)

v6.9.0 (2023-10-23)

Full Changelog

Fixed

• Instances in ASGs at their minimum capacity will now be correctly terminated when BuildkiteTerminateInstanceAfterJob is enabled #1245
• Fix ScalerEventSchedulePeriod was missing from interface #1243

Changed

• Update buildkite-agent to v3.57.0 #1247 (@moskyb)
• Add more missing service role IAM permissions #1244 (@triarius)

Internal

• Update README to show we are on Amazon Linux 2023 now #1246 (@triarius)

v6.8.0 (2023-10-19)

Full Changelog

Changed

• Bump Agent Scaler version to v1.7.0. This updates the lambda runtime to provided.al2 from the deprecated go1.x #1236 (@HugeIRL) Note: depending on how you upgrade existing stacks, you may not automatically be upgraded to v1.7.0 of Buildkite Agent Scaler. See here for a work around to this known issue.
• Bump buildkite-agent to v3.56.0 #1237 (@triarius)
• Bump docker-compose to v2.22.0 #1234 (@jkburges)
• Improve logging for startup scripts on linux #1230 (@triarius)
• Wrap quotes around AWS::StackName #1238 (@n-tucker)
• Docker upgraded from from 20.10.25 to 24.0.5 Amazon Linux 2023 changelog

Fixed

• Fix rsyslog was missing from base AMI #1240 (@peter-svensson)
• Fix Service Role was missing some permissions #1192 (@philnielsen) #1233 (@triarius)
• Fix hyphens were not allowed in InstanceTypes #1228 (@nitrocode)
• Fix qemu binfmt image is pulled during instance startup #1231 (@triarius)

Internal

• Fix Windows AMI build failed #1239 (@triarius)
• Add test stack remover script #1226 (@moskyb)
• Add a step to CI to check files have been formatted with shfmt #1232 (@triarius)

v6.7.1 (2023-09-20)

Full Changelog

Security

⚠️ This release fixes a medium-severity security vulnerability. We recommend upgrading to v6.7.1 or v5.22.5.

• Affected versions: All prior versions of Elastic CI Stack (except v5.22.5). v6.7.0 and v5.22.4 contained a partial fix.
• Impact: Privilege escalation to root on Linux agent instances
• Required privileges: Users that can run user-controlled commands on agents (e.g. by pushing a branch to a repo that triggers a build with those changes)
• Attack vector: A specially crafted build can abuse the fix-buildkite-agent-builds-permissions script to run commands as root on subsequent builds
• Fix: Improved input validation and file handling #1219, #1221 (@DrJosh9000)
• Alternative workarounds: Deploy a pre-bootstrap hook to prevent execution of fix-buildkite-agent-builds-permissions during a build

v5.22.5 (2023-09-14)

Full Changelog

Security

⚠️ This release fixes a medium-severity security vulnerability (same as described in v6.7.1).

• Fix: Improved input validation and file handling #1220 (@DrJosh9000)

v6.7.0 (2023-09-14)

Full Changelog

Security

⚠️ This release partially fixes a medium-severity security vulnerability. We recommend upgrading to v6.7.1 or v5.22.5.

Changed

• Prevent permission script acting on symlinks #1212 (@DrJosh9000)
• Update to scaler v1.6.0 #1213 (@DrJosh9000)
• Bump buildkite-agent to v3.55.0 #1214 (@DrJosh9000)

Internal

• Fix ami_source_filter #1211 (@DrJosh9000)

v5.22.4 (2023-09-14)

Full Changelog

Security

⚠️ This release partially fixes a medium-severity security vulnerability (same as described in v6.7.1). We recommend upgrading to v6.7.1 or v5.22.5.

Changed

• Prevent permission script acting on symlinks #1215 (@DrJosh9000)

v6.6.0 (2023-09-07)

Full Changelog

Fixed

• Fix instance storage mount script fails when instance storage not available #1206 (@triarius)

Changed

• Bump buildkite-agent to v3.54.0 #1207 (@DrJosh9000)

v6.5.0 (2023-08-31)

Full Changelog

Changed

• Bump buildkite-agent to v3.53.0 #1204 (@DrJosh9000)

v6.4.0 (2023-08-24)

Full Changelog

Changed

• Bump docker-compose to v2.20.3 #1201 (@triarius)
• Bump buildkite-agent to v3.52.1 #1200 (@triarius)
• Change the Community Slack links in documentation to Forum ones #1199 (@mcncl)

Internal

• Prevent tag builds from publishing a latest template when they are not "on the main branch" #1197 (@triarius)

v6.3.0 (2023-08-16)

Full Changelog

Changed

• Bump buildkite-agent to v3.51.0 #1193 (@triarius)
• Bump git-lfs to v3.4.0 #1191 (@triarius)

Fix

• Fix mdadm is not installed, leading to broken instance storage when there is more than one volumes #1190 (@triarius)

Internal

• Incorporated CHANGELOG for v5.22.3 #1189 (@triarius)

v6.2.0 (2023-08-09)

Full Changelog

Changed

• Change base image to Windows Server 2019 w/o containers and install Docker CE (v24.0.5) #1180 (@triarius)
• Add cost allocation tags to EBS volumes #1171 (@keatmin)

Fixed

• Add missing authorized keys systemd units #1184 (@sj26)
• Fix instance storage docker dir not created #1181 (@triarius)
• Fix set -e fails from environment hooks #1179 (@triarius)

v6.1.0 (2023-08-01)

Full Changelog

Changed

• Bump buildkite-agent to v3.50.4 #1177 (@DrJosh9000)
• Disable client side pager for aws-cli v2 for the buildkite-agent user #1174 (@triarius)
• Add ScalerMinPollInterval param #1173 (@amartani)

v6.0.0 (2023-07-26)

Full Changelog

Changed

• Upgrade base image to Amazon Linux 2023 #1122 (@triarius)
  • Many packages have been added, upgraded, or removed since Amazon Linux 2. We've explicitly called out what's been intentionally left out by us below. Refer to docs.aws.amazon.com/linux/al2023/ug/compare-with-al2.html for the changes Amazon have made.
• Publish template to both main and master #1129 (@triarius)
• Increase job cancel grace period to 60s #1144 (@triarius)
• Allow the MaxSize to be 0 #1140 (@triarius)
• Default EC2 instance names to stack name #1137 (@triarius)
• Rename the parameter InstanceType to InstanceTypes #1138 (@triarius)
• Rename the parameter ManagedPolicyARN to ManagedPolicyARNs #1138 (@triarius)
• Rename the parameter SecurityGroupId to SecurityGroupIds #1128 (@triarius)
• Rename the parameter EnableAgentGitMirrorsExperiment to BuildkiteAgentEnableGitMirrors #1123 (@triarius)
• Enable the ansi-timestamps setting if and only if BuildkiteAgentTimestampLines parameter is "false" #1132 (@triarius)
• Bump buildkite-agent-scaler to v1.5.0 #1169 (@tomellis91)
• Bump docker compose to v2.20.2 #1150 (@triarius)
• Bump buildx to v0.11.2 #1150 (@triarius)

Added

• Support running and building multi-platform docker images #1139 #1122 #1149 (@triarius)
• Support i4g instance types #1138 (@triarius)
• Added the parameter SpotAllocationStrategy #1130 (@triarius)
• Added the parameter ScalerEventScheduleRate to control rate at which buildkite-agent-scaler is invoked #1169 (@tomellis91)

Fixed

• Guard against BUILDKITE_AGENT_ENABLE_GIT_MIRRORS not being set in startup script #1135 (@triarius)

Removed

• Remove deprecated SpotPrice parameter #1130 (@triarius)
• Removed packages. These packages are either not available on Amazon Linux 2023, or not installed by default on the base image we use. We have decided to not install them as suitable replacements may be found.
  • Python 2
  • OpenSSL v1.0
  • AWS CLI v1
  • Docker-Compose v1
    • The docker-compose executable will prepend the --compatibility flag to docker-compose v2 #1148 (@triarius)
  • Cronie

v5.22.3 (2023-08-10)

Full Changelog

Changed

• Bump buildkite-agent to v3.50.4 #1186 (@triarius)
• Use windows server 2019 base image and docker ce #1187 (@triarius)

v5.22.2 (2023-07-24)

Full Changelog

Changed

• Bump buildkite-agent to v3.50.3 #1164 (@DrJosh9000)

Internal

• Set allow_dependency_failure: true on stack cleanup jobs #1159 (@triarius)

v5.22.1 (2023-07-21)

Full Changelog

Changed

• Bump buildkite-agent to v3.50.2 #1161 (@triarius)

v5.22.0 (2023-07-20)

Full Changelog

Changed

• Bump buildkite-agent to v3.50.1 #1157 (@DrJosh9000)
• Handle hard failures (eg. kernel panic) during bootstrap #1143 (@trvrnrth)
• Backport de-experimentifying git-mirrors #1141 (@triarius)
• Enable ansi-timestamps iff BuildkiteAgentTimestampLines is false #1132 (@triarius)
• Don't (re)install docker (on Windows) #1136 (@triarius)

v5.21.0 (2023-05-25)

Full Changelog

Changed

• Bump buildkite-agent to v3.47.0 #1120 (@DrJosh9000)
• Bumping python from 3.7 to 3.10 #1117 (@123sarahj123)
• Bump Docker buildx from 0.10.4 to 0.10.5 #1119 (@orien)
• Bump buildkite-agent-scaler to v1.4.0 #1118 (@triarius)

5.20.0 (2023-05-05)

Full Changelog

Changed

• Bump buildkite-agent to v3.46.0 #1114 (@moskyb)
• Update description of BuildkiteAdditionalSudoPermissions parameter #1113 (@triarius)

Fixed

• Error with docker experimental CLI #1106 (@moskyb)

v5.19.0 (2023-04-24)

Full Changelog

Added

• A parameter for buildkite-agent-scaler edition and version #1104 (@triarius)

Fixed

• Stack failed to create because it tried to create an ACL on S3 #1109 (@saviogl)

v5.18.0 (2023-03-23)

Full Changelog

Changed

• Bump buildkite-agent to v3.45.0 #1101 (@triarius)
• Bump Docker buildx from 0.10.3 to 0.10.4 #1100 (@orien)
• Explicitly disabled public access ACLs for managed secrets buckets #1099 (@triarius)

v5.17.0 (2023-02-28)

Full Changelog

Added

• Support for c7gn, m7g, and r7g instance type classes with the arm64 AMI #1095 (@triarius)
• Customise the Name tag on EC2 instances spawned by the ASG with the new InstanceName parameter #1088 (@fd-jonathanlinn)

Changed

• Buildkite Agent v3.44.0 #1097 (@DrJosh9000)
• Upgrades: Docker for Linux v20.10.23, Docker compose v2.16.0, buildx v0.10.3, Linux kernel v5.15 (@mumumumu, @orien, @triarius)
• And other minor cleanups! (@moskyb, @triarius)

Fixed

• Correct invalid SSM policy action #1087 (@jsleeio)

v5.16.1 (2023-01-20)

Full Changelog

Changed

• Bump buildkite-agent to v3.43.1 #1083 (@moskyb)

v5.16.0 (2023-01-19)

Full Changelog

Security

• Git is updated to v2.39.1 to address recent vulnerabilities #1077 (@triarius)

Added

• Access logs are now pushed to Cloudwatch for Linux instances #1075 (@moskyb)

Changed

• Bump buildkite-agent to v3.43.0 #1079 (@DrJosh9000)

v5.15.0 (2023-01-06)

Full Changelog

Added

• Enable default bucket encryption for s3 and enforce SSL #1050 (@ckornacker)

Changed

• Bump buildkite-agent to v3.42.0 #1073 (@mitchbne)
• Bump Docker buildx from 0.8.2 to 0.9.1 #1071 (@orien)
• Bump lifecycled to v3.3.0 #1065 (@triarius)

v5.14.0 (2022-11-29)

Full Changelog

Added

• Add property to indicate if the EBS volume is encrypted #1057 (@pzeballos)
• Enable GroupDesiredCapacity metric collection on ASGs by default #1064 (@atticus-rippling)

Changed

• Bump buildkite-agent to v3.41.0 #1069 (@triarius)

v5.13.0 (2022-11-10)

Full Changelog

Changed

• Bump buildkite-agent to v3.40.0 #1060 (@DrJosh9000)

v5.12.0 (2022-11-08)

Full Changelog

Added

• Add docker compose v2 to linux #1052 (@donbobka)

v5.11.2 (2022-10-17)

Full Changelog

Fixed

• Fix log collector date command #1048 (@jeremybumsted)

Changed

• Bump buildkite-agent to v3.39.1 #1054 (@triarius)

Security

• buildkite-agent v3.39.1 contains a security update. buildkite/agent #1781

v5.11.1 (2022-08-11)

Full Changelog

Fixed

• Fix permissioning error on agent scaler #1044 (@richardkeit)

Changed

• Add groupless cloudformation params to groups #1042 (@moskyb)

5.11.0 (2022-07-22)

Full Changelog

Added

• Add code of conduct #1038 (@moskyb)
• More advanced config options #1030 (@moskyb)
  • A way to specify arbitrary environment variables for the agent to consume
  • The ability to specify a tracing backend for the agent to use

Changed

• Bump buildkite-agent to v3.38.0 #1040 (@moskyb)

Fixed

• Add a missing permission in the service role, allowing the stack to tag lambdas #1039 (@hcho3)

v5.10.0 (2022-07-13)

Full Changelog

Security

• Ensure BUILDKITE_AGENT_TOKEN is redacted from start-up logs to CloudWatch #1032 (@moskyb)

Added

• Permissions boundary for Autoscaling application #984 (@kwong-chong-lfs)

Changed

• Bump buildkite-agent to v3.37.0 #1035 (@pda)
• Update docker version 20.10.17 #1033 (@hari2192)

Fixed

• Fix IAM permissions for SSM session #987 (@ouranos)

v5.9.0 (2022-05-31)

Full Changelog

Added

• Allow accessing tags via instance metadata #1016 (@jchanam)
• Add option to enable detailed EC2 monitoring #1007 (@threesquared)
• Log collector for support/debugging #1017 + #1020 (@jeremybumsted)

Changed

• Update buildkite-agent v3.35.2 -> v3.36.1 #1021 #1025 (@moskyb)
• Bump Linux Kernel from 4.14 to 5.10 #994 (@orien)

v5.8.2 (2022-04-27)

Full Changelog

Changed

• Update docker #1011 (@moskyb)
  • Linux v20.10.9 -> v20.10.14
  • Windows v20.10.7 -> v20.10.9
• Bump Docker Buildx from 0.7.1 to 0.8.2 #1003 (@orien)

v5.8.1 (2022-04-07)

Full Changelog

Changed

• Update agent version from v3.35.0 to v3.35.2 #1005 #1009 (@moskyb)
• Add quotes around AWS variables #1008 (@ctgardner)

v5.8.0 (2022-03-28)

Full Changelog

Added

• Customise docker address pools to use more, slightly smaller networks rather than a few big ones #968 (@ouranos)
• Add support for additional ARM/Graviton instance types: c7g, g5g, lm4gn, lm4gen, and x2gd #981 #979 (@toothbrush + @yob)
• Add SecretsBucketRegion parameter and update s3secrets-hooks #962 (@keithduncan)
• Add docs on updating the different components #957 (@keithduncan)

Changed

• autoscaling:DescribeAutoScalingInstances can now only be applied to all resources #989 (@jeremiahsnapp)
• Bump buildx from 0.5.1 to 0.7.1 #975 (@orien)
• Quieten Fixing permissions header log group #965 (@keithduncan)
• Update issue templates #947 (@keithduncan)
• Update agent version from 3.33.3 to v3.35.0 #990 #999 (@moskyb)

Security

• Create SECURITY.md #948 (@keithduncan)

Fixed

• Overwrite /usr/bin/buildkite-agent symlink if it already exists #970 (@chefsale)

v5.7.2 (2021-10-29)

Changed

• Upgrade Docker for Linux (20.10.9) and Windows (20.10.7) #954 (@eleanorakh)
• Upgrade docker-compose for Linux (1.29.2) and Windows (1.29.2) #954 (@eleanorakh)

Fixed

• BuildkiteAgentTokenParameterStorePath support for AWS Secrets Manager SSM references #955 (@eleanorakh)
• Build failures originating from the S3 Secrets hook #956 (@eleanorakh)

v5.7.1 (2021-10-14)

Added

• Add new docs links to template file

v5.7.0 (2021-09-29)

Added

• Support for storing builds, git-mirrors, and Docker on NVMe Instance Storage #557 (@lox)
• Retried login for ECR and generic Docker registries #930
• Experimental CloudFormation service role, listing the IAM Actions required to create, update, and delete the template #926
• A README feature matrix for Linux and Windows #910
• qemu and binfmt hooks for cross-architecture Docker image builds #903
• Tag pins for the included plugin #906 (@nitrocode)
• Support for AWS SSM sessions #905 (@xiaket)

Changed

• Included buildkite-agent from v3.32.3 to v3.33.3 #932
• EnableDockerExperimental also enables Docker CLI experimental mode #911

Fixed

• A frequent source of build interruption caused by scale-in #923
• A resource ordering issue preventing instances from self terminating when a stack #928
• Support for BuildkiteAdditionalSudoPermissions with spaces #916 (@twunderlich-grapl)
• Finish the git lfs install #912 (@pauldraper)

v5.6.1 (2021-09-02)

Fixed

• Missed parameter BuildkiteAgentTokenParameterStoreKMSKey in Autoscaling nested cloudformation template #901

v5.6.0 (2021-08-31)

Added

• Cross-region secrets bucket support to git-credentials-s3-secrets elastic-ci-stack-s3-secrets-hooks#48
• AssumeRole support in the ECR Login plug-in ecr-buildkite-plugin#69

Changed

• Instance IAM Profile role permissions to be more tightly scoped #800 (@nitrocode)
• Import buildkite-lambda-scaler from the Severless Application Repository #685
• The built-in environment hook no longer overwrites AWS_REGION and AWS_DEFAULT_REGION if already present #892 (@toothbrush)
• Included buildkite-agent from 3.32.1 to 3.32.3

Fixed

• Hourly disk check script on Linux #898
• git-credentials-s3-secrets on Windows elastic-ci-stack-s3-secrets-hooks#47
• PowerShell hook support on Windows agent#1497

v5.5.1 (2021-08-06)

Changed

• Included buildkite-agent from 3.32.0 to 3.32.1

Fixed

• A source of unexpected instance termination causing build failures #888

v5.5.0 (2021-07-30)

Added

• Template validation rules for the Buildkite Agent token #873
• Secret redaction in build logs agent#1452
• Support for the pre-bootstrap Buildkite Agent Lifecycle Hook agent#1456

Changed

• Included buildkite-agent from 3.30.0 to 3.32.0 #876 (keithduncan)

Fixed

• Remove logging of the Buildkite Agent token to CloudWatch Logs #879
• Cross-region S3 bucket access for secrets #875
• An error when handling zero length environment files elastic-ci-stack-s3-secrets-hooks#42
• A hang when loading ssh keys without a trailing newline elastic-ci-stack-s3-secrets-hooks#44

v5.4.0 (2021-06-30)

Added

• Docker Buildx #871
• Docs on which user SSH access applies to #863 (@Temikus)

Changed

• Update Buildkite Agent to version 3.30.0 #868 (@esalter)
• The HttpPutResponseHopLimit from 1 to 2 #858

Fixed

• The default cost allocation tag value #859

v5.3.2 (2021-06-11)

Fixed

• Fix s3secrets-helper for Windows #846 (DuBistKomisch)
• Pin Docker systemd configuration to the same Docker version #849 (cmanou)
• Excessive instance scaling while waiting for instances to boot

Changed

• Create S3 secrets bucket only when needed #844 (vgrigoruk)

v5.3.1 (2021-05-05)

Fixed

• Allow dashes and multiple forward slashes (/) in BuildkiteAgentTokenParameterStorePath #835 #837 (nitrocode)

v5.3.0 (2021-04-28)

Added

• Support IAM Permissions Boundaries #767 #805 (nitrocode)
• Session manager plugin #818 (nitrocode)

Changed

• Replace awslogs with the cloudwatch-agent #811 (yob)
• Avoid scaling down too aggressively when there are pending jobs in certain conditions #823 (yob)
• Bump docker from 19.03.x to 20.10.x #826 (yob)
• Bump docker-compose on all operating systems to 1.28.x #825 (yob)
• Bump agent from 3.27.0 to 3.29.0 #827 (yob)
• Bump lifecycled from 3.0.2 to 3.2.0 #824 (yob)
• Bump git on windows from 2.22.0 to 2.31.0 #819 (yob)
• Bump ECR plugin to v2.3.0 #816 (chloeruka)
• Documentation improvements #815 #810 (acaire)

Removed

• Remove unnecessary IAM roles for SNS and SQS #829 (chloeruka)

v5.2.0 (2021-02-08)

Added

• buildkite-agent v3.27.0 #794 (pda)

• agent names use client-side %spawn not server-side %n for numbering #794 (pda)

• IMDSv2Tokens parameter: optional / required #786 (holmesjr) → #788 & #789 (pda)

Changed

• Default to gp3 volumes, previously gp2 #784 (yob)

Fixed

• c6gn.* instances recognized as ARM #785 (yob)
• s3secrets-helper installation more resilient #783 (shevaun)

v5.1.0 (2020-12-11)

Added

• Experimental support for ARM instance types (linux only) #758 (yob)
• Support up to four instance types and mixed combinations of Spot/OnDemand instances #710 (yob)
  • The InstanceType stack parameter can now be a CSV with up to 4 types
  • The new OnDemandPercentage stack parameter can be reduced from 100% (the default) to allow some Spot instances

Changed

• Update Buildkite Agent to v3.26.0 #778 (JuanitoFatas)
• Speed up secret downloads from S3 (from ~8 seconds to under 1 second) #772 (pda)
• ECR plugin now has its own log group header to make run time visible #773 (pda)

Fixed

• Avoid IAM changes for some kinds of stack updates (like changing InstanceType) #781 (yob)
• Improved documentation
  • Add BUILDKITE_PLUGIN_S3_SECRETS_BUCKET_PREFIX to README #775 (maatthc)
  • Remove outdated advice re AgentsPerInstance #760 (niceking)

v5.0.1 (2020-11-09)

Fixed

• Retreive agent token from parameter store on windows agents #762 (chrisfowles)

v5.0.0 (2020-10-26)

Added

• Our previously experimental blazing fast lambda scaler is now the default which makes for much faster scaling in response to pending jobs #575 (@lox)
• EXPERIMENTAL Windows support on a new Windows Server 2019 based image #546, #632, #595, #628, #614, #633 (jeremiahsnapp) #670 (pda) #600 (tduffield)
  • There is a known issue with graceful handling of spot instances under windows. The agent may not disconnect gracefully, and may appear in the Buildkite UI for a few minutes after they terminate #752
• Support for buildkite/image-builder which can enable you to customize AMIs based off the ones we ship #692 (keithduncan)
• Support for multiple security groups on instances #667 (jdub)
• AMI and Lambda Scaler support more regions: ap-east-1 (Hong Kong), me-south-1 (Bahrain), af-south-1 (Cape Town), eu-south-1 (Milan) #718 (JuanitoFatas)
• Support for loading BuildkiteAgentTokenPath from AWS Parameter Store #601 (jradtilbrook), #625 (jradtilbrook)

Changed

• Docker configuration is now isolated per-step #678 (patrobinson) #756 (yob)
• Use EC2 LaunchTemplate instead of a LaunchConfiguration #589 (lox)
• InstanceType default is now t3.large (was t2.nano) #699 (pda)
• Made ECR hook an environment hook (was pre-command). #677 (pda)
• Mappings file format has changed to list both Linux and Windows AMIs #569 (lox)
• We now warn instead of hard-fail when there's no configured SSH keys #669 (pda)
• We now only set git-mirrors-path when EnableAgentGitMirrorsExperiment is set #698 (pda)
• Set RootVolumeName appropriately and allow it to be overridden #593 (jeremiahsnapp)
• Disable AZRebalancing to prevent running instances being terminated unnecessarily #751

Fixed

• Stop trying to call poweroff after the agent shuts down #728 (yob)
• Update agent config to use tags-from-ec2-meta-data #727 (yob)
• Set correct content-type on YAML template files shipped to S3 #683 (kyledecot)
• Fixed introduced issue with SSM permissions #657 (kushmansingh)
• Add correct cost tags to S3 #602 (hawkowl)
• Fix incorrect yaml syntax for spot instances #591 (lox)

Dependencies updated

• Bump Buildkite Agent to v3.25.0 #749 (JuanitoFatas)
• Bump Buildkite Agent Scaler to v1.0.2 #724 (JuanitoFatas) 4fafd8e (JuanitoFatas)
• Bump docker to v19.03.13 (linux) and v19.03.12 (windows) and docker-compose to v1.27.4 (linux, windows uses latest choco version) #719 (yob) #723 (JuanitoFatas)
• Bump bundled plugins to the latest versions secrets ecr docker login

Removed

• Remove AWS autoscaling in favor of buildkite-agent-scaler #575 (lox) #588 (jeremiahsnapp)
• Multiple parameters! See below

Summary of parameter changes:

The following parameters have been removed or reworked:

• EnableExperimentalLambdaBasedAutoscaling was removed (it's the default now)
• BuildkiteOrgSlug was removed – the statistics reported by buildkite-agent-scaler make it redundant, but consider buildkite-agent-metrics if you need more detailed metric monitoring
• BuildkiteTerminateInstanceAfterJobTimeout is replaced by the more concise ScaleInIdlePeriod #586 (jeremiahsnapp)
• BuildkiteTerminateInstanceAfterJobDecreaseDesiredCapacity and ScaleDownAdjustment were removed - instances will now always try to decrement the ASG desired count when their waiting period for new jobs has elapsed
• ScaleUpAdjustment is replaced by ScaleOutFactor as the new lambda scaler calculates how many agents are needed at the time
• ScaleDownPeriod and ScaleCooldownPeriod are replaced by ScaleInIdlePeriod

The following other parameters have been added:

• ScaleOutFactor (default: 1.0) is a multiplier that allows you to add extra agents when scaling up is needed
• ScaleInIdlePeriod (default: 600 seconds) is used for scale-in by letting idle agents remove themselves from the ASG
• InstanceOperatingSystem (default: linux) can be used to specify Windows if you need Windows Server 2019 instances
• Windows-only BuildkiteWindowsAdministrator (default: true) adds the local "buildkite-agent" user account to the local Windows Administrator group
• optional BuildkiteAgentTokenParameterStorePath and BuildkiteAgentTokenParameterStoreKMSKey are for storing your token in SSM Parameter Store and are an alternative to BuildkiteAgentToken
• optional ScaleOutForWaitingJobs (default: false) can help anticipate future job load and get your instances ready ahead of time

v4.5.0 (2020-07-10)

Elastic CI Stack for AWS v4.5.0

Full Changelog

Changed

• Added ImageIdParameter CloudFormation parameter for SSM Parameter Store image lookup #691 (@keithduncan)

v4.4.0 (2020-05-21)

Elastic CI Stack for AWS v4.4.0

Full Changelog

Changed

• Increase the threshold for disk cleanup to 5GB free for 4.3 #646 (@huonw)
• Updated buildkite-agent to version 3.21.1 #687 (@denbeigh2000)
• Updated docker-compose to version 1.25.1 #660 (@dreyks)
• Updated git lfs to 2.10.0 #668 (@kushmansingh)

v4.3.5 (2019-11-01)

Full Changelog

Added

• Bump buildkite-agent to v3.13.2 #644 (@lox)
• Prune docker builder cache in cleanup #642 (@sj26)
• Power off immediately if cloud-init fails #638 (@dbaggerman)
• Replaced Linux fixed AMI source with source AMI filter #636 (@cawilson)
• Bump docker version to 19.03.2 #634 (@PaulLiang1)
• Add cloudformation output exports #616 (@jradtilbrook)
• Add python3 and future lib to allow prepping for Python2 EOL #583 (@GreyKn)

Fixed

• Add missing eu-north-1 to lambda mapping #613 (@lox)
• Docker experimental needs boolean not string #611 (@lox)
• Update ArtifactBucketPolicy to match docs #607 (@gough)

v4.3.4 (2019-07-28)

Full Changelog

Changed

• Bump agent to v3.13.2, docker to 19.03 and compose to 1.24.1 #609 (@lox)
• Docker experimental needs boolean not string #610 (@lox)

v4.3.3 (2019-06-01)

Full Changelog

Changed

• Bump agent to 3.12.0 #594 (@lox)

v4.3.2 (2019-04-16)

Full Changelog

Changed

• Bump agent scaler to support newer regions #566 (@lox)

v4.3.1 (2019-04-09)

Full Changelog

Fixed

• Add back us-east-1 to regions #563 (@ksindi)

v4.3.0 (2019-04-06)

Full Changelog

Added

• Add EnableAgentGitMirrorsExperiment parameter #555 (@lox)

Fixed

• Remove temporary packer key #551 (@lox)

Changed

• Updated experimental lambda-based auto-scaler, respect ScaleDownPeriod #559 (@lox)
• Bump agent to 3.10.3 #558 (@lox)
• Install pigz for parallel decompression in docker pull #560 (@lox)
• Use spawn vs multiple systemd units #552 (@lox)
• Write cloudwatch metrics from lambda scaler #541 (@lox)
• Bump docker-login, ecr and secrets plugins to latest #550 (@lox)
• Bump lifecycled to v3.0.2 #548 (@lox)
• Restart agent on SIGPIPE (journald restart) #545 (@lox)
• Set the priority of the agent to its instance integer #539 (@tduffield)

v4.2.0 (2019-02-25)

Full Changelog

Added

• Add an experimental lambda scaler #529 (@lox)
• Add helpers to Makefile for building packer image #535 (@tduffield)
• Allow users to configure the root block device #534 (@tduffield)

Fixed

• Fix typo in CF setting #537 (@tduffield)
• Make sure we reload the systemd unit files #533 (@tduffield)

v4.1.0 (2019-02-11)

Full Changelog

Changed

• Bump docker to 18.09.2 to fix CVE-2019-5736 #532 (@lox)
• Fix typo in docker experimental config #528 (@lox)
• Allow users to specify additional sudo permissions #527 (@tduffield)
• Add new "TerminateInstanceAfterJob" configuration #523 (@tduffield)
• Add Buildkite Org to Cloudwatch Metrics as a Dimension to support multiple orgs per AWS account #510 (@lox)

v4.0.4 (2019-01-29)

Full Changelog

Fixed

• Fix bug where lifecycled logs aren't flushed to cloudwatch logs #524 (@lox)
• Prevent systemd from killing agent process group #521 (@lox)

Changed

• Expose AgentLifecycleTopic for programatic scaling #522 (@tduffield)

v4.0.3 (2019-01-18)

Full Changelog

Changed

• Bump docker to 18.09.1 #516 (@lox)
• Bump agent to 3.8.2 #514 (@lox)
• Tunable knob for ASG Cooldown period #495 (@prateek)

v4.0.2 (2018-12-20)

Full Changelog

Fixed

• Set a region for awslogsd #508 (@dgarbus)
• Fix bug where lifecycled didn't pick up handler script #507 (@lox)

Changed

• Add a EnableDockerExperimental param #506 (@lox)
• Bump docker to 18.09.0 #505 (@lox)

v4.0.1 (2018-11-30)

Full Changelog

Fixed

• Show correct stack version in log output #503 (@lox)
• Remove duplicate AssociatePublicIpAddress

v4.0.0 (2018-11-28)

Full Changelog

No changes from v4.0.0-rc3.

v4.0.0-rc3 (2018-11-05)

Full Changelog

Changed

• Use rsyslogd+awslogs for logs #498 (@lox)
• Remove the dash in description to be consistent with v3 #499 (@lox)
• Goss specs #497 (@lox)
• Bump lifecycled to v3.0.0 #496 (@lox)
• Support timestamp-lines #494 (@raylu)
• Add docs for using the bootstrap script #493 (@toolmantim)
• Start logging daemons as soon as possile during bootstrap #492 (@zsims)
• Merge template files into a single file #487 (@lox)
• Move AMI copy into a dedicated step #486 (@lox)
• Update AMI to latest packages #480 (@lox)

v4.0.0-rc2 (2018-09-04)

Full Changelog

Added

• Install Git LFS #468 (@lox)

Changed

• Update to the very latest aws-cli #478 (@lox)
• Bump lifecycled to 2.0.2 #475 (@lox)
• Default BuildkiteAgentRelease to stable #474 (@lox)
• Added InstanceCreationTimeout as parameter #476 (@RexChenjq)
• Update README.md to reflect Amazon Linux 2#470 (@alexjurkiewicz)
• Clean up docker login hooks #466 (@lox)
• Rename the log group name we are using for elastic-stack.log file so we are consistent #463 (@arturopie)
• Update to latest Amazon Linux 2 LTS #462 (@lox)

v4.0.0-rc1 (2018-07-18)

Full Changelog

Changed

• Use Amazon Linux 2 as base AMI #363 (@lox)
• Bump docker-login and ecr plugin to latest #454 (@lox)
• Bump docker to 18.03.1-ce and docker-compose to 1.22.0 #455 (@lox)
• Support attaching multiple policies via the parameter #446 (@zsims)
• Make KeyName optional #444 (@zsims)
• Provide InstanceRoleName as Output #438 (@lox)

v3.3.1 (2018-09-13)

Full Changelog

Fixed

• Bump lifecycled to v2.1.1 #488 (@lox)

v3.3.0 (2018-09-04)

Full Changelog

Changed

• Bump Amazon Linux to 2018.03 #471 (@lox)
• Bump docker to 18.03.1-ce and docker-compose to 1.22.0 #455 (@lox)
• Support attaching multiple policies via the parameter #446 (@zsims)

Fixed

• Set correct variable to pass to upstream ecr plugin #453 (@bshelton229)
• Use exit instead of return in bk-check-disk-space.sh script #440 (@arturopie)
• Move cleanup cron jobs to run hourly #429 (@arturopie)

v3.2.1 (2018-05-24)

Full Changelog

Changed

• Support enabling agent experiments #423 (@lox)
• Use the docker directory to check for disk space #418 (@arturopie)
• Set InstanceRoleName as stack template output #421 (@dblandin)

v3.2.0 (2018-05-17)

Full Changelog

Changed

• Updated stable agent to buildkite-agent v3.1.2
• Default EnableDockerUserNamespaceRemap to true #417 (@lox)
• Bump the minimum inodes to 250K to allow for big docker images #416 (@lox)
• Update to the new secrets hooks repo URL #414 (@toolmantim)

v3.1.1 (2018-05-02)

Full Changelog

Changed

• Updated stable agent to buildkite-agent v3.1.1
• Bump docker to 18.03.0-ce and docker-compose to 1.21.1 #411 (@lox)

v3.1.0 (2018-04-30)

Full Changelog

Changed

• Allow userns remapping to be disabled #410 (@lox)
• Update lifecycled to 2.0.1 #407 (@lox)
• Fix cfn stack instance profile name #395 (@chandanadesilva)

v3.0.0 (2018-04-18)

Full Changelog

v3.0.0-rc1 (2018-04-18)

Full Changelog

Changed

• Use new Metrics API, drop requirement for org-slug and api-token #405 (@lox)
• Bump Lifecycled to v2.0.0 #404 (@lox)
• Add support for billing tags #398 (@tduffield)
• Drop support for buildkite-agent v2, stable is 3.0.0 #400 (@lox)
• Don't blow up when no plugins are enabled #394 (@haines)
• Fail install if docker hasn't started #387 (@lox)
• Update docker to stable 17.12.1-ce #391 (@lox)

v2.3.5 - 2018-02-26

Changed

• Make EnableDockerUserNamespaceRemap the new default #378
• Docker 17.12.1-ce-rc2 (Related to #377)

v2.3.4 - 2018-02-13

Fixed

• Configure docker before it starts to avoid corruption #377

Added

• Show elastic stack logs in Instance Terminal for easier debugging
• Collect cron output in elastic-stack.log
• Check (and free) diskspace before builds

v2.3.3 - 2018-01-11

Fixed

• Amazon Linux 2017.09.1 (to mitigate Meltdown/Spectre)
• Docker 17.12.0-ce and Compose 1.18.0

v2.3.2 - 2018-01-07

Fixed

• Bump metrics lambda version to v2.0.2
• Bump ECR plugin to 1.1.3

v2.3.1 - 2017-12-23

Fixed

• Updated to latest buildkite-metrics lambda version (v2.0.0) that respects rate limiting headers #357
• Added a new parameter for adding extra buildkite-agent tags/metadata #359

v2.3.0 - 2017-10-20

Fixed

• Autoscaling is suspended when lifecycled crashes #344
• Optimize the permissions check script to only fix the current pipeline’s build dir #340 (@toolmantim)

Changed

• CloudWatch Logs namespaced #342
• Docker 17.09.0-ce #350 (@lox)
• Buildkite Agent v2.6.6 and v3.0.0-beta34

Added

• Optionally run docker as buildkite agent with userns-remap #341 (@lox)

2.2.0-rc3 - 2017-08-12

Changed

• Bump buildkite-metrics to v1.5.0 (retry on error)
• Replace shudder with new lifecycled that supports spot notifications

2.2.0-rc2 - 2017-06-26

Changed

• Re-added deprecated DOCKER_HUB_USER variables

2.2.0-rc1 - 2017-07-18

Changed

• Move ecr, secrets and docker-login to plugins
• Add a signature llama to the environment hook
• Show stack version in the environment hook
• Move pipeline to yaml, json version is deprecated
• Use Shudder tool to handle autoscaling events and spot notifications
• Docker 17.06.0-ce

Removed

• Remove deprecated DOCKER_HUB_USER variables

2.1.4 - 2017-06-28

Changed

• Buildkite Agents v3.0.0-beta28
• Edge agent version is downloaded when instances boot rather than baked in AMI
• Added SECRETS_PLUGIN_ENABLED to allow secrets downloading to be disabled

2.1.3 - 2017-06-20

Changed

• Updated to latest Amazon Linux 2017.03.1 (see security advisory AWS-2017-007)
• Updated docker-compose to 1.14.0

2.1.2 - 2017-06-16

Fixed

• Using an env secrets bucket hook caused builds to fail with an undefined variable error

2.1.1 - 2017-06-12

Changed

• 🐳 Docker-Compose 1.14.0-r2 (with support for cache_from directive)
• Buildkite Agents v2.6.3 and v3.0.0-beta27
• Agent version defaults to beta rather than stable

Fixed

• Using git-credentials was broken (#290)
• Managed secrets bucket failed to create (#282)

2.1.0 - 2017-05-12

Added

• A secrets bucket is created automatically if left blank
• Git over HTTPS is supported via a git-credentials file
• A customisable ScaleDownPeriod parameter is available to prevent rapid scale downs

Changed

🐳 Docker 17.05.0-ce and Docker-Compose 1.13.0

• Buildkite Agents v2.6.3 and v3.0.0-beta23
• Latest aws-cli
• Autoscaling group is replaced on update, for smoother updates in large groups

Fixed

• Fixed a bug where the stack would scale up faster than instances were launching

2.0.2 - 2017-04-11

Fixed

• 🕷 Avoid restarting docker whilst it's initializing to try and avoid corrupting it (#236)

2.0.1 - 2017-04-04

Added

• 🆙 Includes new Buildkite Agent v2.5.1 (stable) and v3.0-beta.19 (beta)

Fixed

• ⏰ Increase the polling duration for scale down events to prevent hitting api limits (#263)

2.0.0 - 2017-03-28

Added

• Docker 17.03.0-ce and Docker-Compose 1.11.2
• Metrics are collected by a Lambda function, so no more metrics sub-stack 🎉
• Secrets bucket uses KMS-backed SSE by default
• Support authenticated S3 paths for BootstrapScriptUrl and AuthorizedUsersUrl
• New regions (US Ohio)
• ECRAccessPolicy parameter for easy Amazon ECR configuration
• Fixed size stacks are possible, and don't create auto-scaling resources
• Added version number to stack description and agent metadata
• Optionally non-public agent instances

Fixed

• Improved scale-up/scale-down logic
• Cloudwatch logs are sent to correct region
• Fixed size stacks are support
• Correct release names for beta and edge agent
• Better error handling for when fetching env or private-key fails
• Regions that require v4 signatures are better handled
• Working docker-gc script
• Autoscaling is suspended during stack updates
• Breaking changes

Changed

• Initialization logs have moved to /var/log/elastic-stack.log

Removed

• ManagedPolicyARNs has been removed, a singular version exists now: ManagedPolicyARN

1.1.1 - 2016-09-19

Fixed

• 👭 If you run multiple agents per instance, chmod during build environment setup no longer clashes (#143)
• 🔐 The AWS_ECR_LOGIN_REGISTRY_IDS option has been fixed, so it now calls aws ecr get-login --registry-ids correctly (#141)

1.1.0 - 2016-09-09

• Added

• 📡 Buildkite Agent has been updated to the latest builds
• 🐳 Docker has been upgraded to 1.12.1
• 🐳 Docker Compose has been upgraded to 1.8.0
• 🔒 Can now add a custom managed policy ARN to apply to instances to add extra permissions to agents
• 📦 You can now specify a BootstrapScriptUrl to a bash script in an S3 bucket for performing your own setup and install tasks on agent machine boot
• 🔑 Added support for a single SSH key at the root of the secrets bucket (and SSH keys have been renamed)
• 🐳 Added support for logging into any Docker registry, and built-in support for logging into AWS ECR (N.B. the docker login environment variables have been - renamed)
• 📄 Docker, cloud-init and CloudFormation logs are sent to CloudWatch logs
• 📛 Instances now have nicer names
• ⚡ Updating stack parameters now triggers instances to update, no need for deleting and recreating the stack

Fixed

• 🚥 The "queue" parameter is now "default" by default, to make it easier and less confusing to get started. Make sure to update it to "elastic" if you want to continue using that queue name.
• 🐳 Jobs sometimes starting before Docker had started has been fixed
• ⏰ Rolling upgrades and stack updates are now more reliable, no longer should you get stack timeouts

1.0.0 - 2016-07-28

Added

• Initial release! 🎂🎉