Releases: catherinevee/driftmgr
Releases · catherinevee/driftmgr
DriftMgr v1.1.0 - Enhanced Security & Monitoring
DriftMgr v1.1.0 - Enhanced Security & Monitoring
Security Enhancements
- Dynamic Security Badge: Real-time Checkov security analysis with live status updates
- Comprehensive Security Scanning: 100+ security validations across Docker, Kubernetes, CI/CD files
- Security Score: 95/100 security rating with automated monitoring
- Continuous Security: Daily security scans with GitHub Actions integration
Monitoring & Quality
- Test Coverage: 75.2% comprehensive test coverage across all components
- Dynamic Status Badges: Real-time CI/CD, security, and quality status
- Automated Workflows: Enhanced GitHub Actions for testing, security, and deployment
- Code Quality: Go Report Card integration for code quality monitoring
Infrastructure Improvements
- Multi-Cloud Support: Enhanced AWS, Azure, GCP, and DigitalOcean providers
- Discovery Engine: Improved resource discovery with parallel processing
- API Enhancements: RESTful API with comprehensive endpoint coverage
- CLI Improvements: Enhanced command-line interface with better error handling
Technical Updates
- Go 1.21+ Support: Updated to latest Go version requirements
- Docker Integration: Improved containerization and deployment
- Configuration Management: Enhanced configuration handling and validation
- Error Handling: Robust error handling and recovery mechanisms
Performance
- Parallel Processing: Optimized resource discovery across multiple regions
- Caching: Improved caching mechanisms for better performance
- Memory Management: Enhanced memory usage for large-scale operations
- Timeout Handling: Better timeout management for long-running operations
Testing & Quality Assurance
- Comprehensive Test Suite: 75.2% test coverage across all packages
- Integration Tests: End-to-end testing for critical workflows
- Security Testing: Automated security scanning and validation
- Performance Testing: Load testing and performance benchmarks
Documentation
- Updated README: Comprehensive documentation with dynamic badges
- API Documentation: Complete API reference and examples
- Configuration Guide: Detailed configuration options and examples
- Troubleshooting: Enhanced troubleshooting and FAQ sections
Workflow Improvements
- GitHub Actions: Enhanced CI/CD pipeline with security scanning
- Automated Testing: Comprehensive test automation and reporting
- Security Scanning: Daily security analysis with Checkov
- Quality Gates: Automated quality checks and validation
Bug Fixes
- Workflow Fixes: Resolved GitHub Actions workflow issues
- Permission Issues: Fixed repository permission problems
- Script Dependencies: Resolved missing script file issues
- Badge Generation: Fixed dynamic badge generation and display
Getting Started
Quick Installation
`�ash
Download latest binary
curl -L https://github.com/catherinevee/driftmgr/releases/download/v1.1.0/driftmgr-linux-amd64 -o driftmgr
chmod +x driftmgr
Or use Docker
docker pull catherinevee/driftmgr:v1.1.0
`
Basic Usage
`�ash
Discover resources
./driftmgr discover --provider aws --region us-east-1
Check security status
./driftmgr security --scan
Generate drift report
./driftmgr drift --report --format json
`
Current Status
- Test Coverage: 75.2% (Target: 80%)
- Security Score: 95/100 (Checkov Analysis)
- Supported Providers: 4 cloud providers
- Active Checks: 100+ security validations
- Workflow Status: All systems operational
Links
- Documentation: README.md
- Security Report: Security Analysis
- Test Coverage: Coverage Report
- Issues: GitHub Issues
Acknowledgments
Special thanks to all contributors and the open-source community for making this release possible.
Full Changelog: v1.0.0...v1.1.0
DriftMgr v1.0.0 - Production Ready
DriftMgr v1.0.0 - Initial Release
🎉 Introduction
DriftMgr is an enterprise-grade infrastructure drift detection and remediation tool designed to help organizations maintain consistency between their Infrastructure as Code (IaC) definitions and actual cloud resources.
✨ Key Features
Multi-Cloud Support
- AWS: Full support for EC2, VPC, S3, IAM, RDS, Lambda, and more
- Azure: Comprehensive coverage of Resource Groups, VMs, Storage, Networks
- Google Cloud Platform: Support for Compute, Storage, Networking resources
- DigitalOcean: Droplets, Volumes, Load Balancers, and Kubernetes
Core Capabilities
🔍 Drift Detection
- Real-time comparison between Terraform state and actual cloud resources
- Intelligent diff algorithms to identify configuration changes
- Support for Terraform state versions 0.11.x through 1.x
- Parallel resource discovery for optimal performance
🔧 Automated Remediation
- Generate Terraform import commands for unmanaged resources
- Create remediation plans with approval workflows
- Support for both cloud-as-truth and code-as-truth strategies
- Safe rollback capabilities with automatic state backups
📊 State Management
- Remote backend support (S3, Azure Storage, GCS, Terraform Cloud)
- State file validation and integrity checking
- Automatic backup before modifications
- State manipulation operations (move, remove, import)
🏗️ Terragrunt Integration
- Full support for Terragrunt configurations
- Dependency resolution and graph analysis
- Run-all command support for multi-module operations
- Remote state handling
Operational Features
🖥️ Multiple Operation Modes
- CLI Mode: Direct command-line interface for all operations
- Server Mode: RESTful API for integration with CI/CD pipelines
- Dashboard Mode: Web-based UI for visualization and management
- Batch Mode: Process multiple state files and environments
📈 Monitoring & Compliance
- Continuous drift monitoring with configurable intervals
- Policy enforcement via Open Policy Agent (OPA)
- Compliance reporting (SOC2, HIPAA, PCI-DSS templates)
- Webhook notifications for drift events
🔒 Security & Safety
- Encryption for sensitive data at rest and in transit
- Audit logging for all operations
- Role-based access control (RBAC) in server mode
- Dry-run mode for all destructive operations
📋 Requirements
- Go 1.23 or later (for building from source)
- Cloud provider credentials (AWS, Azure, GCP, or DigitalOcean)
- Terraform state files (local or remote)
🚀 Quick Start
Installation
Binary Download
Download the latest binary for your platform from the releases page.
Docker
```bash
docker pull catherinevee/driftmgr:latest
docker run --rm -v ~/.aws:/root/.aws catherinevee/driftmgr discover --provider aws
```
Build from Source
```bash
git clone https://github.com/catherinevee/driftmgr.git
cd driftmgr
go build -o driftmgr ./cmd/driftmgr
```
Basic Usage
Discover Resources
```bash
Discover AWS resources in us-east-1
driftmgr discover --provider aws --region us-east-1
Discover all resources across multiple regions
driftmgr discover --provider aws --all-regions
```
Detect Drift
```bash
Detect drift using local state file
driftmgr drift detect --state terraform.tfstate --provider aws
Detect drift from remote backend
driftmgr drift detect --backend s3 --backend-config bucket=my-bucket --backend-config key=terraform.tfstate
```
Generate Remediation
```bash
Generate import commands for unmanaged resources
driftmgr remediate --import --output import-commands.sh
Apply remediation with approval
driftmgr remediate --plan drift-plan.json --apply
```
📦 What's Included
Binaries
driftmgr- Main CLI executabledriftmgr-server- API server for integration
Configuration
- Example configuration files in
configs/ - Terraform state examples in
examples/ - Docker compose files for quick setup
Documentation
- Comprehensive CLI documentation
- API reference for server mode
- Architecture and design documents
- Contributing guidelines
🏗️ Architecture
DriftMgr follows a modular architecture with clear separation of concerns:
- Provider Layer: Cloud-specific implementations for resource discovery
- State Management: Parsing, validation, and manipulation of Terraform state
- Drift Detection Engine: Comparison algorithms and diff generation
- Remediation System: Plan generation and execution
- API Layer: RESTful endpoints and WebSocket support for real-time updates
🧪 Testing
The release includes comprehensive test coverage:
- Unit tests for all core components
- Integration tests with LocalStack and cloud providers
- End-to-end tests for critical workflows
- Performance benchmarks for large-scale operations
📊 Performance
- Handles state files with 10,000+ resources
- Parallel discovery across multiple regions/accounts
- Incremental discovery using Bloom filters
- Efficient caching for repeated operations
🐛 Known Issues
- GitHub Actions runners may experience queueing delays
- Some cloud resources may require additional IAM permissions
- Large state files (>100MB) may require increased memory allocation
🙏 Acknowledgments
Special thanks to all contributors and the open-source community for making this project possible.
📝 License
DriftMgr is released under the MIT License. See LICENSE file for details.
🔗 Links
📈 Future Roadmap
- Kubernetes resource drift detection
- Pulumi state file support
- Cost impact analysis for drift
- Machine learning-based anomaly detection
- Additional cloud provider support (Oracle, IBM Cloud)
Full Changelog: This is the first stable release of DriftMgr.
Checksums
```
SHA256 checksums will be added after build artifacts are generated
```
DriftMgr v0.9.0 - Beta Release
DriftMgr v0.9.0 - Beta Release
Changes
- Added support for Terraform 1.x state files
- Implemented parallel resource discovery
- Added WebSocket support for real-time updates
- Improved error handling and recovery
- Enhanced AWS provider with 15 additional resource types
- Added compliance reporting templates
Bug Fixes
- Fixed memory leak in state parser
- Resolved race condition in parallel discovery
- Fixed Azure authentication issues
- Corrected drift detection false positives
Breaking Changes
- API endpoints restructured for consistency
- Configuration file format updated
Full Changelog: v0.8.0...v0.9.0
v1.01 release
production release of driftmgr