Skip to content

Commit a6d4dcd

Browse files
committed
Updates to release notes generator
1 parent b0fdab8 commit a6d4dcd

File tree

2 files changed

+308
-1
lines changed

2 files changed

+308
-1
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,307 @@
1+
Description,Labels
2+
"We need to review, formalize, and document security event structure.
3+
4+
5+
### Phase I
6+
- [x] Document all fields and create documents describing all log fields:
7+
- [x] Access Log
8+
- [x] WAF Security Event
9+
- [x] Service Policy
10+
- [x] Bot Defense Security Event
11+
- [x] Delete irrelevant fields (not relevant to customers, not used internally)
12+
- [x] Hide fields irrelevant to customers (move to `internal_info` to make them invisible to customers).
13+
14+
15+
### Phase II
16+
- [ ] Hide irrelevant fields in Lightning
17+
- [ ] Hide irrelevant fields in Global Log Receiver.
18+
- [x] Create a document for the ""API access log"", describing all log fields.
19+
- [x] Rename the misleading field `calculated_action` to `recommended_action`
20+
21+
22+
**Note:**
23+
Some attributes have been added during the chain, should get from @user1 the components chain to validate from where to delete each attribute.
24+
25+
26+
---
27+
https://test.io/features/WESH-715","Jan-16-2024-Release,Release-Note-Required::NO,area/AppSecurity,feature-status::in-development,logging,priority::medium,specifications"
28+
"#### Release Notes Info
29+
30+
31+
Release-Note-Summary: New action for L7 DDoS auto mitigation
32+
33+
34+
Release-Note-Detail: L7 DDoS now supports JavaScript Challenge as one of the mitigation options in addition to blocking. This option provides flexibility for customers, to choose an action of their choice to mitigate volumetric DDoS attacks
35+
36+
37+
#### Description
38+
Today DoS mitigation object can only block suspicious sources. We should add support for additional actions:
39+
40+
41+
- JS Challenge
42+
- Captcha
43+
- Allow (for internal use to cover allow few deny all use case)
44+
45+
46+
Phase 1:
47+
48+
49+
JS Challenge
50+
51+
52+
- Schema
53+
1. Update EnableDDoSDetectionSetting configuration to support Action property. Two supported actions in this phase will be Blocked (default) and JS Challenge.
54+
2. Add JSChallenge action to L7AclAction enum.
55+
3. Hide Cookie Expiration property as from now on we plan to use Session cookie for JS Challenge.
56+
57+
58+
- Akar:
59+
1. If JS Challenge action is selected
60+
- Never create FastAcl even if we block by IP.
61+
- Create L7Acl rule with JS Challenge action.
62+
- Update JS Challenge configuration on vhost level.
63+
64+
65+
- Hello
66+
1. Propagate JS Challenge configuration from vhost to Depot
67+
68+
69+
@j.smith","Eng-QTR::CY24Q1,Jan-16-2024-Release,Release-Note-Required::Feature,area/AppSecurity,feature-status::in-development,priority::medium"
70+
"_____________________________
71+
<details><summary>Click to expand for more info on Feature Status and Workflow </summary>
72+
73+
74+
Feature goes through the following states and is tracked with labels
75+
76+
77+
78+
79+
**Open** => <br>
80+
**[PM Area]** ~""feature-status::in-plm-backlog"" => ~""feature-status::in-plm-design"" => ~""feature-status::in-ux-backlog"" => ~""feature-status::in-plm-ux-design"" => <br> **[Engg Area]** ~""feature-status::in-engg-backlog"" => ~""feature-status::in-engg-design"" => ~""feature-status::in-resource-plan"" => ~""feature-status::in-development"" => ~""feature-status::in-test"" => <br> **[PM Area]** ~""feature-status::ready-to-ship"" => <br>
81+
**Closed**
82+
83+
84+
| Status Labels | Description |
85+
| ------ | ------ |
86+
| Open | Indicates a new feature waiting for PM evaluation |
87+
| ~""feature-status::in-plm-backlog"" | Indicates PM considered the Feature and needs to start Analysis of Requirements |
88+
| ~""feature-status::in-plm-design"" | Indicates PM is working on PRD & prioritization |
89+
| ~""feature-status::in-ux-backlog"" | Indicates waiting for UX team to evaluate for required UX changes/suggestions |
90+
| ~""feature-status::in-plm-ux-design"" | Indicates UX team is working on the UX Design changes for implementation |
91+
| ~""feature-status::in-engg-backlog"" | Indicates Requirements are understood, pending Engg Design |
92+
| ~""feature-status::in-engg-design"" | Indicates Engg Design in-progress |
93+
| ~""feature-status::in-resource-plan"" | Indicates Design complete, pending development resources allocation |
94+
| ~""feature-status::in-development"" | Indicates Development in-progress, **delivery release/date identified** |
95+
| ~""feature-status::in-test"" | Indicates Testing in-progress |
96+
| ~""feature-status::ready-to-ship"" | Indicates Feature ready from software perspective and Solution Engg, and Tech Writers team working on finalizing the things |
97+
| Closed | Indicates Feature Shipped |
98+
99+
100+
</details>
101+
102+
103+
_____________________________
104+
105+
106+
##### End to End Feature Owner - @user2
107+
108+
109+
110+
111+
#### Release Notes Info
112+
Release-Note-Summary: Introducing Detailed Events in the Synthetic Monitoring Service.
113+
114+
115+
Release-Note-Detail: Users can triage issues faster and dive deeper into critical events with `Detailed Events` in synthetic HTTP and DNS monitors in the `Events` table.
116+
117+
118+
119+
120+
#### TOI/Wiki
121+
* Provide the links to TOI/Wiki here
122+
123+
124+
125+
126+
127+
#### Demo Recordings
128+
* Provide the link(s) here
129+
130+
131+
_____________________________
132+
133+
134+
## Description
135+
Synthetic monitoring customers want the ability to the view the verbose output/response of the synthetic monitor checks they are running against their endpoints to understand what issues and outages their end users are facing when using their applications.
136+
137+
138+
This would be a minor enhancement to the existing events design that exists in the service today.
139+
140+
141+
_____________________________
142+
143+
144+
## Tasks
145+
Format:
146+
147+
148+
Status ==> ~""status::todo"" (or) ~""status::doing"" (or) ~""status::fixed"" (or) ~""status::blocked""
149+
150+
151+
""Due Date"" ==> DD-MON-YYYY
152+
153+
154+
#### Design
155+
Some areas may be NA for some features. Feature owner to add feature specific areas, if any.
156+
157+
158+
| Type | Summary | Owner(s) | Approver(s) | Document Link |
159+
| ----------------- | ------- | -------- | ----------- | ------------- |
160+
| UX | | | | |
161+
| SRE | | | | |
162+
| UI Config | | | | |
163+
| UI Monitoring | | | | |
164+
| Schema | | | | |
165+
| UI Automation | | | | |
166+
| API Automation | | | | |
167+
| Security Review | Security Review of the Architecture/Design before Implementation begins | | Security Architecture Team | [Please open a Security Review ticket](https://gitlab.com/nextgen/nextgen.io/secops/-/issues/new?issuable_template=security_review_request#) |
168+
169+
170+
171+
#### Implementation
172+
173+
174+
| Type / Component | Summary | Owner(s) | Due Date | Status | Comments |
175+
| ---------------- | ------- | -------- | -------- | ------ | -------- |
176+
| | | | | | |
177+
| | | | | | |
178+
| | | | | | |
179+
| | | | | | |
180+
| Security Review | Security Review after code complete | | Security Architecture Team | | Please update the Security Review ticket
181+
182+
183+
184+
185+
_____________________________
186+
187+
188+
189+
190+
CC: @dev1 @dev2 @dev3
191+
192+
193+
**DO NOT EDIT THE SECTIONS BELOW.**
194+
195+
196+
---
197+
198+
199+
### Request for Security Review
200+
201+
202+
- [ ] Security Reivew of Architecture complete @smith.joan
203+
- [ ] Security Review after Code Complete @smith.joan
204+
205+
206+
### Security Review Status
207+
208+
209+
- [ ] Reviewed and Approved Architecture
210+
- [ ] Reviewed and Approved Architecture with Conditions
211+
- [ ] Reviewed and Approved Code Complete
212+
- [ ] Reviewed and Approved Code Complete with Conditions
213+
- [ ] Request for more Information","Eng-QTR::CY24Q1,Jan-16-2024-Release,Release-Note-Required::Feature,gov/service-onboarding,pm-area/next-genxc-beacon,specifications"
214+
"#### Release Notes Info
215+
-----------
216+
Release-Note-Summary: Fixed Access Issues for Tenants with Tenant Access Policy set
217+
218+
219+
Release-Note-Detail: Resolved issue with Incorrect client IP extraction resulting in failure of Tenant access.
220+
221+
222+
-----------
223+
224+
225+
- **Environment:** prod
226+
- **Tenant:**
227+
- **Namespace:**
228+
- **Site:**
229+
- **Site Software Version:**
230+
- **Time of problem:**
231+
- **Relevant Objects:**
232+
233+
234+
---
235+
236+
237+
**Detailed Description/Screenshots:**
238+
239+
240+
During production Sep-12 upgrade window, we switched traffic from rainbow to rainbowprime. After that BigCo start to see 403 on their tenant access.
241+
242+
243+
![image](/uploads/8d49685353545afb2ea28de5c6de9203/image.png)
244+
245+
246+
By checking with team we think the issue is on the tenant service policy allowed IP are not working.
247+
248+
249+
https://gitlab.com/next-gen/nextgen.io/sre-prod-model/-/blob/main/ongoing/yazr/objects/customer/dev-tenant/custom_rbac.yaml#L79
250+
251+
252+
We have added custom CNAME for those tenant below to switch their traffic back to rainbow, after that BigCo confirmed it is working fine.
253+
254+
255+
```plaintext
256+
257+
258+
prd-tenant.console.ves
259+
dev-tenant.console.ves
260+
dev-uci.console.ves
261+
prd-uci.console.ves
262+
aoins.console.ves
263+
blueshore.console.ves
264+
fnni.console.ves
265+
next-genxc-ops.console.ves
266+
next-genxc-ops-stg.console.ves
267+
next-gen-silverline.console.ves
268+
```
269+
270+
271+
Please check how tenant access policy will work under rainbowprime
272+
273+
274+
\#### Release Notes Info
275+
276+
277+
Release-Note-Summary: Start to support tenant access policy on new console endpoint
278+
279+
280+
Release-Note-Detail: In Sep release we switched NextGenXC console to a new endpoint, since tenant access policy is not supported, some customer are staying on the old endpoint. From this release new console endpoint start to support tenant access policy.","2024-Jan,Eng-QTR::CY24Q1,Hardening,Jan-16-2024-Release,READY-FOR-TEST,Release-Note-Required::Issue-GC-RE,area/eng/be/saas,customer::bigco,env::prod,feature-status::in-test,pm-area/next-genxc-platform,priority::high,product/owner/saas::joan-smith,technical"
281+
"Row 41 in https://next-gen.sharepoint.com/:x:/r/sites/NextGenXC/_layouts/15/Doc.aspx?sourcedoc=%7BF329AB0E-4FSF-5420-9AZE-04BF6FA2C51%7D&file=XC%20Issues%20BigCo%20Master%20Tracker%20v1.0.xlsx&action=default&mobileredirect=true
282+
283+
284+
Node software Changelog include OS version updates and a brief reason for the version bump to help educate customers inform on their version upgrade decision planning.","2024-Jan,Eng-QTR::CY24Q1,Hardening,Jan-16-2024-Release,Release-Note-Required::NO,area/eng/sre,ce-process,customer::bigco,feature-status::in-engg-backlog,pm-area/next-genxc-platform,priority::high,product/owner/saas::joan-smith,program/ce-stability"
285+
"env: Demo1
286+
287+
288+
The change made to replace padding with grid gap seems to have caused issues in dashboard report emails
289+
290+
291+
https://gitlab.com/next-gen/nextgen.io/rainbow/-/issues/10490.
292+
293+
294+
![image](/uploads/a101e9ed1a72a96505c1a62558f6288b/image.png)
295+
296+
297+
Figma:
298+
299+
300+
![image.png](/uploads/785744760cf22d5a407a519ddfcde46d/image.png)
301+
302+
303+
cc @dev1 @dev2","2023-Nov,Eng-QTR::CY24Q1,Jan-16-2024-Release,READY-FOR-TEST,Release-Note-Required::NO,console/monitoring,env::prod,month/week4"
304+
"planning to cover below UI automation gap and hardening tasks:
305+
1. RBAC automation coverage : https://gitlab.com/next-gen/nextgen/nexgen.io/hello/-/issues/6206
306+
2. Clone objects test : https://gitlab.com/next-gen/nextgen/nexgen.io/hello/-/issues/6106
307+
3. Disallowed response code : https://gitlab.com/next-gen/nextgen/nexgen.io/hello/-/issues/6287","Eng-QTR::CY24Q1,Jan-16-2024-Release,Release-Note-Required::NO,area/test"

release-notes-generator/start/main.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99

1010

1111
# Initialise the state
12-
wf.init_state({
12+
initial_state = wf.init_state({
1313
"my_app": {
1414
"title": "RELEASE NOTES GENERATOR"
1515
},

0 commit comments

Comments
 (0)