feat: enhance proxy architecture with centralized security groups and AL2023 upgrade (#215)

Harshvardhan Bahukhandi committed on Jun 26, 2025, 04:47 PM

Showing 26 changed files +2043 additions -626 deletions

M .gitignore +1

M README.md +2 -2

A cdk-outputs.json +11

M components/base.yml +64 -11

M components/envoy.yml +45 -12

M components/squid.yml +88 -9

M deploy_imagebuilder.sh +48

M install.sh +85 -26

A lib/aws/app_proxies_construct.ts +328

M lib/aws/configurations/envoy/envoy.yaml +63 -39

M lib/aws/configurations/squid/squid.conf +51 -19

M lib/aws/configurations/squid/squid_vector.toml +83 -46

M lib/aws/configurations/squid/wazuh.conf +78 -10

M lib/aws/configurations/squid/whitelist.txt +38 -1

M lib/aws/eks.ts +48 -347

M lib/aws/hs-sdk.ts +5 -3

M lib/aws/image_builder_stack.ts +2 -2

A lib/aws/istio_stack.ts +237

A lib/aws/lambda/get_istio_alb_dns.py +60

M lib/aws/networking.ts +6 -2

A lib/aws/security_groups.ts +477

M lib/aws/ssm.ts +1 -1

M lib/aws/stack.ts +46 -44

M lib/aws/userdata/envoy_userdata.sh +23 -10

M lib/aws/userdata/squid_userdata.sh +75 -37

M upgrade.sh +78 -5