rackerlabs/maestro

AWS EC2 SSM Management Orchestrator

maestro's Issues

Handling of shell commands

Feature Request:

Instead of creating an running a new SSM document when running a shell command, would it be possible to have Maestro default to using the AWS-RunShellScript and AWS-RunPowerShellScript documents when using the run command option? Because Maestro creates a temporary document, you lose the ability to audit commands run when analyzing Cloudtrail data.

Maestro SSM API Example:

{"outputs3bucketname":"maestro-123456789","instanceids":["i-000000001234"],"interactive":false,"documentname":"123456789-temp-document"}

AWS-RunShellScript API Example:

{"interactive":false,"documentname":"AWS-RunShellScript","comment":"Run   DB   Migrations","parameters":{"commands":["/user/bin/destroy"]},"targets":[{"values":["i-000000001234"],"key":"instanceids"}]}

Benefits:

• Greater verbosity in Cloudtrail logs related to SSM shell command runs.

Drawbacks:

• Unknown

Additional Details:

List Instances Error

List Instances errors when instances exist in the SSM API but are no longer around.

Operating System:

OSX

Cli Version:

v0.1.0-3-g2a0df61

Expected Behavior:

Maestro list instances should list instances available to run commands on.

Actual Behavior:

Maestro list instances will get back instances that no longer exist but still show up in the API. A good solution is to filter by the PingStatus and if the instance shows as Offline then not show it as an available instance. This prevent an API error when maestro tries to get more information on the instance.

Latest OSX Build Missing

The latest build for darwin OSX is missing from the download location:

https://maestro.rax.io/latest/maestro-osx.zip

--2017-11-06 10:40:15--  https://maestro.rax.io/latest/maestro-osx.zip
Resolving maestro.rax.io... 13.32.168.44, 13.32.168.74, 13.32.168.211, ...
Connecting to maestro.rax.io|13.32.168.44|:443... connected.
HTTP request sent, awaiting response... 404 Not Found
2017-11-06 10:40:15 ERROR 404: Not Found.

File Edit and Copy

Feature Request:

I would like an easy way to download files (SCP Like) from a server running SSM and also editing files in place using SSM.

The way I'm thinking about this is a custom SSM document that will cp the file to S3 and then just a simple S3 Get Object like Maestro does when fetching output. In the case of the in place editing, It would then upload once the editor is closed and run another SSM document to download the file back to the server.

Benefits:

• Eliminates the need for SCP and similar commands.
• Provides more opportunity to avoid actually logging into a server directly.

Drawbacks:

• File editing in line would not be as fast as being on a server and doing it directly.
• It would not be able to handle more than one instance at a time.