Change Log¶
Classification: CONFIDENTIAL — Internal Use Only
This page is the running record of all production changes to GPUS-IT infrastructure. Every change — Normal, Emergency, or Standard — must have an entry here. The authoritative per-server log is /var/log/asset-inventory.log on each host.
Log Format¶
| CR ID | Date (UTC) | System(s) | Description | Type | Operator | Outcome |
|---|---|---|---|---|---|---|
| CR-2026-001 | 2026-03-13 | ALL | Initial GPUS-IT infrastructure build — SKY, RAIN, SUN, WIND, GCP VPN, Cloud Run, status site, backup pipeline | Normal | rajesh.chhetry | ✅ Success |
| CR-2026-002 | 2026-04-10 | SOC | SOC dashboard enhancements — alert drill-down (click KPIs/charts/agents to filter, filter pills, clear filters), Vulnerability Scan findings table (7 findings, CVSS/severity/host/port), Wazuh Alerts layout fix (3-card right column stack), MITRE heatmap tactic-name alignment | Normal | rajesh.chhetry | ✅ Success |
| CR-2026-003 | 2026-04-11 | SOC | MITRE heatmap agent FQDN normalization — fold Wazuh agent FQDNs to canonical short names in heatmap rows | Normal | rajesh.chhetry | ✅ Success |
| CR-2026-004 | 2026-04-11 | SOC | Reporting tab (tab 15) — 4 automated report types (IT Ops Weekly, Executive Monthly, Staff Monthly, Board Quarterly), distribution schedule, report_config.json | Normal | rajesh.chhetry | ✅ Success |
| CR-2026-005 | 2026-04-13 | DOCS | Documentation update — SOC dashboard enhancements, BT-001 §10 confirmed, API endpoints (/api/threat-hunt, /api/soc filter params) verified | Normal | rajesh.chhetry | ✅ Success |
| CR-2026-006 | 2026-04-15 | REPORTS | Carbon Footprint section added to Executive Monthly and Board Quarterly PDF reports (commit 85fa701) — yearly total, Scope 1/2/3 breakdown, regional emissions, contextual comparisons; data sourced from gs://gpus-infra-backups-wdc/carbon/latest.json |
Normal | rajesh.chhetry | ✅ Success |
| CR-2026-007 | 2026-04-17 | SKY / RAIN / SUN / WIND | Lynis JSON summary standardized — all 4 WDC servers now emit /var/log/lynis/lynis-summary.json with a 10-field schema (hostname, scan_date, hardening_index, warnings_count, suggestions_count, tests_performed, tests_skipped, firewall_active, malware_scanner, file_integrity) via /usr/local/sbin/gpus-lynis-scan.sh at 03:00 UTC. Current scores: SKY/RAIN 81, SUN/WIND 78. |
Normal | rajesh.chhetry | ✅ Success |
| CR-2026-008 | 2026-04-17 | SKY | Portal source backup cron installed — /usr/local/bin/gpus-portal-backup.sh runs daily at 02:30 UTC from SKY root crontab; archives MkDocs, Status, Security, and SOC portal sources to gs://gpus-infra-backups-wdc/portals/<portal>/<date>/. Log: /var/log/gpus-portal-backup.log. 30-day local retention. |
Normal | rajesh.chhetry | ✅ Success |
| CR-2026-009 | 2026-04-17 | CLOUD RUN | security.greenpeace.us converted to 301 redirect to soc.greenpeace.us (commit 26e08c5). The security-site Cloud Run service now runs a minimal nginx redirect container; all security content lives in the SOC dashboard. |
Normal | rajesh.chhetry | ✅ Success |
| CR-2026-010 | 2026-04-17 | REPORTS | Carbon Footprint PDF layout fix (v1.2) — Scope breakdown description column widened to 5.4" in report_generator.py so plain-language explanations no longer wrap or push numeric columns off the page. Presentation-only change; no schema or data-source changes. |
Normal | rajesh.chhetry | ✅ Success |
Adding entries
Add a new row to this table for every change, then rebuild and redeploy the portal.
The server-level log (/var/log/asset-inventory.log) is the real-time record; this page provides a searchable summary.
Change Log · v1.3 · 2026-04-17 · GPUS-IT · Classification: CONFIDENTIAL — Internal Use Only