#geodesic

Discussions related to https://github.com/cloudposse/geodesic Archive: https://archive.sweetops.com/geodesic/

2019-11-18

SweetOps #geodesic
05:00:04 PM

There are no events this week

Cloud Posse
05:02:06 PM

Join us for “Office Hours” every Wednesday 11:30AM (PST, GMT-7) via Zoom.

This is an opportunity to ask us questions about https://github.com/cloudposse/geodesic, get live demos and learn from others using it. Next one is Nov 27, 2019 11:30AM.
https://zoom.us/meeting/register/dd2072a53834b30a7c24e00bf0acd2b8\|Register for Webinar
#office-hours (our channel)

chrism

any quick tools to generate a “provider file” with the versions it recommends pinning

chrism
Deprecating Terraform 0.11 Support in Terraform Providers

During the upcoming months, we will begin deprecating support for Terraform 0.11 in new releases of Terraform providers we officially maintain, beginning with the AWS, AzureRM, Goo…

2019-11-13

chrism

How do you run “make lint” without it running terraform 0.11?

chrism

tried passing in env var but its got a fetish for 0.11

chrism
Add support for Mixed Instance Spot Policy Autoscaling. by ChrisMcKee · Pull Request #17 · cloudposse/terraform-aws-ec2-autoscale-group

Does as the label says; adds an example using it which I used to test that it works as expected. The "make && make init" keeps trying to install and setup terraform 0.11 which is …

chrism

meh doesnt do much anyway as it falls over using 12 at the validate step

chrism

is gomplate supposed to be in that mass of stuff in the build harness? /bin/bash: gomplate: command not found I’ve installed it and generated the file; still no idea why the build harness kept defaulting to v11 in the project but I broke my way passed it so

joshmyers

AFAICR gomplate isn’t installed inside geodesic, so you need that on your host

joshmyers

I lied. It is, but often you will want to run make readme from outside geodesic

chrism

Its a tf repo; so its more the “build tools” bit; i suppose its awkward to get the right binary unless you presume (like the terraform side) its all linux

chrism

I use go get ... in the end and ran it. instructions were unclear so I winged it

Jeremy Grodberg

In general, you run make init to load the build harness, but then you still may need to run make readme/deps to get gomplate so you can run make readme.

2

2019-11-12

Joe Niland

The module directories created by reference-architectures are all for Terraform 0.11. I’m creating my own for my app but I want to use 0.12.

I saw that @aknysh recommended to change the Makefile like this:

-include ${TF_MODULE_CACHE}/Makefile

And to add export TF_MODULE_CACHE=.module to terraform.envrc

But I want to create ${TF_MODULE_CACHE} if it’s not there.

So far I have this:

$(shell mkdir -p ${TF_MODULE_CACHE})
-include ${TF_MODULE_CACHE}/Makefile

## Fetch the remote terraform module
deps:
	terraform init

## Reset this project
reset:
	rm -rf Makefile *.tf .terraform

Is there a better way?

2019-11-11

SweetOps #geodesic
05:00:11 PM

There are no events this week

Cloud Posse
05:02:39 PM

Join us for “Office Hours” every Wednesday 11:30AM (PST, GMT-7) via Zoom.

This is an opportunity to ask us questions about https://github.com/cloudposse/geodesic, get live demos and learn from others using it. Next one is Nov 20, 2019 11:30AM.
https://zoom.us/meeting/register/dd2072a53834b30a7c24e00bf0acd2b8\|Register for Webinar
#office-hours (our channel)

Blaise Pabon

Sooo… the docs don’t actually describe how to get started with geodesic… I guessed that git clone <https://github.com/cloudposse/geodesic.git> && cd geodesic && geodesic would get me launch the shell. Next, it asked me for my passphrase (which I think I remember)

Blaise Pabon

I’ll tell you what, if I agree to be initiated me into the sacred brotherhood of geodesic and I swear that I will not reveal the sacred mysteries to anyone; will you show me the answer to the riddle:

-> Run 'assume-role' to login to AWS
 ⧉  geodesic
 ✗   (none) ~ ⨠  
Jeremy Grodberg

@Blaise Pabon Geodesic makes a few assumptions that are not really documented AFAIK but flow from the way things are set up by the CloudPosse Reference Architecture: https://github.com/cloudposse/reference-architectures

cloudposse/reference-architectures

Get up and running quickly with one of our reference architecture using our fully automated cold-start process. - cloudposse/reference-architectures

Jeremy Grodberg

Geodesic assumes that you are using AWS, and that you will get AWS credentials dynamically injected into your environment using some tool that allows you to assume an AWS IAM role. Typically that is aws-vault, but it can be aws-okta or anything. All that has to happen is that once you have your AWS credentials set up in your environment, you need to set the environment variable ASSUME_ROLE to the role name, after which the “Run assume-role” prompt will go away and the role name specified by ASSUME_ROLE will become part of the prompt.

Blaise Pabon

Oh! OK, I have been setting my AWS creds in $AWS_ACCESS_KEY etc. I will look over the reference arch setup more closely. Thanks for the tips. FWIW, I’m a fan of keeping a higher barrier to entry…. it keeps the day-trippers and riff-raff away. It’s not that Unix isn’t user-friendly, it’s just picky about who its friends are

2019-11-08

Erik Osterman
cloudposse/packages

Cloud Posse installer and distribution of native apps, binaries and alpine packages - cloudposse/packages

Erik Osterman

packages are now updated nightly using GitHub actions!

Erik Osterman

@aknysh can you test out @tamsky change: https://github.com/cloudposse/geodesic/pull/534

add Darwin support for bind mount of ssh-agent socket by tamsky · Pull Request #534 · cloudposse/geodesic

Newly available on Docker for Mac (Edge) release. https://docs.docker.com/docker-for-mac/edge-release-notes/ Someone should test that this doesn’t break on non-Edge Docker-for-Mac releases.

Blaise Pabon

I’ running docker for Mac Edge … an I think geodesic is working, but I can’t figure out how to make it do anything.

add Darwin support for bind mount of ssh-agent socket by tamsky · Pull Request #534 · cloudposse/geodesic

Newly available on Docker for Mac (Edge) release. https://docs.docker.com/docker-for-mac/edge-release-notes/ Someone should test that this doesn’t break on non-Edge Docker-for-Mac releases.

Erik Osterman

@Blaise Pabon can you give some examples?

Erik Osterman

If you think about geodesic as a light weight VM it might help

Erik Osterman

it comes preinstalled with all the essential tools

Erik Osterman

but you still need to add your apps

Erik Osterman

so if you haven’t done that, it’s not going to do much

Blaise Pabon

well, I would like to create a cluster with kops (that’s already built in) and then I would probably add k9s and popeye to the image. at the moment, it is asking me to run assume-role but I don’t know the syntax.

Blaise Pabon

I tried: /bin/bash assume-role arn<img src="/assets/images/custom_emojis/aws.png" class="em em-aws">iam:role/masters.kops.dev.travellogic.k8s.local assume-role arn<img src="/assets/images/custom_emojis/aws.png" class="em em-aws">iam:role/masters.kops.dev.travellogic.k8s.local assume-role arn<img src="/assets/images/custom_emojis/aws.png" class="em em-aws">iam:user/blaise

Erik Osterman

asssume-role is just a wrapper around aws-vault

Erik Osterman

you can only assume a role for something which has been previously configured in your ~/.aws/config

Erik Osterman

(also, those are not assume’able roles by the look of it)

Erik Osterman

….AWS makes this all complicated

Blaise Pabon

ah! ok, I can use the nomeclature of my .aws/config

aknysh

Will test

2019-11-07

Joe Niland

When using the reference-architectures project, would it be possible to adopt an existing account?

Erik Osterman

@Joe Niland technically yes, but we don’t optimize for that since it’s not how we (as a company) work. There are too many variables to consider.

Erik Osterman

It’s best to look at what geodesic represents: a strategy for bundling and shipping the tools and configuration for an environment

Erik Osterman

we happen to have our flavor of how to do that, but nothing restricts how it is used

Joe Niland

@Erik Osterman thanks. After I wrote that, I had a look through the account module and realised it’s not so easy.

Asking because I have a new client who have been working for a while in a single account and have AWS credits tied to it.

I’m working on creating the other accounts using your process and then will create a geodesic repo manually for the existing account. That’s the plan anyway!

Erik Osterman

Yes, I think manually creating the geodesic repos in this case is the way to go

Erik Osterman

https://calendly.com/cloudposse if you want some quick pointers

Erik Osterman

Welcome to my scheduling page. Please follow the instructions to add an event to my calendar.

Joe Niland

Thanks Erik!

Erik Osterman

Welcome to my scheduling page. Please follow the instructions to add an event to my calendar.

Jeremy Grodberg

In this situation, couldn’t he just make the existing account the root account and proceed from there?

Joe Niland

Hey Jeremy, I thought about doing that but there are a lot of resources in there. It’s a mix of important stuff, tests, etc. It thought it may be cleaner to start fresh and then migrate the bits they need across into the new structure.

2019-11-04

SweetOps #geodesic
05:00:06 PM

There are no events this week

Cloud Posse
05:05:23 PM

Join us for “Office Hours” every Wednesday 11:30AM (PST, GMT-7) via Zoom.

This is an opportunity to ask us questions about https://github.com/cloudposse/geodesic, get live demos and learn from others using it. Next one is Nov 13, 2019 11:30AM.
https://zoom.us/meeting/register/dd2072a53834b30a7c24e00bf0acd2b8\|Register for Webinar
#office-hours (our channel)

2019-11-03

2019-11-02

2019-11-01

    keyboard_arrow_up