#office-hours (2021-06)
“Office Hours” are every Wednesday at 11:30 PST via Zoom. It’s open to everyone. Ask questions related to DevOps & Cloud and get answers! https://cloudposse.com/office-hours
Public “Office Hours” are held every Wednesday at 11:30 PST via Zoom. It’s open to everyone. Ask questions related to DevOps & Cloud and get answers!
https://cpco.io/slack-office-hours
Meeting password: sweetops
2021-06-01
2021-06-02
A Cloud Guru has signed a definitive agreement to be acquired by Pluralsight
/PRNewswire/ – Pluralsight, Inc., the technology workforce development company, today announced that it has entered into a definitive agreement to acquire A…
this is terrible nwes
/PRNewswire/ – Pluralsight, Inc., the technology workforce development company, today announced that it has entered into a definitive agreement to acquire A…
news*
ACG went downhill after purchasing LA. LA was much better in my opinion.
This is coming from someone who actually likes Kroonenberg. ACG cheapened the value of AWS certs.
The redesigned interface for HashiCorp Terraform Cloud brings clarity to how your resources, state, and infrastructure operations are represented during a Terraform run.
@Matt Gowie this is for you
The redesigned interface for HashiCorp Terraform Cloud brings clarity to how your resources, state, and infrastructure operations are represented during a Terraform run.
anyone try it out yet
?
@Mohammed Yahya Ah cool. I saw that flag the other day actually but didn’t know they posted something about it. I’m switching away from TFC though… can’t deal with that price tag for a larger customer.
Have not tried this. The requirement to be on 0.15.2 means I can’t easily make the switch.
@here office hours is starting in 30 minutes! Remember to post your questions here.
Erik Osterman (Cloud Posse) has joined Public “Office Hours”
test has joined Public “Office Hours”
Leia Renée has joined Public “Office Hours”
Dae Choi has joined Public “Office Hours”
Michael Jenkins has joined Public “Office Hours”
Isa Aguilar has joined Public “Office Hours”
Karim Othman has joined Public “Office Hours”
Sheldon Hull has joined Public “Office Hours”
Eric Berg has joined Public “Office Hours”
Vlad Ionescu has joined Public “Office Hours”
@Erik Osterman (Cloud Posse) Wicked cool room to stream from. Love it.
Matt Gowie has joined Public “Office Hours”
Michael Martin has joined Public “Office Hours”
emem umoh has joined Public “Office Hours”
Patrick Joyce has joined Public “Office Hours”
Florain Drescher has joined Public “Office Hours”
Stevan Arychuk has joined Public “Office Hours”
Mykola Lev has joined Public “Office Hours”
Andrey Nazarov has joined Public “Office Hours”
Hao Wang has joined Public “Office Hours”
Florain Drescher has joined Public “Office Hours”
Sam C has joined Public “Office Hours”
Steven Hopkins has joined Public “Office Hours”
Amelia Graycen has joined Public “Office Hours”
Oscar Blanco has joined Public “Office Hours”
Neil Gealy has joined Public “Office Hours”
Dirk-Jan Steltenpool has joined Public “Office Hours”
Here’s one for discussion if we have time. I’ve been thinking through “Cloud Native” development vs “Local Development -> To Cloud”.
Question: If “adopting cloud first” accelerates by fully using AWS services solves much reengineering, then how/should you balance local containerization/development? IE, building an ECS Service, but then maintaining a docker compose stack for local development as well.
Examples:
- Using environment variables in containers vs loading directly from ssm, secrets manager
- Building for ECS but then reinventing with local docker stack + mysql instead of RDS.
- Using RDS, but then in local docker having postgresql/mysql
I’m going to follow this disuccsion. I’m in a similar situation where i have apps that are migrating to containerization and i’m starting with building the image locally and running the stack with compose + containerized postgresql. it works great. downstream from that i push the image to ECR and deploy from there into ECS.
So perhaps I am going the opposite direction than what you shared?
In any case, dealing with env parameters and other inputs is something my team is still working on. for simple apps that just need a DB its not an issue. for others that need API keys, etc, its a bit more of a pain to run and test locally.
how/should you balance local containerization/development?
There is also the ECS integration for docker compose which ideally would allow you to use your compose definition to deploy to ECS. I haven’t had much luck with this one though. I’d also be interested in seeing how this ties into services like RDS and base infra like VPCs, subnets, security groups, etc.
Good stuff. Yeah I’m not interested in the docker ecs integration as I feel it’s too much like Amplify, good for a prebuilt stack but not great for full control when I can just use terraform.
I’m thinking local dev can be painful if it’s all ecs but at the same time if infra as code does the stack for them and they can have their own sandbox (timeboxed) then at that point maybe what’s the point of redoing the stack locally when multiple services required. At that point maybe my focus should be on self-service dev environment on demand using all the cloud services. Just build for AWS from ground zero and not worry about env variables vs ssm parameters if the whole stack is contained in AWS anyway
Posting gist of question for more compact review during office hours….
I am building a mix of containers + some services that in production will be on ec2, but still mostly able to be containerized.
Where do we draw the balance between full leveraging of AWS tools and eco system vs local docker experience?
- Example 1: SSM Parameters as source of config vs env variables? Mix and match, more logic to build?
- Example 2: docker compose with reverse proxy, much more complicated to run locally with SSL and not even same code necessarily in production for final configuration. Do we eliminate trying to spin all this up locally and rely on ecs task only?
- Example 3: web app + backend + database (mySQL)… now a compose stack that needs to talk to another compose stack. Reproduce all this in local docker compose stacks despite eventually going to RDS + ECS Fargate?
other related links of interest for those thinking through this
Threaded Discussion:
Twitter Thread: Economics and general discussion of building with cloud native approach vs building your own https://twitter.com/zackkanter/status/1399013516107948037 Dev.To Debate on Serverless side (ties into container stuff too): https://dev.to/garethmcc/why-local-development-for-serverless-is-an-anti-pattern-1d9b
Excellent financial analysis of using commoditized cloud infrastructure (vanilla servers). It misses: i) the (long-term devastating) cultural cost of recruiting world-class engineers to do undifferentiated heavy lifting; ii) it’s unfeasible to recreate noncommodity infra. 1/n https://twitter.com/martin_casado/status/1397989124682903554
[NewPost] Sure, Cloud is great. But we show it hurts share price of public companies on the order of hundreds of billions
… and they can economically justify almost any level of work (including repatriation) in order to lower costs (w/ @sarahdingwang)
Developing locally when building a serverless application is not only tiresome and hard to do its actually bad for you
I used Pluralsight a few years ago and it got good trainings on it
seems some trainers got rich by teaching on it lol
Amplify is similar to Netlify with being a more plug and play with less effort it seems
a new version of beanstalk?
sorry, they are definitely 2 products, looks to me they are trying to solve the same issue from different angles
A simpler, more powerful beanstalk IMO. Still not a good use-case for a lot of scenarios but good for lots of simpler use-cases like simple static sites.
Have you used Netlify and can you compare the experience? Netlify has been fantastic to make CICD for my blog super easy and lots of perks. AWS has little control with budgets so I’m leary of using them for anything personal
no, heard of it
got it
I haven’t used Netlify, but If you’re already on Netlify then I’d probably just stay on it. Likely not worth the switch for something that already exists.
Netlify focuses on static site CICD and simple serverless functions. It’s very targeted so all design is focused purely on static website process, automatic branch previews etc.
Oliver Schoenborn has joined Public “Office Hours”
Wilson Chan has joined Public “Office Hours”
Marc Slayton has joined Public “Office Hours”
Nick James has joined Public “Office Hours”
Jignesh Doshi has joined Public “Office Hours”
Andy Roth has joined Public “Office Hours”
Mykola Lev has joined Public “Office Hours”
I love yaml, it is a language between English and Chinese lol
that I can understand
PR in question — https://github.com/vmware-tanzu/carvel-vendir/pull/64
s appreciated!
Issue: #37 Created a function that will copy existing files listed in the destination directory to the staging area prior to deletion preserving the content. I felt that pulling the content into th…
Mohammed Yahya has joined Public “Office Hours”
tamsky has joined Public “Office Hours”
cc: @Andy Miguel
neat!
Leapp is the tool to access your cloud. It securely stores your access information and generates temporary credential sets to access AWS and Azure Cloud envi…
I’m a big, big fan of Leapp. It became an must to have tool on my mac.
Leapp is the tool to access your cloud. It securely stores your access information and generates temporary credential sets to access AWS and Azure Cloud envi…
Leapp is the tool to access your cloud; It securely stores your access information and generates temporary credential sets to access your cloud ecosystem from your local machine. - Noovolari/leapp
@Jeremy G (Cloud Posse)
Thanks for sharing!
Started discussion here based on your thoughts to get that dialogue started.
Improvements on Launching Sessions with Custom Commands
Sweet, I responded
support sso and ssm
@Erik Osterman (Cloud Posse) Might be good for our client’s developers. Definitely far underpowered for me to use.
Hi everyone I’m Andrea, one of the maintainer of the Leapp project. Thanks for mentioning our project and for opening a discussion on it! Tomorrow i will give you a detailed response on all your questions, and i will be open on discussing all the ideas on the app, based on your needs! I really enjoy speaking about cloud access.
Sadly since tomorrow I will be busy, because on tomorrow I have the DevOps Professional certification on AWS!
Cool - maybe we can have you on an upcoming office hours too
absolutely! will be a pleasure to me!
Gilberto has joined Public “Office Hours”
https://itnext.io/managing-kubernetes-secrets-securely-with-gitops-b8174b4f4d30 looks like a decent read about the SOPS stuff. Haven’t finished getting through it yet
You can manage secrets with GitOps and you should. Using GitOps you can do it securely, you can do it at scale, and it’s automated!
13:51:48 From Vlad Ionescu to Everyone : XML
14:01:07 From Patrick Joyce to Everyone : I want to use eco anywhere on Digital ocean droplets, it'll be like inception
14:01:47 From Vlad Ionescu to Everyone : Plaid does the same thing: they work on APIs so to apply to them you must do an API call
14:01:51 From Vlad Ionescu to Everyone : <https://plaid.com/careers/>
14:01:52 From Mohammed Yahya to Everyone : <https://registry.terraform.io/providers/playgroundtech/playgroundtech/latest/docs/resources/application?pollNotifications=true>
14:03:21 From Oliver Schoenborn to Everyone : Hilarious
14:05:33 From Hao Wang to Everyone : lol
14:06:00 From Hao Wang to Everyone : Starcraft: "show me the money"
14:07:01 From Hao Wang to Everyone : Seems not related but idk why I recalled it
14:07:07 From Stevan Arychuk to Everyone : Really waiting for this feature to come back to Leapp: <https://github.com/Noovolari/leapp/pull/90>
14:07:45 From Stevan Arychuk to Everyone : I generally really like Leapp, it's been a bit annoying for some of our Devs (we do have SSO setup)
14:08:31 From Mohammed Yahya to Everyone : Big fan also.
14:13:33 From Marc Slayton to Everyone : You mentioned ssm integration -- how about RDS IAM integration? Anything there?
14:17:02 From Stevan Arychuk to Everyone : +1 to their dev team being super responsive
14:17:11 From tamsky to Everyone : How about avoiding credentials files alltogether - load ssh-agent with TPM-stored certificates ?
14:27:44 From Sheldon Hull to Everyone : I had posted in office-hours about cloudfirst development approach. Would be nice to have some discussion on this after call if anyone has thoughts. It changes software design quite a bit
14:29:54 From Sheldon Hull to Everyone : you all are awesome
Hi @sheldonh: I’m dealing with that at the moment because I want to create a portfolio site, and the content of the site is meant to serve as a skaffold for anyone who might want to build their own portfolio site.
sorry, content of what site? Are you talking about netlify/static sites or something else?
Oops, sorry @sheldonh I meant: https://vitrina.readthedocs.io/
2021-06-03
ciao everyone, where’s the best place to post contribution PRs?
2021-06-04
2021-06-06
@here hey everyone! We’re excited to announce a special edition of Office Hours this week!
We have @Yoni Leitersdorf (Indeni Cloudrail) joining us from Indeni. Yoni is a regular contributor and active member of our community and he’s going to talk to us about their product Cloudrail and how it can help you identify misconfigurations in your IaC so you can achieve Continuous Compliance in your CI processes. Make sure you post your questions here
Indeni provides security infrastructure automation with unprecedented visibility that’s ready to go in minutes so you can focus on mission-critical projects.
2021-06-07
2021-06-09
@bober2000 has joined the channel
@here office hours is starting in 30 minutes! Remember to post your questions here.
Question: I’d like further discussion on what’s a general good practice for dealing with local developer vs cloud first experience. See details on that thread. Posting a question right now to summarize for easier review
Threaded Discussion: https://sweetops.slack.com/archives/CHDR1EWNA/p1622659071049000
Here’s one for discussion if we have time. I’ve been thinking through “Cloud Native” development vs “Local Development -> To Cloud”.
Question: If “adopting cloud first” accelerates by fully using AWS services solves much reengineering, then how/should you balance local containerization/development? IE, building an ECS Service, but then maintaining a docker compose stack for local development as well.
Examples:
- Using environment variables in containers vs loading directly from ssm, secrets manager
- Building for ECS but then reinventing with local docker stack + mysql instead of RDS.
- Using RDS, but then in local docker having postgresql/mysql
Erik Osterman (Cloud Posse) has joined Public “Office Hours”
Tim Gourley has joined Public “Office Hours”
Vlad Ionescu has joined Public “Office Hours”
A V has joined Public “Office Hours”
Phil Sautter has joined Public “Office Hours”
Patrick Joyce has joined Public “Office Hours”
Andrew Way has joined Public “Office Hours”
Matt has joined Public “Office Hours”
Gilberto Michishita Junior has joined Public “Office Hours”
Yoni Leitersdorf has joined Public “Office Hours”
Karim Othman has joined Public “Office Hours”
Robin Aguilar has joined Public “Office Hours”
Sheldon Hull has joined Public “Office Hours”
Luis Masaya has joined Public “Office Hours”
Stevan Arychuk has joined Public “Office Hours”
Andy Miguel (Cloud Posse) has joined Public “Office Hours”
emem umoh has joined Public “Office Hours”
Andrew Thompson has joined Public “Office Hours”
:tada: WOW. Never thought 1.0
would happen. That’s fun
Colton Wrisner has joined Public “Office Hours”
links from today’s office hours:
• https://www.hashicorp.com/blog/announcing-hashicorp-terraform-1-0-general-availability
• Signup to Cloudrail: https://web.cloudrail.app/
• Sample TF test cases to test Cloudrail against: https://github.com/indeni/cloudrail-demo
Terraform 1.0 — now generally available — marks a major milestone for interoperability, ease of upgrades, and maintenance for your automation workflows.
This repository contains the instructions for how to use Cloudrail, as well as specific scenarios to test Cloudrail with. - indeni/cloudrail-demo
emem umoh has joined Public “Office Hours”
Rashid has joined Public “Office Hours”
Nick James has joined Public “Office Hours”
Isa Aguilar has joined Public “Office Hours”
Pepe Amengual (CloudPosse) has joined Public “Office Hours”
Mohammed Yahya has joined Public “Office Hours”
Brice Zakra has joined Public “Office Hours”
Winson Chan has joined Public “Office Hours”
Pepe Amengual (CloudPosse) has joined Public “Office Hours”
Open source solution for static code analysis of Infrastructure as Code. Finding security vulnerabilities, compliance issues, and infrastructure misconfigurations during project development cycle.
Pepe Amengual (CloudPosse) has joined Public “Office Hours”
Eric Berg has joined Public “Office Hours”
Gabriel Boie has joined Public “Office Hours”
James Haughey has joined Public “Office Hours”
Joaquin Menchaca has joined Public “Office Hours”
Blaise Pabon has joined Public “Office Hours”
Michael Jenkins has joined Public “Office Hours”
C D has joined Public “Office Hours”
@redeux shared with me the following link
https://www.terraform.io/docs/language/v1-compatibility-promises.html
In short, we aim to make upgrades between v1.x releases straightforward, requiring no changes to your configuration, no extra commands to run upgrade steps, and no changes to any automation you’ve set up around Terraform.
So basically, 1.x should be pretty smooth, but 1.x → 2.x might be 0.11
→ 0.12
all over again
From Terraform v1.0 onwards the Terraform team promises to preserve backward compatibility for most of the Terraform language and the primary CLI workflow, until the next major release.
2021-06-10
@here we have another special edition of Office Hours next week Wednesday June 16th!
@Taylor Dolezal will be joining us! Taylor is a Senior Developer Advocate at HashiCorp and we’ll be talking to him about an array of topics including: his role, what’s it like to be a developer at HashiCorp, what we can expect next for Terraform, Nomad vs Kubernetes, security considerations with custom providers, and answering live Q&A from anyone who joins! Hope to see you there
@Taylor Dolezal has joined the channel
@Taylor Dolezal, welcome brother
Hola, compadre! Long time, no see!
Looking forward to your talk
I can’t wait!
2021-06-15
Does anyone here run kubernetes in a FedRAMP environment? If so, what do you use for backups? I was looking at Valero but it doesn’t appear to have FIPS approved libraries.
2021-06-16
@here office hours is starting in 30 minutes! Remember to post your questions here.
Just want to get some feedback from everyone.
- we have a python backend and a react front. currently everything is in aws. my architect recommended this setup. What do you think? Is this an easy task to do in aws?
- Does anyone have experience with Trend Micro Cloud Conformity. Do you recommend it or not?
- For SCA and SAST tools, what would be good libraries or tools for python and react code base?
I don’t think we’ll get to this today because we have another special edition with @Taylor Dolezal, Developer Advocate of HashiCorp joining us
Just want to get some feedback from everyone.
- we have a python backend and a react front. currently everything is in aws. my architect recommended this setup. What do you think? Is this an easy task to do in aws?
- Does anyone have experience with Trend Micro Cloud Conformity. Do you recommend it or not?
- For SCA and SAST tools, what would be good libraries or tools for python and react code base?
Erik Osterman (Cloud Posse) has joined Public “Office Hours”
Niraj Palecha has joined Public “Office Hours”
Taylor Dolezal has joined Public “Office Hours”
Victor Xu has joined Public “Office Hours”
Michael Jenkins has joined Public “Office Hours”
Andy Miguel (Cloud Posse) has joined Public “Office Hours”
Frank Scalzo has joined Public “Office Hours”
Andrew Way has joined Public “Office Hours”
Eric Barb has joined Public “Office Hours”
Kyle Johnson has joined Public “Office Hours”
chonan tsai has joined Public “Office Hours”
Matt Gowie has joined Public “Office Hours”
Jaz Ark has joined Public “Office Hours”
Phil Sautter has joined Public “Office Hours”
Thayne Trevenen has joined Public “Office Hours”
Patrick Joyce has joined Public “Office Hours”
Brandon vh has joined Public “Office Hours”
Zaven Boni has joined Public “Office Hours”
Rizky Ramadhan has joined Public “Office Hours”
links from today’s session:
• https://github.com/hashicorp/terraform/releases/tag/v1.1.0-alpha20210616
• HashiTalks Build: https://events.hashicorp.com/hashitalksbuild
• Community Office Hours: https://www.hashicorp.com/community/office-hours
• HashiCast: https://hashicast.com (podcast by the HashiCorp Developer Advocate team)
• HashiCorp’s Learn site just got a GIANT update and it’d be great to have people check this out! https://learn.hashicorp.com/
1.1.0 (Unreleased) NEW FEATURES: lang/funcs: add a new type() function, only available in terraform console (#28501) ENHANCEMENTS: configs: Terraform now checks the syntax of and normalizes modu…
Stay tuned! We will be releasing the schedule in early February. Thank you to all that submitted.
Technical experts from our engineering, product, customer success, solution engineering, and developer relations teams are available to support our community and customers, regardless if you are using open source or enterprise versions of our products.
Resources to better understand and use HashiCorp products.
Explore our tutorials to automate your workflows
Stan M has joined Public “Office Hours”
Eric Berg has joined Public “Office Hours”
emem umoh has joined Public “Office Hours”
Alex Siegman has joined Public “Office Hours”
Winson Chan has joined Public “Office Hours”
James Haughey has joined Public “Office Hours”
Luis Masaya has joined Public “Office Hours”
Oliver Schoenborn has joined Public “Office Hours”
Stevan Arychuk has joined Public “Office Hours”
Thayne Trevenen has joined Public “Office Hours”
Andy Roth has joined Public “Office Hours”
Jignesh Doshi has joined Public “Office Hours”
Question for Taylor: Do you ever see HashiCorp creating a layer above Terraform to orchestrate many root modules / deal with that DAG? I believe a lot of us in the terraform community run into that problem once you’ve been in terraform for a while, so I’m interested if there is any thoughts there?
Marc Slayton has joined Public “Office Hours”
Rodrigo Quezada has joined Public “Office Hours”
Tim Gourley has joined Public “Office Hours”
Michael Holt has joined Public “Office Hours”
Hao Wang has joined Public “Office Hours”
Question for Taylor: As someone who builds demos for a living, can you talk a little bit about your approach to maintaining demos long term? I’ve found that demos, both in OSS and in my own company, frequently get outdated and sometimes even cause more confusion due to people being led down a path that isn’t necessarily current any more.
Winson Chan has joined Public “Office Hours”
shreenu kumar has joined Public “Office Hours”
PePe Amengual has joined Public “Office Hours”
David B has joined Public “Office Hours”
Howdy, team! :wave: Thank you for such a fun session! I’m stoked to return in the future and wanted to address two questions we got asked that we didn’t have time for on the call.
How difficult is it to perform a terraform import
vs. building resources from scratch ?
Terraform import is helpful for importing the state of infrastructure that already exists, which can be helpful in onboarding your stack to your Terraform workflows. I think that’s the best option when you aren’t able to easily work with your infrastructure or application stack in its current form. If the stack is easily converted to HCL or infrastructure as code, then it might be better off to start from scratch. But the thing that counts most is if you have any important state that would be destroyed or lost if you start from scratch would be my concern!
Do you feel Kubernetes operators like the AWS Operator is a “threat” to Terraform, considering in theory we could use pure Kubernetes API to manage AWS resources?
Personally, I see this as an interesting and useful example of what the community wants to see, and how they want to structure their infrastructure as code. I don’t think it’s a threat so much as it is a good example for helping shape projects like the Terraform Cloud Operator for Kubernetes (https://github.com/hashicorp/terraform-k8s)
Terraform Cloud Operator for Kubernetes. Contribute to hashicorp/terraform-k8s development by creating an account on GitHub.
2021-06-21
2021-06-22
[Terraform and Polycloud | Cloud Posse Guest Speaker: Taylor Dolezal](https://www.youtube.com/watch?v=DMtwoDjUefg) |
2021-06-23
Sharing for office hours as well as in #aws….
Question: Is there a way to serve a static HTML page from S3 through an ALB?
TLDR:
On occasion I use maintenance pages for long deployments or changes. I do this by creating a /*
rule in the ALB listener that reads a local html file for the response content:
resource "aws_lb_listener_rule" "maintenance_page" {
listener_arn = aws_lb_listener.alb.arn
action {
type = "fixed-response"
fixed_response {
content_type = "text/html"
message_body = file("${path.module}/maintenance_page.html")
status_code = "200"
}
}
condition {
path_pattern {
values = ["/*"]
}
}
}
Unfortunately, this method only allows for content that is less than or equal to 1024 bytes. So the page is minimally styled. I’d like to add richer content with CSS and images (well, not me but the developers! ) but I know that will require more bytes. I’m thinking maybe the CSS could come from a link but even then, depending on how much is added to make the maintenance page look like the app, it will take more than 1024 bytes.
So I’m thinking we could store the page in S3 and then serve it from there. I’d prefer not to do any DNS dancing with the app endpoint and instead just update what the app is serving from the ALB. Any thoughts or ideas?
Can you do a 302 redirect using a listener rule to the S3 website instead of serving the content directly from the ALB?
Question: Is there a way to serve a static HTML page from S3 through an ALB?
TLDR:
On occasion I use maintenance pages for long deployments or changes. I do this by creating a /*
rule in the ALB listener that reads a local html file for the response content:
resource "aws_lb_listener_rule" "maintenance_page" {
listener_arn = aws_lb_listener.alb.arn
action {
type = "fixed-response"
fixed_response {
content_type = "text/html"
message_body = file("${path.module}/maintenance_page.html")
status_code = "200"
}
}
condition {
path_pattern {
values = ["/*"]
}
}
}
Unfortunately, this method only allows for content that is less than or equal to 1024 bytes. So the page is minimally styled. I’d like to add richer content with CSS and images (well, not me but the developers! ) but I know that will require more bytes. I’m thinking maybe the CSS could come from a link but even then, depending on how much is added to make the maintenance page look like the app, it will take more than 1024 bytes.
So I’m thinking we could store the page in S3 and then serve it from there. I’d prefer not to do any DNS dancing with the app endpoint and instead just update what the app is serving from the ALB. Any thoughts or ideas?
I’ve run into this problem before but it was a couple years ago… I forget what I did exactly, but the 302 is how I would look into now.
Are you trying to avoid cloudfront? I’m not sure why you need the ALB here, keep it simple and use ecs frontend (nginx image) behind the ALB instead of s3
This environment has no cloudfront but not necessarily trying to avoid it. yep, a route to a maint page image/container could also work. I do appreciate the simplicity of keeping the routing in the ALB listener vs having to maintain another target group+attachment, but yeah that’s a good approach.
@here office hours is starting in 30 minutes! Remember to post your questions here.
Erik Osterman (Cloud Posse) has joined Public “Office Hours”
Alex Siegman has joined Public “Office Hours”
David Hawthorne has joined Public “Office Hours”
Jeff Lanza has joined Public “Office Hours”
Michael Jenkins has joined Public “Office Hours”
Vlad Ionescu has joined Public “Office Hours”
Andy Miguel (Cloud Posse) has joined Public “Office Hours”
Oscar Blanco has joined Public “Office Hours”
Fernando Castillo has joined Public “Office Hours”
chonan tsai has joined Public “Office Hours”
Thayne Trevenen has joined Public “Office Hours”
Kristopher Flint has joined Public “Office Hours”
Mohammed Yahya has joined Public “Office Hours”
Mo Battah has joined Public “Office Hours”
Sumit Murari has joined Public “Office Hours”
Tim Gourley has joined Public “Office Hours”
Cody Halovich has joined Public “Office Hours”
Luis Masaya has joined Public “Office Hours”
Benjamin Smith has joined Public “Office Hours”
Mikael Fridh has joined Public “Office Hours”
Brandon vh has joined Public “Office Hours”
Winson Chan has joined Public “Office Hours”
links from today’s session:
• https://github.com/vmware-tanzu/carvel-vendir/pull/64
• https://github.com/cloudposse/terraform-aws-global-accelerator
• https://github.com/cloudposse/terraform-aws-macie/pull/1
• https://github.com/cloudposse/terraform-aws-firewall-manager
• https://github.com/cloudposse/terraform-spacelift-cloud-infrastructure-automation/pull/44
• https://github.com/hashicorp/terraform/tree/main/tools/terraform-bundle
Neil Gealy has joined Public “Office Hours”
Catalin Costraș has joined Public “Office Hours”
Dirk-Jan Steltenpool has joined Public “Office Hours”
Michael Padgett has joined Public “Office Hours”
PePe Amengual has joined Public “Office Hours”
Aleksandr Fofanov has joined Public “Office Hours”
Andrew Way has joined Public “Office Hours”
Maycon Santos has joined Public “Office Hours”
Matt Gowie has joined Public “Office Hours”
Scott Mathson has joined Public “Office Hours”
Stevan Arychuk has joined Public “Office Hours”
Ossie Botu has joined Public “Office Hours”
For advanced use cases, modules can provide some pre-defined metadata for providers.
emem umoh has joined Public “Office Hours”
Stan M has joined Public “Office Hours”
This might help with the community management too: “I swear I am not deleting any outputs” https://github.blog/changelog/2021-06-23-issues-forms-beta-for-public-repositories/
Issues forms beta for public repositories
Jeremy CloudPosse has joined Public “Office Hours”
Vicken Simonian has joined Public “Office Hours”
Omry Hay has joined Public “Office Hours”
Azure environment here - that’d be great! Azure publishes their own reference architectures for cloud here: https://docs.microsoft.com/en-us/azure/architecture/. I may be out of my element here though as I’m not leveraging Terraform (yet).
The Azure Architecture Center provides best practices for running your workloads on Azure.
Joaquin Menchaca has joined Public “Office Hours”
Starting today, you can pass user attributes in the AWS session when your workforce sign-in into the cloud using AWS Single Sign-On. This gives you the centralized account access management of AWS Single Sign-On and ABAC, with the flexibility to use AWS SSO, Active Directory, or an external identity provider as your identity source. To […]
FYI. I saw this, may be of interest. https://thenewstack.io/secrets-management-doppler-or-hashicorp-vault/
A “secrets manager” is a centralized system for storing sensitive information, such as API keys, database credentials, or even files (e.g. certificates and private keys). This post focuses on comparing two secrets managers, Doppler and Hashicorp Vault.
A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline! - localstack/localstack
2021-06-24
I have asked this in #packer as well, but I think it would make a good topic to discuss via office hours. Hey Packer Peeps, I have been using packer for a year at an old company and it worked flawlessly however I am at a new company with restrictions on AWS security groups and any SG created with wide open access is automagically deleted. Therefore when packer try’s to do anything via ssh over port 22 and the temp SG [0.0.0.0\0] packer times out waiting for ssh access. Does anyone know of a way to specify something other than [0.0.0.0\0] in the packer file? (The things we should discuss imho, is how to use terraform to set up blocking 0.0.0.0\0 and then the fix for packer of course seeing as my google fu is failing me today.)
We have the same scenario. basically, the work around is to create an SG that is compliant and then using that in your packer run. You can create the SG well ahead of time and use that in future packer runs. I will share some code in a bit…
"builders": [{
"type": "amazon-ebs",
"region": "us-east-1",
"vpc_id": "VPC YOU MAKE HERE",
"subnet_id": "SUBNET ID IN THAT VPC",
"associate_public_ip_address": "true",
then pass in the sec group
perfect thanks
security_group_id (string) - The ID (not the name) of the security group to assign to the instance. By default this is not set and Packer will automatically create a new temporary security group to allow SSH access. Note that if this is specified, you must be sure the security group allows access to the ssh_port given below.
[Store Terraform Generated SSH Key Pairs in SSM | Cloud Posse Explains](https://www.youtube.com/watch?v=8JCwEBkDe_s) |
2021-06-25
[How to Serve a Static Maintenance Page Through an ALB | Cloud Posse Explains](https://www.youtube.com/watch?v=3VGYlKfljWA) |
2021-06-29
I came across this tool, looks way way way cool, GitHub actions locally.
Run your GitHub Actions locally . Contribute to nektos/act development by creating an account on GitHub.
2021-06-30
Hi everyone! Since a month ago a great discussion about Leapp has started in this community, I want to announce that today we are releasing a new version of the App, with a mayor update: support to AWS Named-profiles, has requested by @Jeremy G (Cloud Posse) : Go check it out! And let me know what you think, any feedback is appreciated: https://twitter.com/a_cava94/status/1410219443846799360
ANNOUNCEMENT :
Leapp now supports multiple AWS accounts via Named-Profile!
Use multiple temporary AWS credentials simultaneously and secure other information in the System Vault.
Visit the repo!
(announced on office hours)
ANNOUNCEMENT :
Leapp now supports multiple AWS accounts via Named-Profile!
Use multiple temporary AWS credentials simultaneously and secure other information in the System Vault.
Visit the repo!
@Jeremy G (Cloud Posse) is going to check this out
Awesome! I missed this Office Hour but definitely want to partecipate on the next one!
Thanks a lot
Awesome! I missed this Office Hour but definitely want to partecipate on the next one!
Thanks a lot
@here office hours is starting in 30 minutes! Remember to post your questions here.
Question: Has anyone worked with declarative config for AWS Control Tower? The official TF provider for AWS has resources for the various components (Config, Organizations, Security Hub, etc.) but I don’t see anything listed for Control Tower itself. TL;DR, I’m looking for a way to use Terraform to bootstrap a deployment of AWS Control Tower.
Andy Miguel (Cloud Posse) has joined Public “Office Hours”
Jeff Lanza has joined Public “Office Hours”
emem umoh has joined Public “Office Hours”
Daniel Agans has joined Public “Office Hours”
ASIS SETHI has joined Public “Office Hours”
Thayne Trevenen has joined Public “Office Hours”
Emile Fugulin has joined Public “Office Hours”
David Hawthorne has joined Public “Office Hours”
Yusuf Adeyemo has joined Public “Office Hours”
Vlad Ionescu has joined Public “Office Hours”
Brandon vh has joined Public “Office Hours”
Patrick Joyce has joined Public “Office Hours”
Erik Osterman (Cloud Posse) has joined Public “Office Hours”
Winson Chan has joined Public “Office Hours”
Neil Gealy has joined Public “Office Hours”
New to CloudPosse, we are looking to utilize your open-source modules and provide a simplified format for developers to use using the Terraform CDK with TypeScript. Didn’t know if there was any thoughts or advice on using your modules with the CDK
example:
new Instance("my-instance",{});
Eric Berg has joined Public “Office Hours”
Matt Calhoun has joined Public “Office Hours”
Jason Sowa has joined Public “Office Hours”
Oscar Blanco has joined Public “Office Hours”
Charles Sperbeck has joined Public “Office Hours”
Michael Jenkins has joined Public “Office Hours”
Matt Gowie has joined Public “Office Hours”
Ossie Botu has joined Public “Office Hours”
Yuri Lima has joined Public “Office Hours”
Pepe Amengual (CloudPosse) has joined Public “Office Hours”
Stan M has joined Public “Office Hours”
Michael Holt has joined Public “Office Hours”
sri has joined Public “Office Hours”
Scott Mathson has joined Public “Office Hours”
Yuri Lima has joined Public “Office Hours”
James Haughey has joined Public “Office Hours”
Bas has joined Public “Office Hours”
imran.hussain has joined Public “Office Hours”
Jeremy (Cloud Posse) has joined Public “Office Hours”
Mahmoud Dolah has joined Public “Office Hours”
Agnello Dsouza has joined Public “Office Hours”
Vicken Simonian has joined Public “Office Hours”
Mazin Ahmed has joined Public “Office Hours”
ASIS SETHI has joined Public “Office Hours”
Justin Sencion has joined Public “Office Hours”
Blaise Pabon has joined Public “Office Hours”
Oscar Blanco has joined Public “Office Hours”
Charles Sperbeck has joined Public “Office Hours”
I have a question about Customer Managed KMS Keys if there is time…
Thomas Mundt has joined Public “Office Hours”
imran.hussain has joined Public “Office Hours”
Charles Sperbeck has joined Public “Office Hours”
@here another special edition of Office Hours is in the works for July 21st! @Taylor Dolezal will be returning to the show and will be demoing HashiCorp’s Waypoint project for us. Please queue up your questions here and hope to see you there
Anere Faithful has joined Public “Office Hours”