#announcements - October 2018

452 messages

This channel is for workspace-wide communication and announcements. All members are in this channel.
Archive: https://archive.sweetops.com

October 2018
Z
Zapierabout 8 years ago
@Erik Osterman (Cloud Posse) created a new channel #events. Join if this sounds interesting!
U
Unknown Userabout 8 years ago
There is 1 event this week
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Please feel free to update
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @MattN! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @dserodio! Good to have you here ☺️
dserodio
dserodioabout 8 years ago
Hi! I just discovered the CloudPosse website and Geodesic, and I was wondering why you chose Chamber for secrets management instead of Hashicorp Vault
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
@dserodio welcome!
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Sure - so Hashicorp vault is a great solution, but takes considerably more effort to manage over AWS SSM+Parameter Store.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Nothing about our strategy precludes the use of hashicorp vault, but using parameter store + ssm is a turnkey solution with no new overhead to manage.
erik
erikabout 8 years ago
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
this is the prescribed architecture for managing vault, which doesn't take into account the SDLC including upgrades, backups, DR, etc.
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @jarv! Good to have you here ☺️
jarv
jarvabout 8 years ago
👋
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Hey Jarv! What brings you around?
jarv
jarvabout 8 years ago
Just a fan of you guy's work! Figured I'd stop by and say hi 🙂
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
awesome! always great to hear when we're helping out
jarv
jarvabout 8 years ago
Been messing around with the TF modules lately, but impressed with everything I've seen. Appreciate all your guy's work on everything.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
have your seen our latest modules for EKS?
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
@Andriy Knysh (Cloud Posse) has been hard at work on those 😃
jarv
jarvabout 8 years ago
Not yet, will likely soon though. Taking a look at the user/chamber stuff currently actually
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Cool - yea, we developed those mostly for external CI/CD systems (in our case Codefresh)
jarv
jarvabout 8 years ago(edited)
Was planning on doing something similar to what you used to do before moving to 99designs/aws-vault, at least for the moment. But figured it was worth taking a quick look at how you have that set up now.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
oh, so we still use aws-vault and chamber
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
they are complimentary
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
aws-vault is the best way to manage local AWS credentials for "assuming roles" (and not to be confused with hashicorp's vault - in anyway)
jarv
jarvabout 8 years ago
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
so we like to use aws-vault for all local development contexts
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
aha, yes! as soon as we took a look at aws-vault we knew that our own implementation was not worth maintaining anymore
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
haha
jarv
jarvabout 8 years ago
So I guess my question is (and totally realize I can look this up as well), how is user/permission management done with the new setup?
jarv
jarvabout 8 years ago(edited)
Previously I was thinking designated IAM account with users getting something like:

            "Action": "sts:*",
            "Resource": "arn:aws:iam::*:role/${aws:username}",
            "Condition": {
                "StringEquals": {
                    "aws:PrincipalType": "User"
                }
            }

then to provision a user in other account's (that trust's the iam one) you just need to create a role named after their username. (I think this is somewhat similar to what you did before, could be wrong there though)
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
hey @jarv
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
take a look at our reference architectures https://docs.cloudposse.com/reference-architectures/
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
in short, we create a few AWS accounts:
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
1. root (which is billing account) to store all IAM users and roles
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
@Andriy Knysh (Cloud Posse) I think he's talking specifically about Chamber
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
segmenting access to SSM (chamber) secrets to IAM users
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
yea ok 🙂
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
using our terraform modules
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
let's move to #terraform
Justin King
Justin Kingabout 8 years ago
Chamber is pretty solid, but be careful/aware that AWS has API rate limits on the param store, so many companies after a certain size end up returning to Consul. But for startups/small businesses, I agree Chamber is too easy to ignore. Unless you have some really fancy dynamic auth/cert needs.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
I could see that being a problem where there are hundreds of containers getting spawned in an account per minute for example
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
but also mitigated by having multiple accounts and never co-mingling prod with dev or staging
Justin King
Justin Kingabout 8 years ago
It all depends on use case of course. I first ran into the issue at a Serverless shop. In that scenario it wasn't just secrets but nearly 100% of the behavior config was stored in param store. So I think we hit Params more than typical.

went looking for a published rate limit on AWS's site later, but never found one, so no idea where that threshold sits. Best I could find where other people also seeing the boto3 failures and asking the same questions.

Luckily we DID do everything in unique accounts, and we first noticed it while load testing in Stage ... so we were able to pivot before being SOL in prod.
Max Moon
Max Moonabout 8 years ago
for serverless i found that secrets manager worked nicely for me and my use cases
Max Moon
Max Moonabout 8 years ago
still an aws service but i never ran into any rate limit issues with 50+ lambdas
Max Moon
Max Moonabout 8 years ago
is anybody else using that?
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @tomweston! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @mallen! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Hey @mallen! what'cha working on?
mallen
mallenabout 8 years ago
Hi Erik, I was intrigued by your Unlimited Staging Environments vid on codefresh. 🙂
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Oh cool! We've actually taken that a bit further now and extended it with automatic destruction of environments when PRs are closed
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
and using Chamber for secrets and helmfile for deployment of helm releases
mallen
mallenabout 8 years ago
nice, makes a real lot of sense. I would like to take a similar route.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
are you using k8s + helm?
mallen
mallenabout 8 years ago
yeah we do, i spent a lot of time writing jenkins grooviness and to calm my rage I started to look for fresh ideas.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
haha yea, Jenkins is a common route, but frankly after working with Codefresh for the past year couldn't imagine going back.
mallen
mallenabout 8 years ago(edited)
I’m not really a jenkins hater 🙂 if it works i’m ok with it. codefresh and ideas like the unlimited dynamic staging environments are just making soo much better use of the power available (without investing lots of time). I’m also thinking of self service environment with some sort of live code sync would be a great pain easier, something like devspace, but Im in the early research stages.
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @dan! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Welcome @dan ! let me know if you need any assistance with our stuff
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Fizz! Good to have you here ☺️
Ryan Ryke
Ryan Rykeabout 8 years ago
hi @Fizz
Ryan Ryke
Ryan Rykeabout 8 years ago
😜
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Town hall meeting today at 11am PST, 6pm GMT. For those interested, it’s a chance to meet others “face-to-face” via zoom and hear what everyone is working on.

Agenda: https://cloudposse.quip.com/VHF9A1Qrp3eR
Quip: https://zoom.us/j/299169718
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Nathan Smith! Good to have you here ☺️
U
Unknown Userabout 8 years ago
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @ankur! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Hey @ankur ! Let me know if you need help with anything...
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @yudi.phanama! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @blake! Good to have you here ☺️
antonbabenko
antonbabenkoabout 8 years ago
So many new faces here! Welcome all! 🙂
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Welcome all! If you came for questions regarding terraform, be sure to check out the #terraform channel
U
Unknown Userabout 8 years ago
There are no events this week
U
Unknown Userabout 8 years ago
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
I’m going to be reincarnating this event - we had some good discussions on how to make it better last week
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Proposed format is something like:
1) Show & Tell - present a live demo of something cool (recorded)
2) Gossip - share some cool new link or project, why you liked it; let others share what they’ve done in the past (recorded)
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
3) Off the Record - talk shop (not recorded)
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
---
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Office Hours - Weekly Q&A, AMA for people who need to ask cloudposse for assistance on our tools and projects
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
---
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Please share your thoughts on what you’d like to see!
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Vinay nair! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @geertn! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Nathan Preen! Good to have you here ☺️
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
hey @Nathan Preen and welcome
Nathan Preen
Nathan Preenabout 8 years ago
👋
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Gaurav! Good to have you here ☺️
Gaurav
Gauravabout 8 years ago
Thank you
Gaurav
Gauravabout 8 years ago
I need a help
Gaurav
Gauravabout 8 years ago
[root@server kubernetes]# kubectl run hello-minikube --image=worpress
The connection to the server localhost:8080 was refused - did you specify the right host or port?
Gaurav
Gauravabout 8 years ago
In kubectl
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
@Gaurav are you on OSX with Docker for Mac?
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
let's move to #kubernetes
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @sebas! Good to have you here ☺️
Gaurav
Gauravabout 8 years ago
I am using Centos7
Gaurav
Gauravabout 8 years ago
GUI
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @ben! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Woohoo @ben ! Welcome. Good seeing you tonight at the Github meetup.
Z
Zapierabout 8 years ago
@Maarten van der Hoef created a new channel #azure. Join if this sounds interesting!
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Vitalii Morvaniuk! Good to have you here ☺️
Vitalii Morvaniuk
Vitalii Morvaniukabout 8 years ago(edited)
Hi all. I'm quite new to Terraform so my question could be newbie but I need help. I'm using https://github.com/cloudposse/terraform-aws-elastic-beanstalk-environment to create beanstalk nodejs environment. I need to change NodeJS version - as I see I could do it using this namespace https://docs.aws.amazon.com//elasticbeanstalk/latest/dg/command-options-specific.html#command-options-nodejs but I don't know where could I inject settings for this
Vitalii Morvaniuk
Vitalii Morvaniukabout 8 years ago
Like this:

setting {
    namespace = "aws:elasticbeanstalk:container:nodejs"
    name      = "NodeVersion"
    value     = "8.6.4"
  }
Andy
Andyabout 8 years ago
@Vitalii Morvaniuk solution_stack_name "Elastic Beanstalk stack, e.g. Docker, Go, Node, Java, IIS. http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.platforms.html string ` no``"
Andy
Andyabout 8 years ago
check out their example https://github.com/cloudposse/terraform-aws-elastic-beanstalk-environment/blob/master/examples/complete/main.tf . They specify solution_stack_name = "64bit Amazon Linux 2018.03 v2.12.2 running Docker 18.03.1-ce"
Vitalii Morvaniuk
Vitalii Morvaniukabout 8 years ago
@Andy thanks - solution stack is ok, Node env is installed - but it's using Node 6.x by default - in AWS Console - I could change version to 8.x/10.x etc - I need to do this in tearraform
Andy
Andyabout 8 years ago
Ah I see they combine multiple version for NodeJs
Vitalii Morvaniuk
Vitalii Morvaniukabout 8 years ago
Default platform: 6.14.4 - I need it to be set to 8.11.4 at
 terraform apply
Andy
Andyabout 8 years ago
So the setting you pasted above you'd have to add
Andy
Andyabout 8 years ago
The Node.js platform includes a few Node.js versions in a single configuration. The following table lists them. The default version applies when the NodeVersion option in the aws:elasticbeanstalk:container:nodejs namespace isn't set. For details, see Node.js Platform Options in the AWS Elastic Beanstalk Developer Guide. 
Vitalii Morvaniuk
Vitalii Morvaniukabout 8 years ago
That is the question - where should I put those settings section ?
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Let’s move the terraform discussion to #terraform
Vitalii Morvaniuk
Vitalii Morvaniukabout 8 years ago
Currently I'm using example
Vitalii Morvaniuk
Vitalii Morvaniukabout 8 years ago
Oh, sorry
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
No prob! Welcome to the community :-)
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @GFox)(AWSDevSecOps! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @samh! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @tobiaswi! Good to have you here ☺️
U
Unknown Userabout 8 years ago
There are no events this week
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @nicgrayson! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
welcome @nicgrayson and @tobiaswi!
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
let me know if I can help with anything
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Miguel Mendez! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Nizam! Good to have you here ☺️
Nizam
Nizamabout 8 years ago
Hi There!
Nizam
Nizamabout 8 years ago
I'm setting up prometheus to cloudwatch
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
hey @Nizam welcome to the community
Nizam
Nizamabout 8 years ago
I'm getting these logs:
Nizam
Nizamabout 8 years ago
prometheus-to-cloudwatch: published 0 metrics to CloudWatch
Nizam
Nizamabout 8 years ago
there is no error
Nizam
Nizamabout 8 years ago
what can be the issue?
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
did you specify the correct scrapping URL?
Nizam
Nizamabout 8 years ago
its right, name of service is same
Nizam
Nizamabout 8 years ago
in another form I only mentioned PROMETHEUS_SCRAPE_URL: "http://hardy-ocelot-kube-state-metrics:8080/metrics"
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
did you install kube-state-metrics?
Nizam
Nizamabout 8 years ago
yes
Nizam
Nizamabout 8 years ago
hardy-ocelot-kube-state-metrics
Nizam
Nizamabout 8 years ago
above is the name of my service
Nizam
Nizamabout 8 years ago
I've given instance IAM role to all cloudwatch permissions, its in aws
Nizam
Nizamabout 8 years ago
any idea?
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
can you get the pods and look into the logs? maybe they were not started correctly. Look into kube-state-metrics pods and prometheus-to-cloudwatch pods
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
kubectl get pods --all-namespaces
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago(edited)
kubectl logs <xxxxxxx> -n <namespace>
Nizam
Nizamabout 8 years ago
let me check
Nizam
Nizamabout 8 years ago
User "system:serviceaccount:default:default" cannot list replicationcontrollers at the cluster scope
Nizam
Nizamabout 8 years ago
this is user account permission issue
Nizam
Nizamabout 8 years ago
there are many more like this on other resources
Nizam
Nizamabout 8 years ago
assigning rbac to default
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @shaiss! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Suresh! Good to have you here ☺️
Gabe
Gabeabout 8 years ago
thought it could be useful for you to have PR templates on your repos… made an example here https://github.com/cloudposse/terraform-aws-dynamic-subnets/pull/35
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Thanks @Gabe! You're right. We should roll this out to all repos.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
I made a small comment. What do you think about using .github/ folder?
Gabe
Gabeabout 8 years ago
Yeah that’s how I was going to do it originally lol
Gabe
Gabeabout 8 years ago
It could be a little nicer since it keeps it hidden
Gabe
Gabeabout 8 years ago
Happy to make the change if that’s your preference
Gabe
Gabeabout 8 years ago
done
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Trey! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Thanks @Gabe
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
I think I'll have @Vadzim on our team add this to all of our repos.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Welcome @Trey!
Rohit Verma
Rohit Vermaabout 8 years ago
hi @Erik Osterman (Cloud Posse) Saw this yesterday https://github.com/skyscrapers/terraform-kubernetes. They are using null resources to call kops and helm.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
oh cool, and using teleport for ssh
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
looks like a lot of work went into this….
Ryan Ryke
Ryan Rykeabout 8 years ago
speaking of teleport for ssh. i have a customer thats asking for ssh type access into a fargate container... as much as ive tried to persuade him against it. hes pretty steadfast in that requirement. looked at ecsctl but wondering if anyone around here has experience with a tool
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @joshmyers! Good to have you here ☺️
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
hey @joshmyers
joshmyers
joshmyersabout 8 years ago
👋
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @ivodvb! Good to have you here ☺️
ivodvb
ivodvbabout 8 years ago
👋
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Howdy!
joshmyers
joshmyersabout 8 years ago
I’ve been following CloudPosse work for a while but just came across geodesic, which looks awesome. How battle tested is it? Am OOO atm but looking forward to getting hands on with it ASAP
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
we’ve been using it for many projects and clients. We are constantly improving it, but it mostly does what we want. @Erik Osterman (Cloud Posse) has more to say about it and future plans
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @ndobbs! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
@joshmyers it’s currently in use a handful (7+) organizations to power their production, staging, dev, etc. environments
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
it’s actively maintained, supported and receiving a continuous stream of enhancements and updates.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
the power here is that by collaborating on a similar base infrastructure, we all benefit. i’ve been absolutely amazed by all the wonderful contributions (and bug fixes!) we continually receive from the community. would be happy to share more details….. 😃
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Ion! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
welcome @Ion!
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @lvh! Good to have you here ☺️
lvh
lvhabout 8 years ago
👋
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
👊
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
awesome! great to see you here @lvh
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @jsanchez! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
Hey Jesse!
jsanchez
jsanchezabout 8 years ago
hi. saw the slack channel on a terraform module. figured to join the group.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
awesome! well definitely join the #terraform channel. which module, btw?
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Cool, what are you working on?
jsanchez
jsanchezabout 8 years ago
old project at work. cleaning up some old code and trying to use modules already out there.
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Vi! Good to have you here ☺️
Vi
Viabout 8 years ago
Hi everyone 🙂
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
hey @Vi! what brings you around?
Vi
Viabout 8 years ago
I am a university graduate, I have started with terraform past week. 🙂
Vi
Viabout 8 years ago
I was looking for automating the creation of cloudfront, route53 records and creation of certificate and I found this github which has helped me alot.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Awesome! well definitely have a look at our #terraform channel
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
so you found our terraform-aws-cloudfront-* modules?
Vi
Viabout 8 years ago
yes
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
👍️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @33l! Good to have you here ☺️
33l
33labout 8 years ago
😄 tanks a latte
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
@33l what are you up to?
33l
33labout 8 years ago
<-- just joined a devops team
33l
33labout 8 years ago
im in info overload mode
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
yea, there’s a lot to pick up
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
what’s the tech stack?
33l
33labout 8 years ago
we are still working on that
33l
33labout 8 years ago
right now we've decided on aws
33l
33labout 8 years ago
terraform/ansible is about all I am aware is in stone
33l
33labout 8 years ago
your teams git is a really good resource
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
thanks! @33l hope you get some good use out of our modules.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
we accept nearly all PRs and are very quick to review.
tobiaswi
tobiaswiabout 8 years ago
Hi @Erik Osterman (Cloud Posse). I had a blats watching the video you did with codefresh on unlimited staging environments. bookmarked it and wanted to rewatch it now but looks like its no longer available on youtube. any idea where i can find it?
tobiaswi
tobiaswiabout 8 years ago
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
@tobiaswi ^
Rohit Verma
Rohit Vermaabout 8 years ago
This is really nice, we did same thing using spinnaker though 🙂
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
@tobiaswi thanks for bringing that to my attention !
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
I am going to reach out to Codefresh to find out what happened.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
There is a new video, but it’s only 10 minutes
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Jay! Good to have you here ☺️
Jay
Jayabout 8 years ago
Hey fellers!
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Hola @Jay!
Jay
Jayabout 8 years ago
hey, I had a question for you guys, is there anyway to do bind mounts with your "terraform-aws-ecs-container-definition" module?
Jay
Jayabout 8 years ago
I've been going through the readme but I don't see mounts mentioned anywhere
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
oh hrm....
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
so we're using it with Fargate mostly, so maybe we didn't add the fields for that
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
@Jay if you want to open a PR, we'll promptly review it
Jay
Jayabout 8 years ago
sure thing! it would be awesome if I could bind mount volumes using the same logic as the port mapping works
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Joseph Yi! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Nate! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @sixarm! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @George! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @SigmundFried! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Welcome @SigmundFried! What brings you around?
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @EinavF! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
@EinavF welcome!
EinavF
EinavFabout 8 years ago
thank 👍️
SigmundFried
SigmundFriedabout 8 years ago
hey Erik ! I just recently discovered Cloud Posse SweetOps and I have to say it is very inline with my current role
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
awesome! good to hear it 😃
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
What are you working on?
SigmundFried
SigmundFriedabout 8 years ago
A fairly substantial cloud transformation that includes HPC on AWS
SigmundFried
SigmundFriedabout 8 years ago
moving towards containerization
SigmundFried
SigmundFriedabout 8 years ago
Biotech
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Cool - so using Terraform presumably?
SigmundFried
SigmundFriedabout 8 years ago
more and more
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
Are you using ECS or EKS (or kops)?
SigmundFried
SigmundFriedabout 8 years ago
currently ECS but kops is pretty alluring
SigmundFried
SigmundFriedabout 8 years ago
kinda what brought me in 😉
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
yea, kops >> EKS >> ECS
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
kops does a great job of simplifying the long-term maintenance of kubernetes on AWS.
SigmundFried
SigmundFriedabout 8 years ago
simplifying the long-term maintenance of kubernetes on AWS you read my mind
SigmundFried
SigmundFriedabout 8 years ago(edited)
of course it's programming people that is always the initial challenge. That's where I am knee-deep right now
SigmundFried
SigmundFriedabout 8 years ago
specially the sciency types
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
haha, yea, getting buy-in is the most important part.
SigmundFried
SigmundFriedabout 8 years ago
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
are you using Tensorflow?
SigmundFried
SigmundFriedabout 8 years ago
no
SigmundFried
SigmundFriedabout 8 years ago
not yet anyhow
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
GPUs?
SigmundFried
SigmundFriedabout 8 years ago
yes
SigmundFried
SigmundFriedabout 8 years ago
LOTS
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
cool
SigmundFried
SigmundFriedabout 8 years ago(edited)
protein engineering takes tons
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
yea, that’s one area it really shines… making it easy to autoscale GPU node pools
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
all the way from 0 to N
SigmundFried
SigmundFriedabout 8 years ago
ya so we have (historically) hand rolled our own auto-scaling solutions but I am convinced there is a far better way
SigmundFried
SigmundFriedabout 8 years ago
or at least a better way to roll em
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
yea, it’s basically reinventing the wheel. kubernetes is basically a cloud framework, like rails is a web framework
SigmundFried
SigmundFriedabout 8 years ago
exactly
SigmundFried
SigmundFriedabout 8 years ago
preaching to the choir !!
SigmundFried
SigmundFriedabout 8 years ago
hehe
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
haha 😃
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
well, if you ever need more material - hit me up
SigmundFried
SigmundFriedabout 8 years ago
I will for sure.... Thanks !!
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
preaching is my pasttime
SigmundFried
SigmundFriedabout 8 years ago
coo
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @catdevman! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
@catdevman thanks for the PRs! I just want to have @Andriy Knysh (Cloud Posse) review them tomorrow as well. Also, as you’ve probably noticed, GitHub is barely functional right now 😃
catdevman
catdevmanabout 8 years ago
@Erik Osterman (Cloud Posse) My pleasure. I have been using FOSS for years now and I am just glad to have found a place that I can give back in.
catdevman
catdevmanabout 8 years ago
I was looking at what you do at CloudPosse and I really like the idea of being part of an organization like that even if it is just adding/editing some Terraform code on a repo
catdevman
catdevmanabout 8 years ago
As a remote DevOps Engineer that is a single guy at the company I am at, managing all our servers from EC2 to RDS any help I can get is much appreciated!
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
hey @catdevman and welcome
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
GitHub’s database has suffered network partition.
https://www.theinquirer.net/inquirer/news/3064898/github-down-major-outage
They clearly use a distributed system, in which according to CAP theorem you can have only two out of three:

Consistency: Every read receives the most recent write or an error
Availability: Every request receives a response that is not an error
Partition tolerance: The system continues to operate despite an arbitrary number of messages being dropped (or delayed) by the network between nodes

They chose CP (no availability) 🙂

https://en.wikipedia.org/wiki/CAP_theorem
https://towardsdatascience.com/cap-theorem-and-distributed-database-management-systems-5c2be977950e
https://jepsen.io/analyses
https://github.com/aphyr/partitions-post
https://www.consul.io/docs/internals/jepsen.html
https://aphyr.com/posts/281-call-me-maybe-carly-rae-jepsen-and-the-perils-of-network-partitions
U
Unknown Userabout 8 years ago
There are no events this week
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @serhat! Good to have you here ☺️
George
Georgeabout 8 years ago
I guess they viewed data loss as worse than downtime
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @sprutner! Good to have you here ☺️
sprutner
sprutnerabout 8 years ago
👋
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Hey @sprutner!
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
what are you working on?
sprutner
sprutnerabout 8 years ago
I was trolling through the issues on Atlantis and saw some thoughtful commentary by you and some enhancements you're working on
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Oh cool! Yea, we're having a lot of fun with Atlantis. We have an experimental fork going on. Hoping that we can get some of these features upstreamed eventually.
sprutner
sprutnerabout 8 years ago
Yeah Cloudposse rung a bell, not sure where I heard of you before. But why not say hello.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Hrmm... maybe some of our terraform modules? 😃
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Where are you based?
sprutner
sprutnerabout 8 years ago
I'm in SF
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @steve! Good to have you here ☺️
Z
Zapierabout 8 years ago
@Erik Osterman (Cloud Posse) created a new channel #atlantis. Join if this sounds interesting!
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Benn! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Wes! Good to have you here ☺️
Wes
Wesabout 8 years ago
Hello everyone
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
hi @Wes, welcome
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Hey @Wes!
Wes
Wesabout 8 years ago
I've been pulling a lot of your terraform modules so I had to drop by and say hello
Wes
Wesabout 8 years ago
Day 2 of Terraform...I think I understand it? 🤷‍♂️
Wes
Wesabout 8 years ago
haha
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
awesome - glad you’re enjoying them!
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
haha
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
yea - there’s a lot of to learn 😃
Wes
Wesabout 8 years ago
yeah I need to move my AWS account from one to another so I figured this may be a good time to learn how to automate building out AWS accounts 🙂
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
yea, it’s a bit of upfront investment
Wes
Wesabout 8 years ago
yeah and will be helpful when we need a QA env set up quickly and what not
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @seses! Good to have you here ☺️
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
👍️
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago

Atlantis Team Joins HashiCorp
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
Atlantis is an open source tool designed to help teams collaborate on Terraform. It provides a workflow for reviewing and executing Terraform directly from GitHub pull requests.

Anubhav Mishra and Luke Kysow are the engineers behind Atlantis. Mishra started the project at Hootsuite and has been a developer advocate at HashiCorp for the past year. Luke joined Mishra to help open source the project and has been leading the project for the past nine months.

Over the past few months, we have had many discussions between Mishra and Luke and the folks on the Terraform team here at HashiCorp. Through these conversations, we have come to understand that we have a shared vision for providing solutions for Terraform collaboration for teams large and small.

Today we are pleased to announce that both Mishra and Luke are on board as HashiCorp employees and we'll be working together to solve Terraform collaboration for everyone. In the near term, nothing will change for Atlantis and its users. Luke will continue to maintain Atlantis, review pull requests, triage issues, and write code.

We are still working out the details of how Atlantis will fit into the Terraform portfolio, but whatever direction we take, we're committed to keeping Atlantis functionality free and open source.
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
Z
Zapierabout 8 years ago
@Erik Osterman (Cloud Posse) created a new channel #terraform-0_12. Join if this sounds interesting!
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Jeremy! Good to have you here ☺️
praveen
praveenabout 8 years ago
Hi
praveen
praveenabout 8 years ago
am looking for help on tomcat puppet module
praveen
praveenabout 8 years ago
I am trying to create tomcat image using packer sourcing puppet tomcat module. It is throwing an error -unknown resource type: "concat"
praveen
praveenabout 8 years ago
I understand the tomcat module is missing dependency of concat & stdlib which I included then in .fixtures file as fixtures:
repositories:
stdlib: "https://github.com/puppetlabs/puppetlabs-stdlib.git"
concat: "https://github.com/puppetlabs/puppetlabs-concat.git"
archive: "https://github.com/voxpupuli/puppet-archive.git"
augeas_core: "https://github.com/puppetlabs/puppetlabs-augeas_core.git"
praveen
praveenabout 8 years ago
am I missing something
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
welcome @praveen!
praveen
praveenabout 8 years ago
Hello Erik
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
I can't speak for others, but cloudposse doesn't support any classic configuration management systems (cfengine, salt, chef, ansible, puppet, etc)
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
we're using strictly terraform+containers or kubernetes+containers
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
maybe checkout the hangops slack team
praveen
praveenabout 8 years ago
sure, thank you for letting me know erik
praveen
praveenabout 8 years ago
will checkout hangops
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
though many here use packer, so you can probably get some tips on that
praveen
praveenabout 8 years ago
packer is running fine Erik. Thank you very much for the swift responce
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @fnova! Good to have you here ☺️
Z
Zapierabout 8 years ago
@Erik Osterman (Cloud Posse) created a new channel #terragrunt. Join if this sounds interesting!
praveen
praveenabout 8 years ago
Hi, I am looking for information on how to source passwords from azure keyvault using remote-exec(terraform). Basically I will have to copy a property file to the server which I will source it from git. I do not want the properties file to have sensitive information like secrets/ passwords. so I would want to append the file to password/secret's from keyvault in azure platform
sarkis
sarkisabout 8 years ago
Who will be the 200th SweetOps member.. 7 more to go 😄
sarkis
sarkisabout 8 years ago
Will we be sending them a geodesic t-shirt?
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
2 more to go :-)
sarkis
sarkisabout 8 years ago
i'm not counting the bots @Erik Osterman (Cloud Posse) 😄
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Haha
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Bong Aquino! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Spi! Good to have you here ☺️
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
hey @Spi welcome
Spi
Spiabout 8 years ago
hi 🙂
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
what are you working on?
Spi
Spiabout 8 years ago
I'm DevOps on AWS & Azure loving Terraform & CI/CD
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
looks like you are SweetOps user #200 🙂
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Lol
Maarten van der Hoef
Maarten van der Hoefabout 8 years ago
hehe
lvh
lvhabout 8 years ago
Is there a way to get an ECS task to assume a foreign role (as in from a different account) as the task role?
I think the answer is no because the way you make that work is you add a trust policy that allows ecs-tasks.amazonaws.com to assume the role, but i don't own the role
Maarten van der Hoef
Maarten van der Hoefabout 8 years ago
@lvh you can give the role the permission to assume the role of a different account
Maarten van der Hoef
Maarten van der Hoefabout 8 years ago
Trust policies on services only work within the same account afaik.
Maarten van der Hoef
Maarten van der Hoefabout 8 years ago
What are you trying to achieve ?
lvh
lvhabout 8 years ago
I want to run an ECS container in my AWS account with permissions to view infra; I want to view said infra from my account
lvh
lvhabout 8 years ago
ideally I would do that with the application itself being entirely role-oblivious
Maarten van der Hoef
Maarten van der Hoefabout 8 years ago
I don't think I follow, what do you mean by infra ?
lvh
lvhabout 8 years ago
some infrastructure; could be anything
lvh
lvhabout 8 years ago
imagine I'm deploying something with terraform in a foreign account
lvh
lvhabout 8 years ago
(actually what I'm doing is auditing the foreign account, but who cares -- there's a foreign role that has some permissions that software I control needs; I would like to run said software on ECS in my account)
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Yes, that should be possible
lvh
lvhabout 8 years ago
but ECS already has a concept of giving some permissions to a task: it's just that it expects that role to be in the same account
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Datadog for example does this
lvh
lvhabout 8 years ago
when you say should be possible you mean possible by explicitly assuming a role inside the application? or by assigning it to ECS directly
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
And it’s a pattern they recommend with Atlantis to assume role into foreign accounts
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
They application needs to support it
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
However!!
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
One Sec
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
This will facilitate that programmatically I such a way you get a shell that has access to that env.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
But if your are writing something from the ground up, you should just incorporate it into your app
lvh
lvhabout 8 years ago
ah neat, I've been using aws-vault but obvs "keychain" makes less sense in a container
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Right, this is like AWS vault but for services rather than humans
lvh
lvhabout 8 years ago
well all I really need is something that takes the output of aws sts assume-role and sets some env vars which sounds pretty doable 🙂
Maarten van der Hoef
Maarten van der Hoefabout 8 years ago
it's also easy to script with just aws sts
lvh
lvhabout 8 years ago
jynx
lvh
lvhabout 8 years ago
that tool suggests I configure ~/.aws/config -- one would hope it automagically works with the metadata service or env vars too because it just uses the aws sdk 🙂
lvh
lvhabout 8 years ago
yeah I'll probably just script this manually
lvh
lvhabout 8 years ago
well; thanks 🙂
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
It just uses go sdk for aws
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Which works with metadata api
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
AWS config is probably for local dev (which aws-vault is better suited for). Shouldn’t be required. I was looking to do exactly what you are doing which is what led me down this path
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
AWS cli for STS falls short of what I would want from it.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
It’s like curl for AWS api. Great that it returns json, but if I have to “program” to use it, I might as well use the library for my language
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
That’s why I like the cli approach that provides me an operational environment. I don’t know why aws cli for sts still doesn’t support that exec capability.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
I say this after having used it before I found the simple cli tools
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
:-)
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Kenny Inggs! Good to have you here ☺️
Maarten van der Hoef
Maarten van der Hoefabout 8 years ago
Hi Kenny, what are you working on ?
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Jake Lundberg (Coder)! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
whoot! welcome @Jake Lundberg (Coder); thanks for stopping by 😃
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
#terraform and #terraform-0_12 are our hashicorp specific channels at this time.
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @gk! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Welcome @gk! Anything we can help out with?
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Dombo! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Welcome @Dombo ! Working on the weekend?
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Hemanth Jayaraman! Good to have you here ☺️
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Welcome @Hemanth Jayaraman !
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Pablo Costa! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @OCHOA! Good to have you here ☺️
Dombo
Domboabout 8 years ago
@Erik Osterman (Cloud Posse) just doing some contract work outside of the normal employment. Evaluating atlantis currently actually! Been a terraform user for a year or two now.
Kenny Inggs
Kenny Inggsabout 8 years ago
Hi @Maarten van der Hoef & @Erik Osterman (Cloud Posse) - sorry, I joined last week, but only now got time to read through things. I'm co-founder of two new fin-tech startups in Cape Town South Africa, and we've been putting a lot of effort into "doing things right". Heaps of Terraform, Docker and Serverless stuff (soon to move more towards k8s) in various guises. I kept on bumping into the SweetOps stuff everywhere I go, so decided to look at it in earnest. I feel a little like the local woodworker who became better than anybody else in the village, and then visits the master woodworkers in Japan, only to realise how little he really knew about woodworking. I'm now seriously considering scrapping much of what we did and embracing the SweetOps way. Maybe with Atlantis thrown in. Planning on working through the cold start in an isolated environment within the next week or two.
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Jon Monts! Good to have you here ☺️
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
hi @Kenny Inggs nice to meet you
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
welcome @Jon Monts
Jon Monts
Jon Montsabout 8 years ago
Thanks, just discovered the site cloud posse site. Nice site thus far, I am I am ingesting it all.
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
nice, let us know what you are working on, can help you find more info to ingest 🙂
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Granville Schmidt! Good to have you here ☺️
U
Unknown Userabout 8 years ago
There are no events this week
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
welcome @Granville Schmidt 👏
lvh
lvhabout 8 years ago
Has anyone seen Fargate errors a la: STOPPED (CannotStartContainerError: API error (500): failed)
lvh
lvhabout 8 years ago
I have no idea what's up with that; I gave the task role AdministratorAccess and put it in a completely permissive SG just in case, no dice
lvh
lvhabout 8 years ago
logs are empty
lvh
lvhabout 8 years ago
happens repeatedly
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
I haven’t seen that particular error. Fwiw, we’re running #atlantis in ECS/Fargate using AdministratorAccess and using this tool: https://github.com/jpignata/fargate
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago(edited)
Usually, when I don’t see any logs it’s because the task doesn’t even attempt to start which is b/c I use the wrong image tag or don’t have permissions to pull the image
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
@Maarten van der Hoef might have some other ideas
Maarten van der Hoef
Maarten van der Hoefabout 8 years ago
Outbound sg rules should be permissive
Maarten van der Hoef
Maarten van der Hoefabout 8 years ago
Otherwise check your routing
Maarten van der Hoef
Maarten van der Hoefabout 8 years ago
And if you think ECR might be the problem, try nginx:latest as image to rule that out.
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @ALI! Good to have you here ☺️
Maarten van der Hoef
Maarten van der Hoefabout 8 years ago
Another thing to make sure is that the cloudwatch log group exists and that the task definition has those properties setup correctly including the correct region. Can't think of anything else.
Z
Zapierabout 8 years ago
@Erik Osterman (Cloud Posse) created a new channel #test. Join if this sounds interesting!
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @nukepuppy! Good to have you here ☺️
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @mmarseglia! Good to have you here ☺️
mmarseglia
mmarsegliaabout 8 years ago
hello. 🙂
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Hey there! Whatcha up to?
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
hi @mmarseglia
mmarseglia
mmarsegliaabout 8 years ago
working with some of these cloudposse modules to build a s3/cloudfront cdn 🙂
mmarseglia
mmarsegliaabout 8 years ago
and now i have to go put out a production 🔥
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Aha! Bummer about the production fire
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
I know there’s an open issue on one of the CDN modules related to regional s3 endpoints
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
Let me know if you run into that
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
@mmarseglia if your S3 bucket is a website, here is a working example using S3/CDN that we use for our docs (https://docs.cloudposse.com/): https://github.com/cloudposse/terraform-root-modules/blob/master/aws/docs/main.tf
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Maycon Santos! Good to have you here ☺️
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
hey @Maycon Santos
Ryan Ryke
Ryan Rykeabout 8 years ago
👋
Maycon Santos
Maycon Santosabout 8 years ago
Hello!
G
GreetBotabout 8 years ago
hey everyone give a warm welcome to @Tony! Good to have you here ☺️
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)about 8 years ago
welcome @Tony
Tony
Tonyabout 8 years ago
Hey @Andriy Knysh (Cloud Posse)
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)about 8 years ago
welcome!!