#office-hours - September 2021

@here office hours is starting in 30 minutes! Remember to post your questions here.

question about setting up ECS for a microservice-based app:

Is there any example that shows how to set up an app that is a collection of micro services where:

• each micro service has its own docker image/container definition
• micro services can route to other micro services w DNS names, e.g. uploads can make requests to <http://graphql.microservice>
• the ingress (ALB?) load balancer maps HTTP paths to different microservices, e.g. /home, /graphql

...I've been looking at these two modules and their examples:

https://github.com/cloudposse/terraform-aws-ecs-web-app/

https://github.com/cloudposse/terraform-aws-ecs-alb-service-task

...and currently thinking I may be able to get it to work with terraform-aws-ecs-alb-service-task if I add some things externally like aws_service_discovery_private_dns_namespace and add a bunch of my own target groups and rules to an alb

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Andy Miguel (Cloud Posse) has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Emile Fugulin has joined Public "Office Hours"

Yusuf has joined Public "Office Hours"

Michael Manganiello has joined Public "Office Hours"

Florain Drescher has joined Public "Office Hours"

PePe Amengual has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

larry kirschner has joined Public "Office Hours"

Luis Masaya has joined Public "Office Hours"

Jim Antoniou has joined Public "Office Hours"

Mauricio Wyler has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Brandon vh has joined Public "Office Hours"

Tim Gourley has joined Public "Office Hours"

Joel Castillo has joined Public "Office Hours"

Nick James has joined Public "Office Hours"

Marc Slayton has joined Public "Office Hours"

My question today is, do you have any recommendation for tracking infra code git hash in resources updated by tf? So you only want to modify the aws tag for git hash if tf decides it has to update the resource.

Kareem Shahin has joined Public "Office Hours"

Denis Baryshev has joined Public "Office Hours"

Mike Martin has joined Public "Office Hours"

Andrew Thompson has joined Public "Office Hours"

Andrew Elkins has joined Public "Office Hours"

David Hawthorne has joined Public "Office Hours"

links from today's session:
• https://github.com/cloudposse/terraform-aws-eks-node-group/pull/84
• https://github.blog/changelog/2021-08-25-github-actions-reduce-duplication-with-action-composition/
• https://www.theregister.com/2021/08/31/docker_desktop_no_longer_free/
• https://bridgecrew.io/blog/announcing-yor-open-source-iac-tag-trace-cloud-resources/
• https://github.com/reviewdog/action-suggester

Clayton Olley has joined Public "Office Hours"

Martin Dojcak has joined Public "Office Hours"

Arjun Venkatesh has joined Public "Office Hours"

Arthur Kushner has joined Public "Office Hours"

faithful anere has joined Public "Office Hours"

I noticed the do-not-merge tag you set in the aws-vpc repository (https://github.com/cloudposse/terraform-aws-vpc/pulls?q=is%3Apr+is%3Aopen+label%3Ado-not-merge) - do you have some flow that prevents those from being merged?

Andrew Way has joined Public "Office Hours"

Uwaila Adams has joined Public "Office Hours"

Patrick Joyce has joined Public "Office Hours"

hey you all! 🙂

Maybe a question for tomorrow but how do you all run databases these days on k8s? I have always avoided it in the past and used managed service but I am currently working on project which requires the database to be deployed inside k8s..

I would be happy to hear about the good and parts of the ways you have tried. 🙂

GCP support wopwop

@here office hours is starting in 30 minutes! Remember to post your questions here.

Andy Miguel (Cloud Posse) has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

David Hawthorne has joined Public "Office Hours"

dario erregue has joined Public "Office Hours"

Florain Drescher has joined Public "Office Hours"

Yusuf has joined Public "Office Hours"

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Luis Masaya has joined Public "Office Hours"

Clayton Olley has joined Public "Office Hours"

emem umoh has joined Public "Office Hours"

Michael Manganiello has joined Public "Office Hours"

links from today's session:
• https://news.google.com/articles/CAIiEKcQeCwTrl69J6SmjS5gb1AqMwgEKioIACIQyKvy0DxcsbRLQKQhOygtHCoUCAoiEMir8tA8XLG0S0CkITsoLRww7bLrBg?hl=en-US&gl=US&ceid=US%3Aen
• https://github.com/hashicorp/terraform/commit/6562466c32a8750d7a71a6cc6232e6b5a28fe13a
• https://aws.amazon.com/jp/blogs/containers/amazon-vpc-cni-increases-pods-per-node-limits/
• https://github.com/alexjurkiewicz/spacelift-webhook-receiver
• https://aws.amazon.com/blogs/aws/amazon-eks-anywhere-now-generally-available-to-create-and-manage-kubernetes-clusters-on-premises/
• https://github.com/cloudposse/terraform-aws-ec2-client-vpn/pull/2
• https://github.com/scribd/pr-preview-example

Patrick Joyce has joined Public "Office Hours"

Oskar Maria Grande has joined Public "Office Hours"

A V has joined Public "Office Hours"

Mike Martin has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Jim Park has joined Public "Office Hours"

Neil Gealy has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Michael Holt has joined Public "Office Hours"

Yusuf has joined Public "Office Hours"

Michael Holt has joined Public "Office Hours"

Sheldon Hull has joined Public "Office Hours"

Carlos T has joined Public "Office Hours"

Nice! ArgoCD is a long way coming. I haven't looked at it in years.

Sam C has joined Public "Office Hours"

dario erregue has joined Public "Office Hours"

My company uses terraform for github. It's soooo slow. :*(

Vlad H has joined Public "Office Hours"

emem umoh has joined Public "Office Hours"

The documentation is very rough and still a WIP, but here is some example code for using App Mesh on ECS: https://github.com/scribd/pr-preview-example

@Andy Miguel was there a recording of any discussion about Nomad VS EKS?

@here office hours is starting in 30 minutes! Remember to post your questions here.

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Andy Miguel (Cloud Posse) has joined Public "Office Hours"

Cole Lawrence has joined Public "Office Hours"

David Hawthorne has joined Public "Office Hours"

venkata mutyala has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Clayton Olley has joined Public "Office Hours"

Luis Masaya has joined Public "Office Hours"

Phillip Hocking has joined Public "Office Hours"

Jim Park has joined Public "Office Hours"

Amer Zec has joined Public "Office Hours"

Madhusudan Satapathy has joined Public "Office Hours"

links from today's session:
• https://github.com/cloudposse/terraform-aws-ec2-client-vpn
• https://www.wiz.io/blog/secret-agent-exposes-azure-customers-to-unauthorized-code-execution
• https://owasp.org/Top10/
• https://github.blog/2021-08-24-github-cli-2-0-includes-extensions/
• https://aws.amazon.com/about-aws/whats-new/2021/08/custom-widgets-amazon-cloudwatch-dashboards/
• https://aws.amazon.com/about-aws/whats-new/2021/08/amazon-elasticache-redis/
• https://aws.amazon.com/blogs/aws/new-for-aws-cloudformation-quickly-retry-stack-operations-from-the-point-of-failure/
• https://aws.amazon.com/blogs/aws/amazon-elasticsearch-service-is-now-amazon-opensearch-service-and-supports-opensearch-10/

Geoff Weinhold has joined Public "Office Hours"

Kensie Meredith has joined Public "Office Hours"

Michael Holt has joined Public "Office Hours"

Tim Gourley has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

EKS (with amazon deploy tools) vs Argo VS Nomad?

PePe Amengual has joined Public "Office Hours"

Blaise pabon has joined Public "Office Hours"

Maycon Santos has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Oskar Maria Grande has joined Public "Office Hours"

anyone experiencing downtime on udemy too

@here office hours is starting in 30 minutes! Remember to post your questions here.

Has anyone used/looked at Dex? https://dexidp.io/ Just saw this and was curious about how it works.

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Neil Gealy has joined Public "Office Hours"

Anton Babenko has joined Public "Office Hours"

Andy Miguel (Cloud Posse) has joined Public "Office Hours"

Justin Davis has joined Public "Office Hours"

venkata mutyala has joined Public "Office Hours"

Alina B has joined Public "Office Hours"

Cole Lawrence has joined Public "Office Hours"

Ian Bartholomew has joined Public "Office Hours"

Luis Masaya has joined Public "Office Hours"

Clayton Olley has joined Public "Office Hours"

Jim Park has joined Public "Office Hours"

hmm can’t seem to join

Yusuf has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Nate Faerber has joined Public "Office Hours"

Florain Drescher has joined Public "Office Hours"

Geoff Weinhold has joined Public "Office Hours"

I'm getting "registration closed" when trying to use the zoom link

David B has joined Public "Office Hours"

Marc Tamsky has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Alexandr Vorona has joined Public "Office Hours"

Marc Slayton has joined Public "Office Hours"

links from today's session:
• https://github.com/aws/aws-proton-public-roadmap/issues/1
• https://aws.amazon.com/about-aws/whats-new/2021/09/announcing-build-aws-startups/
• https://aws.amazon.com/about-aws/whats-new/2021/09/amazon-ecr-replicate-individual-repositories-regions-accounts/
• https://kubernetes.io/blog/2021/08/04/kubernetes-1-22-release-announcement/#node-system-swap-support
• https://github.com/devtron-labs/devtron

Oliver Schoenborn has joined Public "Office Hours"

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

I missed the first half today, was hoping to get it on youtube... how long does it take for the recording to become available?

Been geeking out over this one for this week: https://aws.amazon.com/blogs/networking-and-content-delivery/application-load-balancer-type-target-group-for-network-load-balancer/

found on Reddit:
https://github.com/bluxmit/alnoda-workspaces/tree/main/workspaces/ansible-terraform-workspace

Another feature that has me saying “its about time” 😅
https://aws.amazon.com/about-aws/whats-new/2021/09/amazon-ec2-global-view-console-regions/

@here office hours is starting in 30 minutes! Remember to post your questions here.

unfortunately, I can not attend, but two questions:
• (?) most matured packaging tool that can handle helm, kustomize and raw manifests and has advanced templating support, also support for loading secrets from different vaults at render time ( there is a helmfile and vals, but mumoshu is single dev... and its not actively developed, kapitan, nor tanka, nor ytt + kapp dont handle these ^... btw, would be nice to have also terraform provider, or at least datasource support to render yaml directly in terraform, useful for cluster bootstraping ...)
• (?) "prepulling" images to k8s nodes, useful with autoscaler ( we are using overprovisioner and keda scheduler plus cloud autoscaler to prepare nodes for CI in certain times, there is https://github.com/openkruise/kruise, which can do a lot of other things and then there is https://github.com/senthilrch/kube-fledged , which is dedicated to prewarming images, seems that both are missing prometheus metrics support,... ) ideas?
thanks

Vlad Ionescu has joined Public "Office Hours"

Justin Davis has joined Public "Office Hours"

David Hawthorne has joined Public "Office Hours"

Anton Babenko has joined Public "Office Hours"

Andy Miguel (Cloud Posse) has joined Public "Office Hours"

Manuel Morejon has joined Public "Office Hours"

Andrew Thompson has joined Public "Office Hours"

Leon Mwandiringa has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

Michael Manganiello has joined Public "Office Hours"

Evan Pitstick has joined Public "Office Hours"

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Zadkiel AHARONIAN has joined Public "Office Hours"

Ian Bartholomew has joined Public "Office Hours"

Oskar Maria Grande has joined Public "Office Hours"

Florain Drescher has joined Public "Office Hours"

Mohammed Yahya has joined Public "Office Hours"

Patrick Joyce has joined Public "Office Hours"

James Haughey has joined Public "Office Hours"

Alex Siegman has joined Public "Office Hours"

Oscar Blanco has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

David Lundgren has joined Public "Office Hours"

Jeremy Branham has joined Public "Office Hours"

John Mitchell has joined Public "Office Hours"

https://github.com/hashicorp/terraform/pull/29661 future TF lint?

Alina B has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Michael Holt has joined Public "Office Hours"

Neil Gealy has joined Public "Office Hours"

Uwaila Adams has joined Public "Office Hours"

Mauricio Wyler has joined Public "Office Hours"

Mukesh Sharma has joined Public "Office Hours"

emem umoh has joined Public "Office Hours"

Blaise pabon has joined Public "Office Hours"

Florain Drescher has joined Public "Office Hours"

links from today's session:
• https://techcrunch.com/2021/09/22/software-supply-chain-platform-cloudsmith-raises-15m-series-a-led-by-tiger-global/
• https://github.com/cloudposse/atmos
• https://www.engadget.com/fastmail-1password-masked-email-110028257.html
• https://github.com/aws-ia
• https://twitter.com/sebramsland/status/1443274758968258575?s=21
• https://jeffbrown.tech/terraform-taint-replace/
• https://medium.com/version-1/terraform-in-real-life-lessons-learned-2469e3fe74e6
• https://aws.amazon.com/about-aws/whats-new/2021/09/application-load-balancer-aws-privatelink-static-ip-addresses-network-load-balancer/
• https://github.com/im2nguyen/rover

venkata mutyala has joined Public "Office Hours"

emem umoh has joined Public "Office Hours"

Blaise pabon has joined Public "Office Hours"

emem umoh has joined Public "Office Hours"

https://blog.cloudflare.com/introducing-r2-object-storage/

R2 will run across Cloudflare’s global network, which is most known for providing anti-DDoS services to its customers by absorbing and dispersing the massive amounts of traffic that accompany denial-of-service attacks on websites. It will be compatible with S3’s API, which makes it much easier to move applications already written with S3 in mind, and Cloudflare said that beyond the elimination of egress fees, the new service will be 10% cheaper to operate than S3.