https://www.runatlantis.io/ logo
Join Slack
Powered by
Was anyone able to deploy Atlantis on ECS with 2 L...
# atlantis-community
v
Was anyone able to deploy Atlantis on ECS with 2 Load Balancers? A internal LB (VPN) and an external LB (mainly for 
/events
to serve bitbucket). I've been trying to achieve that with no luck so far. It feels like I will need to create my own fork of the module, which I would really wish to avoid.
g
Oi Vinicius! What module is that?
j
You would need to make your own module for this use case. Alternatively you could add OIDC authentication at the ALB and protect certain paths that way but it requires paying okta extra money for the oidc/api authentication feature if okta is your OIDC provider
v
I am already using OIDC @Jason Reslock and the other paths are all secure. I am using a reverse proxy config to work the events but for some reason, it stopped responding twice in the past 3 months and I am unable to replicate it to debug. So, I was asked to move this to a dedicated LB. I found a nice solution to increase the security to not allow stuff in the external ALB if I use only one by setting rules with the host header, but my manager still wants it more reliable and I am giving it another shot. I am trying to create the LB as a resource and the attachments as well while creating 2 target groups with the module but still not getting there. I really wish to avoid writing my own module but it seems to be the only way. Thanks for the help though. I appreciate it
g
I see, this module is not managed by us. Have you checked that repo issues to see if someone else has the same problem? Maybe you can even contribute it back 🙂
v
Ah yes, I know that, which is why my question was more broader and was aiming at the solution of having 2 ALBs. I checked their issues also, seems like i am the only sad soul looking for this solution at the moment 😕
g
We actually had a similar request on the helm chart -> https://github.com/runatlantis/helm-charts/issues/7
👀 1
v
Interesting
g
and this one probably more like what you need -> https://github.com/runatlantis/helm-charts/issues/282
v
The most amazing thing is that the scenario described in the issue for the DNS, is the exact same I have. I have been considering moving Atlantis to k8s and this might be the kickstart that I needed. Thanks
🙌 1
2 Views
Open in Slack
PreviousNext
Powered by