https://pulumi.com logo
Join Slack
Channels
Powered by Linen
general
  • b

    boundless-monkey-50243

    09/03/2018, 5:20 PM
    Been there. My auster tools started life as cloud-init and I ended up having to then bolt in cfn-init to get cfn-metadata access
  • b

    boundless-monkey-50243

    09/03/2018, 5:21 PM
    cfn-metadata was a great place to stick Chef attributes for chef-zero, so it ended up getting a little duct-tapey
  • b

    big-piano-35669

    09/03/2018, 5:22 PM
    It is surprisingly poorly documented, for something that presumably 10s of 1000s of programmers end up using to configure their VMs.
  • b

    boundless-monkey-50243

    09/03/2018, 5:22 PM
    I really don't think most people, even devops people, know it exists
  • r

    rough-oil-1458

    09/03/2018, 5:23 PM
    Can you use user_data?
  • b

    boundless-monkey-50243

    09/03/2018, 5:23 PM
    You use user_data to bootstrap cfn-init, generally
  • b

    boundless-monkey-50243

    09/03/2018, 5:23 PM
    Which gets weird, because cloud-init's functionality definitely overlaps cfn-init's in some places
  • r

    rough-oil-1458

    09/03/2018, 5:23 PM
    Yea, try to use Cloudinit as little as possible
  • r

    rough-oil-1458

    09/03/2018, 5:24 PM
    I try*
  • r

    rough-oil-1458

    09/03/2018, 5:24 PM
    and just have handlers that I wrote
  • b

    boundless-monkey-50243

    09/03/2018, 5:24 PM
    Most folks I run into very much overload cloud-init, cfn-init is comparatively rare
  • b

    boundless-monkey-50243

    09/03/2018, 5:24 PM
    And lots of folks hit snarls with it when they do stuff like "set cfn-hup to poll so hard that it rate-limits you out"
  • b

    boundless-monkey-50243

    09/03/2018, 5:25 PM
    So they don't come back
  • r

    rough-oil-1458

    09/03/2018, 5:25 PM
    hmmm, what does Cfn give you?
  • b

    boundless-monkey-50243

    09/03/2018, 5:26 PM
    cfn-init gives you an unstructured data source attached to every ASG and every EC2 instance that does not require permissions to use
  • r

    rough-oil-1458

    09/03/2018, 5:26 PM
    im by no means a aws expert
  • b

    boundless-monkey-50243

    09/03/2018, 5:26 PM
    Well, no. CloudFormation metadata service does that.
  • b

    boundless-monkey-50243

    09/03/2018, 5:26 PM
    One of the keys, 
    Aws::CloudFormation::Init
    , is reserved for cfn-init
  • b

    boundless-monkey-50243

    09/03/2018, 5:26 PM
    Joe's example shows some of what it can do: https://github.com/joeduffy/pcloudinit#example
  • r

    rough-oil-1458

    09/03/2018, 5:26 PM
    Gotcha, we chose to abstract of anything AWS only
  • r

    rough-oil-1458

    09/03/2018, 5:26 PM
    off*
  • b

    boundless-monkey-50243

    09/03/2018, 5:27 PM
    But you can stick your own data in the metadata service and you don't need any IAM nonsense to access it.
  • r

    rough-oil-1458

    09/03/2018, 5:27 PM
    So we wind up abusing consul
  • b

    boundless-monkey-50243

    09/03/2018, 5:27 PM
    i.e., Chef attributes
  • b

    boundless-monkey-50243

    09/03/2018, 5:28 PM
    I don't mind, from a security perspective, using something like Consul, because nothing that goes in there should be at all sensitive (that's what a secret store is for), but you have the "where do you put the lever" problem
  • b

    boundless-monkey-50243

    09/03/2018, 5:28 PM
    i.e., how do you make sure Consul then bootstraps sanely? etc.
  • r

    rough-oil-1458

    09/03/2018, 5:28 PM
    its pretty easy
  • r

    rough-oil-1458

    09/03/2018, 5:28 PM
    consul just takes an array of IPs*, I have a TF module
  • r

    rough-oil-1458

    09/03/2018, 5:29 PM
    https://github.com/autopilotpattern
  • r

    rough-oil-1458

    09/03/2018, 5:29 PM
    It follows the autopilotpattern, Which leverages this binary called containerpilot
Title
r

rough-oil-1458

09/03/2018, 5:29 PM
It follows the autopilotpattern, Which leverages this binary called containerpilot
View count: 1