https://pulumi.com logo
#aws
Title
# aws
f

faint-motherboard-95438

03/20/2020, 1:04 PM
Hi there, Does anyone of you know a way to inject a config file in a container deployed through fargate/ecs ? Like a k8s configmap.
r

rhythmic-camera-25993

03/20/2020, 1:54 PM
there's nothing specifically like a configmap in ECS/Fargate, sadly. Closest I've been able to get is a Secret that has key/value pairs in it.
f

faint-motherboard-95438

03/20/2020, 1:58 PM
That’s what I was going to conclude given all the research I’ve made.. I have complex config files that I definitely can’t translate to some key/value secret pairs. Will try with eks fargate then if there’s no other easiest way. Thanks @rhythmic-camera-25993
r

rhythmic-camera-25993

03/20/2020, 2:27 PM
good luck! configmaps are definitely a weak point in fargate from what I can see, and are one of the things pushing me ever so slightly to k8s over fargate. I was trying to stay in fargate/ecs as much as possible to limit the number of concepts I had to teach to the rest of the team, but the more issues like this I find the more the wide capabilities of k8s start to look appealing...
f

faint-motherboard-95438

03/20/2020, 2:40 PM
Yes, totally agree!
b

busy-umbrella-36067

03/20/2020, 2:46 PM
If your workload isn’t stateful the EKS fargate integration is pretty nice.
r

rhythmic-camera-25993

03/20/2020, 2:50 PM
wait, I can let fargate act as my NodePools in a k8s cluster now?
oh this is really nice. and the profiles let me tie IAM roles/policies to the containers in a namespace.....this is potentially very interesting
f

faint-motherboard-95438

03/20/2020, 2:52 PM
that’s what I’m going to try as an alternative
r

rhythmic-camera-25993

03/20/2020, 2:53 PM
in this way it looks like you could use k8s namespaces not just for network-level isolation between k8s nodes, but coupled with per-namespace fargate profiles effectively isolate access to aws resources using policies
that's super exciting
s

stocky-island-3676

03/30/2020, 3:14 PM
ECS “ConfigMaps” are on AWS' `container-roadmap`, status “We’re Working On It”.
👌 2
r

rhythmic-camera-25993

03/30/2020, 3:17 PM
whooo!