Add Terraform example for AWS deployment#13
Open
sambiggins-aws wants to merge 7 commits into
Open
Conversation
Deploys loreserver on ECS Fargate with S3/DynamoDB storage. DynamoDB schemas and IAM permissions verified against lore-aws source. Signed-off-by: Sam Biggins <sabiggin@amazon.com>
- Explain that the Dockerfile build auto-registers lore-aws plugin - Document that the task runs in private subnets (VPC access required) - Add ingress to the Customize section for production paths Signed-off-by: Sam Biggins <sabiggin@amazon.com>
- Add s3:DeleteObjectVersion (required for versioned bucket cleanup) - Add edge pod service with replicated+remote stores via Cloud Map - Add Cloud Map private DNS for edge→primary discovery - Add internal SG rules for node-to-node QUIC+gRPC Signed-off-by: Sam Biggins <sabiggin@amazon.com>
sambiggins-aws
force-pushed
the
feat/examples-aws
branch
from
565e71f to
bc4cff3
Compare
- Generate CA + server cert via tls provider (SAN: primary.lore.internal) - Store certs in Secrets Manager, provision via init containers - Primary: enables quic_internal:41340 with cert for edge replication - Edge: trusts primary CA via SSL_CERT_FILE, connects replicated+remote - Both services confirmed running in deployment test Signed-off-by: Sam Biggins <sabiggin@amazon.com>
sambiggins-aws
force-pushed
the
feat/examples-aws
branch
from
bc4cff3 to
1ef073c
Compare
Signed-off-by: Sam Biggins <sabiggin@amazon.com>
Signed-off-by: Sam Biggins <sabiggin@amazon.com>
Collaborator
|
Hey @sambiggins-aws this is awesome, thanks for cotributing this. Is it possible to add some sort of integration test just to make sure it's not going stale with changes in tf versions, aws resources or Lore itself (where there are dependencies)? |
Validates resource schemas, variable wiring, and service configuration without AWS credentials. Catches breakage from Terraform/provider version upgrades or changes to the Lore AWS plugin config contract. Run: cd examples/aws && terraform init && terraform test Signed-off-by: Sam Biggins <sabiggin@amazon.com>
Author
|
@ragnarula let me know if this is what you had in mind, or if you are looking for something more along the lines of a github action? |
Collaborator
|
A GH action to run your test when those files change sounds like a good idea. Thanks! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Self-contained Terraform configuration at
examples/aws/that deploys a Lore primary + edge topology on ECS Fargate with durable S3/DynamoDB storage.Creates
Usage
See README.md for more information