MatthiasScholz commented 4 years ago

Summary

Making use of the AWS Session Manager will allow to deprecate the bastion setup in order to debug cluster issues where direct instance access is needed.

Using the AWS Session Manager provides better security and less infrastructure to maintain and pay for.

AWS System Manager Session Manager

Details

ensure AWS Session Manager is installed on the instances ( by default for AWS AmazonLinux 2 )
ensure instance is allowed to interact with AWS Session Manager ( instance profile )
cleanup documentation to advertise AWS Session Manager over Bastion setup ( +sshuttle )

MatthiasScholz commented 3 years ago

Open Points

Create PR to activate nomad-cluster creation without SSH cidr block definition.

MatthiasScholz commented 3 years ago

Solved with PR #87.

MatthiasScholz / cos

Support AWS System Manager Session Manager #83

Summary

Details

Open Points