search

aws / aws-parallelcluster-ui

Apache License 2.0
31 stars 18 forks source link

Accessing UI within a VPC without public API #281

Open nikobellic3 opened 9 months ago

nikobellic3 commented 9 months ago

is it possible for UI to be deployed in private subnet and use ec2 to access it? I deployed the UI and I know it uses the public api as a proxy to login to UI. I am trying to avoid using the public API and have it completely isolated from the internet.

gmarciani commented 9 months ago

Hi @nikobellic3, thanks for reaching out! PCUI deployment in isolated subnets is not supported as of version 2023.10.0. Such feature will be probably included in the next release, but we do not have a date for it yet.

nikobellic3 commented 9 months ago

I have it deployed there and the UI keeps crashing after I login. It refers me to the something wrong pop-up message. How can I fix this issue?

marcofiocco commented 5 months ago

+1

My AWS account is controlled by my company and for security reasons they don't allow to have instances with public IPs so ImageBuilder cannot create the EC2 instance required to create images. Note that my corporate cloud support team has denied the request to enable "auto-assign public IPv4 address" for security reasons and have already allocated the full range of subnets for my VPC, so I cannot even create a temporary subnet to allow ImageBuilder to complete successfully when I deploy the PCUI Cloudformation template.

So I really need a template that allows to deploy with only private IPs (we are required to use a VPN to interact with the AWS account).

kaisenl commented 4 weeks ago

I have the same problem and can't have PCUI on a public IP. Is there any estimate for this? Thanks!

gmarciani commented 4 weeks ago

Hi all,

thank you for your interest in ParallelCluster UI!

The above discussion surfaces two different, but similar, use cases:

  1. make ImageBuilder use a custom Subnet to build PCUI image: to do this, you need to set the PCUI stack parameters ImageBuilderVpcId and ImageBuilderSubnetId. This feature is available since PCUI 2023.02.
  2. deploy PCUI in a private networking: to do this, you need to set the PCUI stack parameter VpcEndpointId to a VPC Endpoint of type Interface for the service com.amazonaws.REGION.execute-api and the parameter LambdaSubnetIds to the subnets where the VPC Endpoint is deployed. This feature is available since PCUI 2023.12.0.

I hope this helps.