search

edgedb / edgedb-deploy

EdgeDB Deployment Recipes and Scripts
10 stars 4 forks source link

AWS CF: Each instance generates its own certificate #19

Open raddevon opened 1 year ago

raddevon commented 1 year ago

This manifested in two issues a user asked about on Discord:

Is it possible that --trust-tls-cert is not applied deterministically? Had this work then fail, finally caught it concretely. No external changes here at all, just multiple attempts

https://discord.com/channels/841451783728529451/849377751370432573/1098477739234840636

and

We seem to get randomly logged out of the GUI when running with multiple containers behind a load balancer. I think the JWT is not matching when a container is randomly assigned and then it kicks us out. Any tips for this?

https://discord.com/channels/841451783728529451/849377751370432573/1106246549211717662

The ideal solution, as I understand it, is that we would refactor the CF template to generate a single certificate and share it across all instances.