search

nchammas / flintrock

A command-line tool for launching Apache Spark clusters.
Apache License 2.0
636 stars 116 forks source link

Security group setup with changing public IP #294

Open pratiksha opened 4 years ago

pratiksha commented 4 years ago

Hi, thanks for the great work on this tool. I've been having some trouble using Flintrock if my client's public IP changes as I lose SSH access to the cluster. Is there an existing way to push IP updates to all the relevant security groups using Flintrock?

nchammas commented 4 years ago

Hi @pratiksha. I'm glad that Flintrock is useful to you.

Flintrock does not have a way to push security rule updates to an existing cluster.

You can specify additional security groups on launch with flintrock launch --ec2-security-group. You can configure one of those additional groups with a more permissive rule based on a CIDR range that will tolerate the changes in your public IP address, as opposed to a single, specific IP address rule that will block you the moment your address changes. That may work well enough for your needs.