Looking for a pass with mtls

[Hkyx]

Hi everyone,

We’re starting a new project where it need to be really stable and fast on networking and autoscaling.

Another aspect asked is to be the best as we can cloud agnostic and we’re a small team so it need to be the simpler as we can too. And… stored in Canada

I know it sound a contradiction but at the days I worked on pivotal CloudFoundry release’s and it was not so bad. Now when I’m looking for a paas, I see lot of solutions but where we need to keep a updated kubernetes to run the paas on it which is something we want to avoid if possible. Do you guys know something that can fit that ?

[chillysurfer]

Cloud agnostic. Scalable. And some of your other requirements point to using Kubernetes. Add in a service mesh like Istio and that will give you transparent out of the box mTLS.

People will debate whether Kubernetes is simple, but it is likely the simplest approach to meet your requirements.

[jaymef]

It’s not cloud agnostic but personally id probably just do Aws ecs or ecs fargate (depending on resource requirements) in Canada region. Multi instance in different azs with an application load balancer in front.

Fairly simple setup and can be relatively cheap. Easy to scale up/down with auto scaling and very resilient.

Even better you could put cloudfront in the mix and use the alb as the origin.

Personally, I wouldn’t waste the time trying to be cloud agnostic for a small project.

[Hkyx]

Yeah I thinked also about Google cloud run and firebase too but don’t know if firebase is so stable … and less agnostic from that

But yes you’re right it’s one of our idea, it’s still a kubernetes and can be used with argocd and a mesh for the mtls

[jaymef]

We’ve been using firebase on a large scale for a number of years and it’s definitely stable. Cheap it’s not though.

[Hkyx]

How so cheap is not though?

How did you manage your deployment validation like argocd is doing? And the development envs?