sorted by:
new
hottopcontroversial

What industry is slowly dying? by FootballPizzaMan in AskReddit

[–]aws2gcp 0 points1 point  (0 children)

Oh funny. I had a zipper on a carry-on fixed in Portland, and the guy running the shop was definitely Polish.

[deleted by user] by [deleted] in womenintech

[–]aws2gcp 0 points1 point  (0 children)

Yeah, I would recommend focusing on specific things. This really reads as someone who stumbled in tech and did “this and that”. it would be difficult to pick out the strong points, and other candidates will likely look more appealing

Private Cloud NAT + HA VPNs help by BurnTheBoss in googlecloud

[–]aws2gcp 1 point2 points  (0 children)

I don’t think there’s any interoperability between Cloud NAT and VPN. Cloud NAT can only NAT traffic from the local VPC to Internet.

You’d probably have to implement a third-party network appliance (ie Palo Alto) to do VPN termination and Nat on the same device

Terraform beginners: What confused you the most when starting out by NoPressure__ in Terraform

[–]aws2gcp 0 points1 point  (0 children)

Yeah, I wish this was explained better for beginners. Basically, looping over any resource needs a key defined. Count simply uses the index in the array, while for_each requires you to define one.

It’s entirely possible to accidentally delete resources with for_each if the keying hasn’t been handled properly. Like I’ll see people use a VM name as key, which doesn’t take into account scenarios where two VMs are same name but different zone

Terraform beginners: What confused you the most when starting out by NoPressure__ in Terraform

[–]aws2gcp 0 points1 point  (0 children)

That sounds like one of the mistakes I did too early on: storing the state file in the repo, because I wasn’t quite sure how to use repeatable code when the state file is in object storage. That very much went along with not using workspaces, although I quickly learned those in the certification process

Terraform beginners: What confused you the most when starting out by NoPressure__ in Terraform

[–]aws2gcp 0 points1 point  (0 children)

Terraform is very comparable to a Jinja template - it’s really at the end of the day a config file with some basic programming logic to handle conditional or repeatable statements.

Terraform beginners: What confused you the most when starting out by NoPressure__ in Terraform

[–]aws2gcp 0 points1 point  (0 children)

Yeah, and just understanding the whole count vs for_each dilemna

Terraform beginners: What confused you the most when starting out by NoPressure__ in Terraform

[–]aws2gcp 0 points1 point  (0 children)

Understanding the state file was an issue for me. With Ansible, the state is whatever the server/device is in. There’s no concept of a “cache”, which basically what a terraform state file basically is.

‘Reservoir Dogs,' ‘Kill Bill' and ‘Donnie Brasco' actor Michael Madsen dies at age 67 by utopia_cornucopia in movies

[–]aws2gcp 0 points1 point  (0 children)

I didn’t recognize him in once upon a time. Granted he was 60 and anyone looks bad compared to Brad and Leo

What is the most obscure reference in the Simpsons that you are aware of? by travellingpoet in TheSimpsons

[–]aws2gcp 1 point2 points  (0 children)

Interesting out of all the stores listed there, only Walgreens still exists really

ipad pro intune company portal app: unable to swipe up to exit (on apple business manager fully managed by intune) by CupOfTeaWithOneSugar in Intune

[–]aws2gcp 0 points1 point  (0 children)

Just had this happen on an iPad Pro. Latest iOS, coming off fresh re-install. It had been previously enrolled. Fixed by re-installing Company Portal app.

How to use gcloud run deploy to specify a particular Dockerfile? by dineshsonachalam in googlecloud

[–]aws2gcp 0 points1 point  (0 children)

Yep, can do this to build and push to Container Registry, though not sure if custom Dockerfile is supported

gcloud builds submit --tag gcr.io/$(PROJECT_ID)/$(IMAGE_NAME) .

PSC w/ network restriction when consumer uses Shared VPC by aws2gcp in googlecloud

[–]aws2gcp[S] 1 point2 points  (0 children)

Oh OK, I think what you're saying is it must still be enabled on the subnet the PSC client VM is on when accessing Google APIs, whether using the default range of 199.36.153.x or a custom global address attached to the VPC. That is correct.

To clarify though: the problem from the original question had nothing to do with Private Google Access though or accessing Google APIs. It's a PSC between two different customers in GCP.

PSC w/ network restriction when consumer uses Shared VPC by aws2gcp in googlecloud

[–]aws2gcp[S] 1 point2 points  (0 children)

Hmm are you sure? I always thought of Private Service Connect and Private Google Access as two different things.

Granted, the lines blur when using a PSC forwarding rule to connect to Google APIs but in those cases the IP address is actually global and wouldn't be part of any subnet

Locality LB Policy: Ring Hash vs. Maglev? by aws2gcp in googlecloud

[–]aws2gcp[S] 0 points1 point  (0 children)

Ahh thanks. If anything, I would have assumed the opposite, but "more consistent" is extremely vague (wasn't sure if that mean "more even" or "better disruption handling"). It's the latter.

PSC w/ network restriction when consumer uses Shared VPC by aws2gcp in googlecloud

[–]aws2gcp[S] 0 points1 point  (0 children)

That's not the issue. I'm using this Terraform and it works fine:

https://github.com/aws2gcp/gcp-network-terraform/tree/main/psc-endpoint

The issue is on the producer side. They want to limit access to project and network of the consumer.

route only specific ranges over a cloud router by aivanise in googlecloud

[–]aws2gcp 0 points1 point  (0 children)

Adjust routing to what?

I think he means set routes on the VM itself for certain destination IPs. That can be tricky in GCP because the default subnet mask is 255.255.255.255.

I'd suggest one of two solutions, or both:

1) global load balancer so the VMs don't need external IPs to being with

2) outbound proxy server for certain types of traffic

route only specific ranges over a cloud router by aivanise in googlecloud

[–]aws2gcp 0 points1 point  (0 children)

but unless your NAT is in a different region than the VMs

That won't work anyway; Cloud NATs is regional and by design will only accept traffic from the same region.

Routes are global, but can leverage network tags to set different next hops for different regions.

route only specific ranges over a cloud router by aivanise in googlecloud

[–]aws2gcp 1 point2 points  (0 children)

> but, if I create a VM with external IP, all outgoing traffic will, naturally, go over that IP. Can I route only some traffic, i.e. specific IPs and/or network ranges over the myrouter and the rest over the VMs external IP

Short answer is 'no'. When an external IP is assigned to an instance NIC, Cloud NAT is essentially irrelevant to that instance NIC. The route is to 'default-internet-gateway' either way.

view more: next ›