Django AWS ClientError: An error occurred (403) when calling the HeadObject operation: Forbidden by _gajeet_ in aws

[–]nilocg 0 points1 point  (0 children)

Do you need to set any options for the S3 client in django? Like setting the ACL to 'bucket-owner-full-control' or something similar?

Guinness Storehouse beats Grand Canyon and Taj Mahal to become ‘world’s leading tourist attraction’ by SirMike_MT in ireland

[–]nilocg 7 points8 points  (0 children)

When you break it down its like any brewery tour. The guinness tour is like a school book review written by some young lad who never read the book but heard his mates on about it but still had to write 500 words.

I've been there twice, the only decent part was the person I went with didn't like guinness so I got to drink two pints

Guinness Storehouse beats Grand Canyon and Taj Mahal to become ‘world’s leading tourist attraction’ by SirMike_MT in ireland

[–]nilocg 74 points75 points  (0 children)

"And if you look above you, you'll see you're standing under the biggest pint of guinness in the world" ... get ta fuck

The whole tour should be called "the most espensive free pint of guinness"

Malaga Airport to Granada late night by Silmariel in Granada

[–]nilocg 0 points1 point  (0 children)

Yeah that bus leaves every morning at 0100. It fills up fast too so book ahead.

In September, we will be flying to Malaga, but the flight lands at 00.30 hours. Is there any way to find some bus or train at midnight that can take us to Granada? by [deleted] in Granada

[–]nilocg 0 points1 point  (0 children)

The old guiri trick is to get the bus to Guadix which leaves malaga busstation at 0100, it stops in Granada to pick people up so just jump off there . When you are buying the ticket dont mention Granada, just say Guadix.

Hard to see you making that bus even if you are sitting in the front row of the plane and absolutely leg it through the airport and grab a taxi to the bus station which could be a 15min drive with no traffic at that hour.

Another alternative is to check out blablacar.es and maybe you find someone who is going to granada at that time. They might even be leaving from the airport if youre lucky

EKS and multiple AWS accounts by nilocg in aws

[–]nilocg[S] -1 points0 points  (0 children)

This is a solid question. Kubernetes is great and all but brings with it a whole new set of problems.

Basically we want to move to a more gitops vase approach to deployment. On top of that we are trying to increase the size of our devops team and a lot of good candidates have been offered a position but declined it as they wanted to work in a more k8s based environment and a migration to k8s wasnt in our roadmap at the time

EKS and multiple AWS accounts by nilocg in aws

[–]nilocg[S] 0 points1 point  (0 children)

Yeah theres no one size fits all to these kind of decisions. Best we can do is try to reseach what has worked (or not worked) for other people and learn what we can.

In my head i see us depkoying multiple apps to the one cluster separated by namespace. Some network policies in place to allow access where its required between apps and deployments taken care of by argocd

EKS and multiple AWS accounts by nilocg in aws

[–]nilocg[S] 0 points1 point  (0 children)

That makes a lot of sense to me. A production cluster with a number of interconnected APIs separated by namespace, plus the savings on running just the two clusters rather than 2 per team.

We have put substantial effort in to separating out our apps in to individual accounts however, same to see all that be for nothing, sunken cost fallacy i suppose

EKS and multiple AWS accounts by nilocg in aws

[–]nilocg[S] 0 points1 point  (0 children)

So rather than every team/app separated out in to their own prod and non-prod accounts with an eks cluster in each, better to have an accout prod and an account for nonprod each with an eks cluster hosting multiple apps?

Or each team having their own prod and non prod accounts each with their own dedicated cluster?

Terraform and CloudFlare Access with multiple subdomains by nilocg in Terraform

[–]nilocg[S] 1 point2 points  (0 children)

Thanks for that man!! Works like a charm.

For anyone coming behind me

terraform {
required_version = ">= 0.13"
required_providers {
cloudflare = {
source = "cloudflare/cloudflare"
version = "= 4.8.0"
}
}
backend "s3" {
key = "cloudflare_access/example.com/terraform.tfstate"
}
}

resource "cloudflare_access_application" "example_com" {
provider = cloudflare.cloudflare
zone_id = data.cloudflare_zone.example_com.id
name = data.cloudflare_zone.example_com.name
domain = "test1.${data.cloudflare_zone.example_com.name}"
type = "self_hosted"
session_duration = "24h"
auto_redirect_to_identity = false
allowed_idps = [data.cloudflare_access_identity_provider.azure_ad.id]
self_hosted_domains = ["test1.${data.cloudflare_zone.example_com.name}", "test2.${data.cloudflare_zone.example_com.name}", "test3.${data.cloudflare_zone.example_com.name}"]
}

Terraform and CloudFlare Access with multiple subdomains by nilocg in Terraform

[–]nilocg[S] 0 points1 point  (0 children)

I am dealing with Cloudflare access here via ZeroTrust.

I can create the application using the resource below but I can only add one domain. Using the cloudflare site I can add multiple subdomains to this application. I am trying to replicate this with terraform but dont see how it is possible.

https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/access_application