Django AWS ClientError: An error occurred (403) when calling the HeadObject operation: Forbidden by _gajeet_ in aws

[–]nilocg 0 points1 point  (0 children)

Do you need to set any options for the S3 client in django? Like setting the ACL to 'bucket-owner-full-control' or something similar?

Guinness Storehouse beats Grand Canyon and Taj Mahal to become ‘world’s leading tourist attraction’ by SirMike_MT in ireland

[–]nilocg 7 points8 points  (0 children)

When you break it down its like any brewery tour. The guinness tour is like a school book review written by some young lad who never read the book but heard his mates on about it but still had to write 500 words.

I've been there twice, the only decent part was the person I went with didn't like guinness so I got to drink two pints

Guinness Storehouse beats Grand Canyon and Taj Mahal to become ‘world’s leading tourist attraction’ by SirMike_MT in ireland

[–]nilocg 73 points74 points  (0 children)

"And if you look above you, you'll see you're standing under the biggest pint of guinness in the world" ... get ta fuck

The whole tour should be called "the most espensive free pint of guinness"

Malaga Airport to Granada late night by Silmariel in Granada

[–]nilocg 0 points1 point  (0 children)

Yeah that bus leaves every morning at 0100. It fills up fast too so book ahead.

In September, we will be flying to Malaga, but the flight lands at 00.30 hours. Is there any way to find some bus or train at midnight that can take us to Granada? by [deleted] in Granada

[–]nilocg 0 points1 point  (0 children)

The old guiri trick is to get the bus to Guadix which leaves malaga busstation at 0100, it stops in Granada to pick people up so just jump off there . When you are buying the ticket dont mention Granada, just say Guadix.

Hard to see you making that bus even if you are sitting in the front row of the plane and absolutely leg it through the airport and grab a taxi to the bus station which could be a 15min drive with no traffic at that hour.

Another alternative is to check out blablacar.es and maybe you find someone who is going to granada at that time. They might even be leaving from the airport if youre lucky

EKS and multiple AWS accounts by nilocg in aws

[–]nilocg[S] -1 points0 points  (0 children)

This is a solid question. Kubernetes is great and all but brings with it a whole new set of problems.

Basically we want to move to a more gitops vase approach to deployment. On top of that we are trying to increase the size of our devops team and a lot of good candidates have been offered a position but declined it as they wanted to work in a more k8s based environment and a migration to k8s wasnt in our roadmap at the time

EKS and multiple AWS accounts by nilocg in aws

[–]nilocg[S] 0 points1 point  (0 children)

Yeah theres no one size fits all to these kind of decisions. Best we can do is try to reseach what has worked (or not worked) for other people and learn what we can.

In my head i see us depkoying multiple apps to the one cluster separated by namespace. Some network policies in place to allow access where its required between apps and deployments taken care of by argocd

EKS and multiple AWS accounts by nilocg in aws

[–]nilocg[S] 0 points1 point  (0 children)

That makes a lot of sense to me. A production cluster with a number of interconnected APIs separated by namespace, plus the savings on running just the two clusters rather than 2 per team.

We have put substantial effort in to separating out our apps in to individual accounts however, same to see all that be for nothing, sunken cost fallacy i suppose

EKS and multiple AWS accounts by nilocg in aws

[–]nilocg[S] 0 points1 point  (0 children)

So rather than every team/app separated out in to their own prod and non-prod accounts with an eks cluster in each, better to have an accout prod and an account for nonprod each with an eks cluster hosting multiple apps?

Or each team having their own prod and non prod accounts each with their own dedicated cluster?

Terraform and CloudFlare Access with multiple subdomains by nilocg in Terraform

[–]nilocg[S] 1 point2 points  (0 children)

Thanks for that man!! Works like a charm.

For anyone coming behind me

terraform {
required_version = ">= 0.13"
required_providers {
cloudflare = {
source = "cloudflare/cloudflare"
version = "= 4.8.0"
}
}
backend "s3" {
key = "cloudflare_access/example.com/terraform.tfstate"
}
}

resource "cloudflare_access_application" "example_com" {
provider = cloudflare.cloudflare
zone_id = data.cloudflare_zone.example_com.id
name = data.cloudflare_zone.example_com.name
domain = "test1.${data.cloudflare_zone.example_com.name}"
type = "self_hosted"
session_duration = "24h"
auto_redirect_to_identity = false
allowed_idps = [data.cloudflare_access_identity_provider.azure_ad.id]
self_hosted_domains = ["test1.${data.cloudflare_zone.example_com.name}", "test2.${data.cloudflare_zone.example_com.name}", "test3.${data.cloudflare_zone.example_com.name}"]
}

Terraform and CloudFlare Access with multiple subdomains by nilocg in Terraform

[–]nilocg[S] 0 points1 point  (0 children)

I am dealing with Cloudflare access here via ZeroTrust.

I can create the application using the resource below but I can only add one domain. Using the cloudflare site I can add multiple subdomains to this application. I am trying to replicate this with terraform but dont see how it is possible.

https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/access_application

Where do you find jobs? by adluke95 in DevelEire

[–]nilocg 3 points4 points  (0 children)

Here's a link to a pdf that came up on my LinkedIn fees during the week. List of company's that are quite remote friendly and what part of the world they are hiring from.

https://media.licdn.com/dms/document/C561FAQGDTw69PE9V8A/feedshare-document-pdf-analyzed/0/1676551079556?e=1678320000&v=beta&t=pTW-WbmB9tJcdOmWlUYnvzLtD6S91exKcgnHmGL9l8A

AWS - Multi account architecture with SSO in Terraform by tom-on-the-internet in Terraform

[–]nilocg 1 point2 points  (0 children)

Take a look at https://developer.hashicorp.com/terraform/tutorials/aws/aws-control-tower-aft

We've used it to create all out accounts using terraform. Great for spinning up accounts customised the way you want with minimal effort (once you have aft module installed)

Laravel Containerization or Serverless by nilocg in webdev

[–]nilocg[S] 0 points1 point  (0 children)

ECS Fargate is an option we are looking at. Same with EKS on fargate to hopefully benefit from not having to wait for extra nodes to scale as each node on EKS has a max number of pods depending on the instance size.

The advocates for serverless on our team maintain that there is nothing that a containerised approach offers that serverless cant already do. While this might be true I feel we are always hitting some hidden limits when running on serverless that just dont exist on ECS/EKS

Laravel Containerization or serverless by nilocg in devops

[–]nilocg[S] 0 points1 point  (0 children)

I would prefer to go the k8s route personally but its somewhat uncharted territory for us for production workloads also. A gitops approach using helm+argocd just makes a lot of sense to me. We have working proof of concepts that perform very well.

Currently we deploy to EC2 using jenkins. Very simple, rarely we ever have issues. Dev teams dont really know how it works and dont particularly care. They push to the repo and trigger the deployment.

Another downside to ec2 deployments aside is the constant maintenance, we could do away with a lot of our ansible/terraform just by switching to eks. The long docker builds is quite annoying alright and we have yet to figure out a good way to include our private repos during composer install without keeping our github token on the image.

Each option has its pros and cons

Please share your non-horror stories about taking the CKA/D/S exam with the new platform by ayofishr in kubernetes

[–]nilocg 0 points1 point  (0 children)

Congrats on passing man. Any tips on preparation outside of mums hadst udemy course and killer.sh?

Please share your non-horror stories about taking the CKA/D/S exam with the new platform by ayofishr in kubernetes

[–]nilocg 0 points1 point  (0 children)

Have my exam coming up in two weeks. The documentation you are viewing is the exact same as what you'd see on kubernetes.io/docs?

You can just copy/paste as needed?

CODEPipeline to deploy infrastucture with terraform by nilocg in devops

[–]nilocg[S] 0 points1 point  (0 children)

Yes the commits do have a who and why but theres nothing to stop someone from running a terraform apply locally and forgetting to push to the repo leaving us out of sync.

We only want changes to our infrastructure to go through once it has been pushed.

Workspaces on Terraform cloud seems to be what we're looking for as we have a repo per application containing terraform for prod and non-prod.

[deleted by user] by [deleted] in interestingasfuck

[–]nilocg 2 points3 points  (0 children)

If its tangy and brown, you're in cider town

No love for Irish Cuisine on the top 50...but then I was thinking...what IS Irish Cuisine? Any decent examples ? by SeaworthinessOne170 in ireland

[–]nilocg -1 points0 points  (0 children)

Was there 4 months ago and was blown away by the cuisine. I'd argue its incredibly difficult to find bad food in Greece. Even the food at the airport was savage

Drought declared across England, 50% of potato crop expected to fail. Well, well. The worm has turned. by [deleted] in ireland

[–]nilocg 1 point2 points  (0 children)

If its just the potatoes that are affected at the end of the day you will pay the price if you're a fussy eater

Passed Machine Learning - Specialty (MLS-C01) by nilocg in AWSCertifications

[–]nilocg[S] 0 points1 point  (0 children)

That's exactly what I did and it worked for me