Channels
doorman
infrastructure
random
zercurity
community-feeds
fleet-dev
code-review
queryhub
apple-silicon
carving
tls
fim
goquery
zentral
aws
querycon
golang
zeek
file-carving
fuzzing
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
darkbytes
process-auditing
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
general
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
windows
Title
w
wtheaker
10/03/2019, 5:09 PMI found this terraform module useful for setting up fleet in fargate last year: https://github.com/davidrecordon/terraform-aws-kolide-fleet
It needs a little cleanup but nothing intense
o
OMAR
10/03/2019, 6:00 PMthat's the same one shared above, and it has a few issues. for one, it uses a fork of fleet for twirp support and as a result is 2 years out of date. it also doesn't handle secrets properly, so your tfstate file will contain database credentials, jwt keys, etc. also imo the way it's architected makes monitoring and introspection difficult too.
basically it would require a bunch of changes that for me it made more sense to just do it from scratch
what type of work did you do to get it to production?
w
wtheaker
10/03/2019, 6:10 PMI used the fleet base image since aws added support for tls termination on the alb
I was using terraform enterprise so the tfstate didn't live on my development machine
🤷
aws isn't available to me rn so I'm using docker-compose again
o
OMAR
10/03/2019, 6:13 PMhaha, I've heard of TFE being the solution to a lot of common issues but alas it's not in our budget
w
wtheaker
10/03/2019, 6:16 PMyeah it's crazy expensive and doesn't support SAML
o
OMAR
10/03/2019, 6:19 PM> enterprise
> doesn't support SAMLw0t
m
Magneto
10/03/2019, 10:33 PMerrr... what kind of saml?
"Terraform Enterprise is our self-hosted distribution of Terraform Cloud. It offers enterprises a private instance of the Terraform Cloud application, with no resource limits and with additional enterprise-grade architectural features like audit logging and SAML single sign-on."
w
wtheaker
10/03/2019, 11:03 PMthe SaaS version of terraform enterprise is terraform cloud, which doesn't support saml