Skip to content

Conversation

@cmperro
Copy link
Contributor

@cmperro cmperro commented Sep 30, 2021

cloudera.exe changes ONLY - No impact on cloudera.cloud and cdpy

This PR will:

  • Create VPC Endpoints (and prereqs, like a Security Group) for the endpoints that CDP will use
  • Runtime level doesn't need to "know" about these endpoints - It will just use them
  • This will default to use the value of "tunnel". It can be overridden in your definition file
  • Includes setup/teardown as well as abstracting the endpoints into a defaults file

Copy link
Contributor

@Chaffelson Chaffelson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested with L1 deployment against a normal teardown and a purge teardown, all green.

infra__aws_nat_gateway_name: "{{ infra.aws.vpc.nat_gateway.name | default([infra__namespace, infra__aws_nat_gateway_suffix] | join('-')) }}"
infra__aws_nat_gateway_suffix: "{{ infra.aws.vpc.nat_gateway.suffix | default(common__ngw_suffix) }}"

infra__aws_private_endpoints: "{{ infra.aws_private_endpoints | default(common__tunnel) }}"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Needs to be added to the docs/configuration.yml file

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added. Also changed param to infra.aws.vpc.private_endpoints for better nesting.

state: present
region: "{{ infra__region }}"
vpc_id: "{{ infra__aws_vpc_id }}"
tags: "{{ infra__tags | combine({ 'Name': 'vpce_sg' }, recursive=True) }}"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All SG's will have the same name? This should be linked to the NS at minimum

…lts to tunnel value - can be overridden.

Signed-off-by: Chris Perro <cmperro@gmail.com>
…. Fix name tag for VPCE security group. Add items to config.yml

Signed-off-by: Chris Perro <cmperro@gmail.com>
@wmudge wmudge merged commit 7d149ae into cloudera-labs:devel Nov 23, 2021
@wmudge wmudge added the enhancement MINOR - New feature or enhancement in the CHANGELOG label Jul 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement MINOR - New feature or enhancement in the CHANGELOG

Development

Successfully merging this pull request may close these issues.

3 participants