[services][terraform] Set up blob ECS service
ClosedPublic
Actions

Authored by bartek on Jul 21 2023, 9:49 AM.

Details

Reviewers

varun
• jon
michal

Commits

rCOMMc2131f348d44: [services][terraform] Set up blob ECS service

Summary

This diff demonstrates a ECS service that is hosted on a EC2 instance.
Blob Service exposes both HTTP and gRPC endpoints so it was a good candidate for this demo.

Depends on D8583

Test Plan

ECS-based blob service is up and running in production. Tested HTTPS endpoints via Postman and gRPC (SSL) endpoints with BloomRPC.

Diff Detail

Repository

rCOMM Comm

Lint

No Lint Coverage

Unit

No Test Coverage

Event Timeline

bartek created this revision.Jul 21 2023, 9:49 AM

bartek held this revision as a draft.

Herald added subscribers: tomek, ashoat. · View Herald TranscriptJul 21 2023, 9:49 AM

Harbormaster completed remote builds in B21127: Diff 28949.Jul 21 2023, 10:15 AM

bartek published this revision for review.Jul 21 2023, 11:17 AM

bartek added inline comments.

services/terraform/remote/aws_iam.tf
6–9 ↗	(On Diff #28949)	This role will be replaced with a Terraform-managed one with stricter permissions in subsequent diffs.
services/terraform/remote/service_blob.tf
136–138 ↗	(On Diff #28949)	This endpoint now returns `404` but I'm going to implement it for HTTP services
185–195 ↗	(On Diff #28949)	Left the legacy EC2-instance target with 0% traffic to be able to easily switch traffic to the old one while I'm experimenting with ECS

• jon added inline comments.Jul 26 2023, 5:14 PM

services/terraform/remote/aws_iam.tf
6–9 ↗	(On Diff #28949)	Do you mind adding a comment about that? I'm sure it will be surprising in the future.

Rebase. Add the IAM role directly.

services/terraform/remote/aws_iam.tf
6–9 ↗	(On Diff #28949)	Actually I decided to do it right away here
services/terraform/remote/service_blob.tf
136–138 ↗	(On Diff #28949)	Tracked in ENG-4470