K8s externalTrafficPolicy "Local" or "Cluster"

With regard to setting the value “Cluster” instead of “Local”, the difference basically resides that when using “Cluster” value…

Common errors when setting up EKS for the first time

-error Connection refused localhost:8080:

export not well done in .bash_profile, the path exported has to match the name of the config file name under .kube directory

Launching a pod with an existing EBS volume mounted in K8s

In order to create a pod with an existing…

Bootstrapping EC2 in Terraform

In CloudFormation you inject the bootstrapping logic for your AWS instance/autoscaling group by using the…

Dynamic resource generation of resources using CloudFormation Macros.

One of the things you can do with this new feature is generate and deploy a number of resources based in a parameter value or the resulting value of the describing the number of AZs in order to create a subnet…

REDIS ElastiCache MultiAZ in CloudFormation

An example template that stands up an ElasticCache Replication Group Multi-AZ in a particular VPC specifying then a Subnet Group and a Security Group, VpcId is not directly referenced by the Replication Group resource, and is instead inferred by the…

Dealing With Throttling in CloudFormation Part I

When you work with CloudFormation at large scale you will need to cope with AWS API throttling.

There’s much confusion among users about this topic for several reasons, the following concepts must be very clear in order…

Cross Account SNS Topic in CloudFormation

When I think about what makes an infrastructure as a code tool valuable, I don’t just…

Using boto3 to list services under ECS

When you have to deal with an ECS cluster with many service you can struggle building your own logic when getting all the ECS services for that cluster.

AWS in order to avoid throttling and performance issues by default allows you to…

ECS Service Discovery as workaround for lack of user-defined bridge network ECS limitation.

ECS only allows default bridge network. As you already know this mode unlike the user defined bridge network doesn’t expose automatically all ports to each other containers.