Thomas Obenaus

Fix: ensure that status codes are checked in any case

1

If this check is missing then responses from the server with the graphql end-point that are not compliant to the graphql spec will be just ignored (not treated as an...

Start the ryuk container in privileged mode

2

With this tweak it is possible to use the testcontainers-go library in a CI pipeline that is encapsulated in a docker container. For example I'm using drone ci and a...

# Issue Currently there are two variables that are used to modify the cloud-init script from the outside. This adds a unnecessary dependency to components that are not needed for...

Every container is accessible over ingress ALB

1

All traffic on ingress ALB is routed to the services subnet on the public-services data-center. There on each node runs fabio. Currently fabio is able to route the traffic to...

Docker ports open to 0.0.0.0/0

1

No need to have the docker ports (20000...32000) open to the "world". At least they can be restricted to the cidr of the used vpc or better just connect the...

Don't use external repositories to get images/ binaries for Nomad

1

#### Why We want to restrict access of the nomad-masters (leader) to the internet. That's why they are inside a subnet that has only access to AWS services. This restriction...

Provide possibility to inject userdata

2

Some use-cases (i.e. mounting an efs mount-target) are best implemented via user-data when the instance is created. With the current module api it is not possible to add steps to...

Script to calculate cidr-blocks for egress_aws NatGW

1

#### Why We want to restrict access of the nomad-masters (leader) to the internet. That's why they are inside a subnet that has only access to AWS services. This restriction...