Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Activity
    Gavin
    @gavinelder
    Just need to update the translator.
    Once the release
    Austin Byers
    @austinbyers
    I'll look at the XRay policy today, it looks like it's attached by the SAM transform, which currently happens after we deploy CloudFormation (it's not in a local file we can modify)
    It shouldn't be attaching the policy at all unless someone actually enables XRay, that could be yet another bug. I'll open the appropriate support tickets with AWS, but a simple workaround for now might be to just remove the xray option
    Gavin
    @gavinelder
    I have removed the tracing blocks to see if it is the cause for the policy additon.
    Austin Byers
    @austinbyers
    @nhakmiller pointed out we don't need the conditional attachments at all since SAM is doing it for us, I'll remove them either way
    Austin Byers
    @austinbyers

    @gavinelder I've got some bad news - AppSync is not supported in GovCloud and China nor is Cognito (with the exception of Ningxia)

    Unfortunately, these services handle our APIs and user management, both of which are critical features that can't be easily circumvented

    I'll put up a PR to update the documentation and check for unsupported regions during the deploy process, but for at least for the next month or so Panther won't work in China nor GovCloud
    We've wanted to replace AppSync for awhile now, so it's certainly feasible that Panther could support those regions later this year, based on user needs
    Gavin
    @gavinelder
    You win some... I will ping CN support to see when Ningxia may get App Sync i know they have a push to have a level of parity
    Austin Byers
    @austinbyers
    Sorry, I mistyped - Cognito is in Beijing, not Ningxia. In summary, for China:

    Not Supported: Beijing

    • Appsync
    • Athena
    • Certificate Manager
    • Glue

    Not Supported: Ningxia

    • Appsync
    • Certificate Manager
    • Cognito
    Gavin
    @gavinelder
    I have Cognito deployed in Ningxia
    I am just going to check AppSync as docs are not always 100%
    Austin Byers
    @austinbyers
    Apparently not! Sounds good, thanks
    Gavin
    @gavinelder
    Appsync is in Beijing
    image.png
    Austin Byers
    @austinbyers
    Ok then since we have a workaround for certificate manager, the real list is then

    Not Supported: Beijing

    • Athena
    • Glue

    Not Supported: Ningxia

    • Appsync
    Gavin
    @gavinelder
    Lol
    Just confirmed that's correct
    Gavin
    @gavinelder
    So options are in no particular order.
    • wait for Ningxia to release AppSync
    • Attempt cross region AppSync
    • wait for potential AppSync deprecation
    Austin Byers
    @austinbyers

    Accurate! Let us know if you can what they say about the first option.

    Otherwise, most likely we'll just prioritize dropping AppSync since I know the frontend team wants to anyway

    Gavin
    @gavinelder
    my mandarin is existent so I need to wait for CN new year to finish it's been extended slightly due to the Virus outbreak so I shall expect something back in a week or two
    is non-existent
    Aggelos Arvanitakis
    @3nvi

    Attempt cross region AppSync

    Have we ruled out cross-region Appsync? There must be some limitations, but I think we could give it a go before we choose to move away from Appsync. I'm not a fan of it, but I it's a significant effort to fully swap out your API terminating service.

    Actually, now that I think about it, given the fact that we have nested stacks, deploying AppSync separately to a diff region is not as trivial as well
    TheZehn
    @TheZehn
    I'm attempting to deploy Panther but I'm getting an error during mage deploy.
    Step 19/24 : COPY --from=build-env /code/web/dist web/dist COPY failed: stat /var/lib/docker/overlay2/f8336032289518aa50379cdeadbeef1be876a8613f39aea7d0aefc231c66f50b/merged/code/web/dist: no such file or directory Error: running "docker build --file deployments/web/Dockerfile --quiet ." failed with exit code 1
    Aggelos Arvanitakis
    @3nvi
    hey @TheZehn ,
    1. Which version of docker do you have ( docker --version)
    2. Which panther pre-release are you attempting to install?
    Aggelos Arvanitakis
    @3nvi
    Just verified that the 0.1.1 release didn't error out when using docker version 19.03.5
    TheZehn
    @TheZehn
    ~/panther$ docker --version
    Docker version 19.03.5, build 633a0ea838
    TheZehn
    @TheZehn
    @3nvi Is it possible that my deployment machine (a t2.micro ec2 instance in the same account) isn't good enough?
    Installing 0.1.1
    TheZehn
    @TheZehn
    Now it's erroring out in a different spot.
    nevermind, I'll wait for a 1.0 release
    7 replies
    Gavin
    @gavinelder
    Has any one attempted an E2E install using aws-vault ?
    Gavin
    @gavinelder
    nm made panther-labs/panther#178 it's a small docs issue / improvement to ensure MFA is enabled.
    Jack Naglieri
    @jacknagz
    @gavinelder are you on the latest version of vault?
    Gavin
    @gavinelder
    Very
    I have been able to repro by disabling and re-enabling mfa
    Relevant info on this issue 99designs/aws-vault#266. AWS requires to use an MFA to perform IAM operation with an assume-role
    Austin Byers
    @austinbyers
    Hey @gavinelder I responded to your GitHub issue, let's chat there so we can save the context. I've not been able to reproduce it
    Austin Byers
    @austinbyers
    Did you ever hear back from AWS about when AppSync will roll out?
    Gavin
    @gavinelder
    Escalated to Account manager atm.
    Have put it into the discussion about our committed spend
    Gavin
    @gavinelder
    Right I am off to bed, raised another couple of issues nothing major just UX improvements, also have you thought about dynamic expansion of the dashboard for people who may be colour blind , the pastels and greys can be hard to differentiate
    Austin Byers
    @austinbyers
    The dashboard is undergoing another round of design, I'll let @3nvi address questions about it when he's awake
    Aggelos Arvanitakis
    @3nvi
    @gavinelder We have already created new dashboard designs to replace the donuts with something more useful, remove green/red combinations (to help color blind people) and allow theming
    Although this is something that will not be immediately implemented, we expect to release it in the next couple of months.
    Gavin
    @gavinelder
    legit thanks for the info
    Aggelos Arvanitakis
    @3nvi
    cheers
    Jack Naglieri
    @jacknagz
    Hey everyone, we are moving to Slack: https://panther-labs-oss-slackin.herokuapp.com/