Skip to content

feat(manifest): enable "network" field to specify subnets and sec groups#1979

Merged
mergify[bot] merged 5 commits intoaws:mainlinefrom
efekarakus:enable-private-subnets
Feb 26, 2021
Merged

feat(manifest): enable "network" field to specify subnets and sec groups#1979
mergify[bot] merged 5 commits intoaws:mainlinefrom
efekarakus:enable-private-subnets

Conversation

@efekarakus
Copy link
Copy Markdown
Contributor

The manifests now support the following new fields:

network:
   vpc:
      placement: 'public|private'  # which subnets to place the tasks.
      security_groups: [string]    # list of additional security groups.

The network.vpc.placement field won't be really useful atm for customers that use Copilot generated VPCs since we don't create NAT gateways. However, it will be supported in the future. This is milestone 1. of #1959.
On the other hand, customers that imported their VPC while creating an environment will now be able to place their tasks in private subnets.

The security groups feature is available for everyone to attach additional security groups to their tasks.

Related #1959
Closes #1453

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

data: `
network:
vpc:
placement: 'tartarus'
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

😂

Copy link
Copy Markdown
Contributor

@huanjani huanjani left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Copy link
Copy Markdown
Contributor

@bvtujo bvtujo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks really slick! Nice work with the code to enable these changes.

@mergify mergify Bot merged commit 8bee9aa into aws:mainline Feb 26, 2021
@efekarakus efekarakus deleted the enable-private-subnets branch February 26, 2021 18:29
huanjani added a commit to huanjani/amazon-ecs-cli-v2 that referenced this pull request Feb 26, 2021
@efekarakus efekarakus mentioned this pull request Mar 8, 2021
thrau pushed a commit to localstack/copilot-cli-local that referenced this pull request Dec 9, 2022
…oups (aws#1979)

The manifests now support the following new fields:
```yaml
network:
   vpc:
      placement: 'public|private'  # which subnets to place the tasks.
      security_groups: [string]    # list of additional security groups.
```

The `network.vpc.placement` field won't be really useful atm for customers that use Copilot generated VPCs since we don't create NAT gateways. However, it will be supported in the future. This is milestone 1. of aws#1959.  
On the other hand, customers that imported their VPC while creating an environment will now be able to place their tasks in private subnets.

The security groups feature is available for everyone to attach additional security groups to their tasks.

Related aws#1959
Closes aws#1453

_By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice._
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feature request: attach an existing security group

4 participants