Deploying to redis via an ssh tunnel

[mnutt]

My team has a deployment process very similar to ember-cli-deploy's default, but our redis server isn't directly accessible from our local machines due to firewall rules. The options I see are:

• Just remind devs to have a tunnel set up between their machine and redis. It's simplest, but I don't love having local machines with always-on direct access to our production redis servers.
• Some combination of ember-deploy-ssh-index and ember-deploy-redis to ssh to the redis machine and run redis commands. This is what we do currently via a homegrown script but it's kind of a mess to pipe redis commands through bash.
• Use ember-deploy-redis and wrap then-redis to set up an ssh tunnel from an ephemeral port to the redis port on the remote server for the duration of the deploy. I'm favoring this option, but am curious if you think it's better as its own deploy plugin or if it could be merged into ember-deploy-redis.

The extra options could look like:

  development: {
    store: {
      type: 'redis', // the default store is 'redis'
      host: 'remoteHost',
      port: 6379,
      ssh: {
        localPort: 38596, // if not set, one is randomly chosen between 32768 and 65535
        username: 'deploy',
        privateKey: ...,
      }
    }

(I opened the issue here since I know there are a lot of big changes coming to the plugin system, but I can move it to the ember-deploy-s3 repo if that is a better place for it.)

[lukemelia]

Seems to me that having this as an option for ember-(cli-)deploy-redis makes sense, but I'd like to hear @LevelbossMike's input.

[blimmer]

As we migrate to ember-cli-deploy(-redis) we will need to resolve this exact same problem because our production Redis servers are limited similarly to @mnutt 's environment. I'm in favor of the last bullet point of supporting opening a tunnel for the duration of the deploy and merging into ember-deploy-redis.

[LevelbossMike]

this seems like a useful addition to ember-deploy-redis. And like a use-case that should be supported by the plugin because it's annoying for everyone to set this up themselves and there are definitely a lot of people that need it.

[ungue]

👍 for this. This is exactly what Im looking for.

[trianglegrrl]

👍 from us, too. To our interests, this is indeed relevant.

[blimmer]

Since this is Redis specific, the issue is now here . @LevelbossMike think it's OK to close this issue and track with the ember-deploy-redis issue?

[LevelbossMike]

yup. closing in favor of LevelbossMike/ember-deploy-redis#4