Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue 131 | NodeConfigCompare : In the Prerequisites mention network URLs to be allow listed #132

Open
wants to merge 4 commits into
base: main
Choose a base branch
from

Conversation

akshayar
Copy link
Contributor

Issue #, if available: 131

Description of changes: Added the URLs that needed to be allow listed by firewall outbound rules.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

aws#125

 The config/extract.yaml template from S3 is not used.
…allow listed aws#131

 Added documentation to specify the URLs to allow list for outbound traffic.
Pull code from trunk.
@akshayar akshayar changed the title Issue 131 Issue 131 | NodeConfigCompare : In the Prerequisites mention network URLs to be allow listed Nov 24, 2023
@@ -28,7 +28,7 @@ If you are already running Amazon Redshift workload in production, you may like

If you are going to replay your workload into Serverless workgroup then make sure that you must have at least three subnets, and they must span across three Availability Zones. You can review the considerations when using Amazon Redshift Serverless [here](https://docs.aws.amazon.com/redshift/latest/mgmt/serverless-known-issues.html).

You need to provide at least one subnet in the same VPC (where you have Redshift provisioned clusters or serverless workgroups) which has access to the internet to download the ECR container image.
You need to provide at least one subnet in the same VPC (where you have Redshift provisioned clusters or serverless workgroups) which has access to the internet to download the ECR container image ( from `public.ecr.aws`), python packages ( from `pypi.org` and `files.pythonhosted.org`) , code ( from github repository `github.com/aws/redshift-test-drive.git`) , and additional artefacts (from `d2glxqk2uabbnd.cloudfront.net` and `cdn.amazonlinux.com`). If there are outbound firewall rules, you have to allow list these URLs.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hey @akshayar, thanks for raising the issue and creating a PR. Appreciate your effort. But before I approve I want to understand few things just for more clarity, I understand the URLs public.ecr.aws for ECR image , github.com/aws/redshift-test-drive.git for Cloning the repo, pypi.org for python packages. I want to understand the URLs files.pythonhosted.org, d2glxqk2uabbnd.cloudfront.net and cdn.amazonlinux.com and where/what they are used for.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let me pull the logs to find out the exact line where it failed. This will help us find that out.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That will be helpful. Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants