hashicorp / hashicorp/boundary-plugin-aws

Cannot Select Correct Address for AWS ECS Node

Open
#11 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
15
Forks
3
PR merge metrics
No merged PRs in 30d

Description

I have an AWS ECS cluster that I'd like to be able to SSH into via Boundary, but cannot configure the host set AWS plugin to select the proper address of the host node.

Each of my AWS ECS nodes has two private addresses, one for the host itself and one for what I assume is the CNI on the node. However, Boundary seems to always select the CNI address and not the host address. Both of these exist in the same subnet CIDR ranges, so using the `preferred_endpoints` with a CIDR specification will not help.

I have tried using the `dns` specification in `preferred_endpoints` with both `dns:ip-*` and `dns:*` but neither seem to work and I can't find any documentation for it so I'm not positive that is a proper option.

Is there anyway that I can configure it to select the proper address? Could the plugin check the address against the private DNS name and always prefer the one matching the host if no `preferred_endpoints` is set?

Am I missing something?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.