Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove NAT gateway #499

Merged
merged 2 commits into from
Dec 12, 2023
Merged

Remove NAT gateway #499

merged 2 commits into from
Dec 12, 2023

Conversation

lorenyu
Copy link
Contributor

@lorenyu lorenyu commented Dec 12, 2023

Ticket

N/A

Changes

  • Add route table associations for S3 Gateway VPC endpoint
  • Remove NAT gateway

Context

When implementing non-default VPC in #72, we were running into issues where the ECS cluster would timeout when fetching the container image from ECR. Due to time pressure, we added a NAT gateway as a workaround, which bypasses the networking issues.

The issue was that the S3 Gateway VPC endpoint did not have the route table associations it needed in the route tables for the private subnets. This change adds the required route table associations and removes the NAT gateway that was there as a workaround.

Rollout

NOTE: Network layer changes need to be manually applied on platform-test* repos since the network layer isn't automatically deployed as part of CD

Testing

Developed and tested in platform-test on navapbc/platform-test#73

Copy link
Contributor

@shawnvanderjagt shawnvanderjagt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Very nice.

@lorenyu lorenyu merged commit 8bfab43 into main Dec 12, 2023
7 checks passed
@lorenyu lorenyu deleted the lorenyu/nonat branch December 12, 2023 15:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants