Matthias Kerk comments

Results 15 comments of


                                            Matthias Kerk

The upgrade function should follow the "Best Practices for PAN-OS Upgrade"

If then also tech support file and updates can be done also with, the tool would be perfect.

even must change the SSH-Keys regulary...

One Idea would be: Taupage get his own AccountID via the AWS Metaservice and asks even with this ID for a new publickey for the granting service. if the account...

ALLOWED_REMOTE_NETWORKS doesn't support multiple Networks

This is Problem one, and the second is the AWS UserData it self. multiple Environments are separate with comma.

ELB: Automatically pull in some LB default security group

I have discussed with @hjacobs and we have agreed that we will allow TCP completely and not just 443 the group is called `default_protection`

Only consider Taupage AMIs owned by a "trusted" AWS account

Proposals by Henning: 'Setting tags' on VPC, set by sevenseconds We can use the Tags for Trustet/Right-Service-URL (kio, mint, pierone etc) They might be called X-STUPS-XYZ or only STUPS-XYZ

Only consider Taupage AMIs owned by a "trusted" AWS account

Its possible after zalando-stups/sevenseconds#30

Option to let senza create a stack, as defined in an existing yaml configuration file.

@kanuku Can you send me please a diff between the old and the new yaml? I thing, this is a problem, with a old version.

Option to let senza create a stack, as defined in an existing yaml configuration file.

until now, we didn't have any connection between final YAML and the Template. I think, we can add a option to `senza init` to import the existing answers.

Add Senza configuration file to allow pre-configuring most common settings (like Pier One URL)

similar to #51 and possible after zalando-stups/sevenseconds#30

Option to let senza delete everything that is defined in the senza yaml configuration file.

:+1: but this is potential risky...