Dmitri Muntean dmuntean

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
ProtectHome=read-only
ProtectControlGroups=yes
ProtectKernelModules=yes

A SaltStack AWS Auto Scaling Solution

Overview

The AWS Auto Scaling Goup, configured with a customised Cloud-Init file, sends a notification to an SNS Topic, which in turn passes it onto an SQS queue that the Salt Master is subscribed to. A Reactor watches for the auto scaling events and pre-approves the new minion based on its Auto Scaling group name and instance ID.

Salt Master Configuration

In a perfect world, where things are done well, not just quickly, I would expect to find the following when joining the company:

Documentation

Accurate / up-to-date systems architecture diagram
Accurate / up-to-date network diagram
Out-of-hours support plan
Incident management plan

	#!/usr/bin/env python

	# 2018-02-15 Updated to be compatible with Salt-Cloud 2017.7.3

	import sys
	import os.path

	import yaml
	import boto3
	import salt.config

	Adyen Test Card Numbers
	These cards are only valid on our TEST system and they will never involve any actual transaction or transfer of funds. The TEST card numbers will not work on the Adyen LIVE Platform.

	For all cards use the following expiration and CVV2/CVC2/or CID for Amex.

	For all cards:

	Expiration Dates CVV2 / CVC3 CID (American Express)
	08/2018 OR 10/2020 737 7373