3 ms·
I don't think the benefits of this outweigh the complexity and time costs to create and operate it. Having a scheduled task patch the servers regularly with e
by candiddevmike 5y ago
I don't think the benefits of this outweigh the complexity and time costs to create and operate it. Having a scheduled task patch the servers regularly with extremely limited "break the glass" RBAC on your servers is better for 99% of environments.
- Spivak 5y agoThere's really no complexity. Our deploys are blue-green (i.e two ASGs and a load balancer, no need to make it sound fancy). You need to do this anyway because instances in the cloud are inherently unreliable. Deploying new code: publish a new container, scale up green, switch, whack blue at your leisure. Patching: publish a new AMI, scale up green, switch, whack blue at your leisure.