Hello. I'm trying to deploy Metaflow over Kubernetes/Terraform and would like some help exposing the UI to the world with an ALB (no authentication, as a first step). I modified the TF template to include the "UI" module so the UI should be deployed, but I need help configuring an ALB to point to it. Can someone please be kind enough to guide me?

@average-beach-28850 @hundreds-zebra-57629 might be able to help here

The problem: I can't access the UI when I put the URL in the browser. Not even directly with the full ALB DNS name (from the output of the UI submodule). I've created a route53 record - tested that it's resolving fine to the ALB. Security groups seem to be setup fine (ALB security group allows port 443 in, ECS security group allows everything from the ALB security group). The only thing I can suspect now is the VPC configuration. I left this at the default. I started with the EKS_Argo configuration: https://github.com/outerbounds/terraform-aws-metaflow/tree/master/examples/eks_argo, and added the submodules for UI and computation.

Hey @millions-horse-99435, apologies about the delay. Exposing the LB to the public internet requires specifying public subnets. The ECS service has a locked down security group so it is not an immediate risk. However, you can rework the module a little so it takes in a different set of subnet ids (public) and pass it to the LB resource when trying LB publicly. The current module likely doesn't have this option to make it less likely for users to introduce issues by exposing an unauthenticated endpoint.

Thank you for the response @hundreds-zebra-57629. The next thing I'm looking to do is add authentication with Cognito (as done in the Cloudformation template). Is there a terraform example relevant to this?