Private-only subnet clusters do not allow Remote Console

[aws-samples]

Private-only subnet clusters do not allow Remote Console

[bollig]

HeadNode:
  InstanceType: t2.micro
  Ssh:
    KeyName: YYYYYYYYYYY
  Networking:
    SubnetId: subnet-YYYYYYYYYYY
    AdditionalSecurityGroups:
       - sg-YYYYYYYYYYY
  Iam:
    AdditionalIamPolicies:
      - Policy: arn:aws-us-gov:iam::aws:policy/AmazonSSMManagedInstanceCore
  Dcv:
    Enabled: true
  LocalStorage:
    RootVolume:
      Size: 100
Scheduling:
  Scheduler: slurm
  SlurmSettings:
    Dns:
      DisableManagedDns: true
      UseEc2Hostnames: true
  SlurmQueues:
    - Name: queue0
      ComputeResources:
        - Name: queue0-t2-micro
          MinCount: 0
          MaxCount: 4
          InstanceType: t2.micro
      Networking:
        SubnetIds:
          - subnet-YYYYYYYYYYY
        AdditionalSecurityGroups:
          - sg-YYYYYYYYYYY
Region: us-gov-west-1
Image:
  Os: alinux2
SharedStorage:
  - Name: Efs0
    StorageType: Efs
    MountDir: /data
    EfsSettings:
      ThroughputMode: bursting
      Encrypted: false
  - Name: FsxLustre1
    StorageType: FsxLustre
    MountDir: /fsx
    FsxLustreSettings:
      StorageCapacity: 1200
      DeploymentType: SCRATCH_2
  - Name: Ebs2
    StorageType: Ebs
    MountDir: /shared
    EbsSettings:
      VolumeType: gp2
      DeletionPolicy: Delete
      Size: 35

[charlesg3]

Hi Evan,

Thanks for the report -- I just double checked this cluster template. There are two issues going on here:

• The Remote Console Enabled toggle is erroneously set to false this was fixed in #36 when the IAM policy was updated for the GovCloud region.
• The Remote Console Enabled toggle is disabled (e.g. greyed out / not changeable). This is due to the fact that DCV is enabled and the mechanism by which we retrieve the DCV session requires the SSM policy. Disabling DCV will allow the user to change the Remote Consle Enabled toggle... and in the latest version changing the toggle will appropriately change the SSM policy in the cluster config for this region.

Hope that helps!