Cloud Posse DevOps "Office Hours" (2021-07-28)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have.

You can register here: https://cloudposse.com/office-hours

Join the conversation:
https://slack.cloudposse.com/

Find out how we can help your company:
https://cloudposse.com/quiz
https://cloudposse.com/accelerate/

Learn more about Cloud Posse:
https://cloudposse.com
https://github.com/cloudposse
https://sweetops.com/
https://newsletter.cloudposse.com
https://podcast.cloudposse.com/

[00:00:00​] Intro
[00:01:19] Save the date! August 18th: HashiCorp Boundary Demo (Taylor Dolezal)
[00:02:25​] Mitchell Hashimoto Steps aside as CTO of HashiCorp
https://www.hashicorp.com/blog/mitchell-s-new-role-at-hashicorp
[00:03:16​] Library of Conftest Rules (via weekly.tf - thanks Anton!)
https://github.com/Cigna/confectionery
[00:05:05​] Easily list AWS Resources with awsls (via weekly.tf)
https://github.com/jckuester/awsls
[00:05:53] How do I get basic debugging on Kubernetes clusters?
https://pixielabs.ai/
[00:13:54] Abbot is a platform to build and run automation scripts from chat without a lot of hassle
https://ab.bot
https://news.ycombinator.com/item?id=27974077
[00:15:31​] Has anyone test-run opstrace as an alternative to other saas “o11y” offerings? if so how did it go and did you go further into production with it?
[00:16:56​] What’s the best policy to be as safe as possible with storing TF state because TF hasn't given us anything to help with secrets in TF state?
[00:23:51​] Has anyone used PGP to encrypt AWS access keys generated by the TF module for secret keys?
[00:25:45] How do you use Git pre-hooks for identifying secrets on organization-level?
[00:30:22​] How are people terraforming alerts specifically in the case where there are many identical underlying resources spread across numerous accounts or environments that require different threshold values?
[00:45:00] Terraform doesn't enforce any workflows
[00:54:35] Cloud Posse tutorials and Spacelift
[00:56:56] Outro