#general - June 2020

Hey everyone, give a warm welcome to our newest members!
- @Amin Amos
- @Anders Pettersen
- @Giovanni Ferri

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Reco
- @sreeni
- @alan macdonald
- @Joe Hohertz

Good to have you here =)

Hi guys, does anyone know if it’s possible to have a static Jenkins slave auth token? We’re using the Jenkins Kubernetes operator with a perm slave but every time the master pod restarts it generates a new token so the slave fails to reconnect

Just noticed that very old posts became available in this workspace. Do we have an access to the whole Slack history now and for how long?

Do we have ansible channel here?

Hey everyone, give a warm welcome to our newest members!
- @Joe Peters
- @David Thor
- @Anthony Cleaves
- @rmax
- @Dan Overholt
- @Latika Wadhwani
- @Chuck Gehman
- @Ben Wart

Good to have you here =)

hey everyone! 😄

I have been working with web technologies for about 2.5 years now. But I am very new to DevOps. I have experience deploying apps to managed environments and am a backend developer.

I recently started using terraform and came across your amazing collection of modules on GitHub

I would like to contribute to you guys and be part of you, and learn in the process and meet new people 😄

Hey everyone, give a warm welcome to our newest members!
- @Joseph Ashwin Kottapurath
- @Pijuli
- @Jeremy Addy
- @Dan Meyers

Good to have you here =)

hey! glad to be here

Happy Friday Everyone 🎉

I have a problem and in search of a solution. I would like to implement a solution where my EKS (Kubernetes) only pull docker images from ECR.
Additionally, all third docker images should reside on ECR, I would like to whitelist these images and automate the process of importing the docker images to ECR. Has anyone implemented such as solution using ECR as a mirror or cache for specific third-party docker images

Looking for an article about the differences between pinning to a git tag or the underlying hash, and the security implications of each. Anyone have anything?

Hey everyone, give a warm welcome to our newest members!
- @Jonathan Parker
- @LV
- @Leo Zavala
- @Rahul Muraleedharan
- @Rishi Sheth (he/him)

Good to have you here =)

Never knew about it until today, but there is a SonarQube plugin called Build Breaker that you can install that adds the functionality to make sonarqube scans wait for the analysis to finish, and return a non-zero exit code if the quality gate fails. Fantastic… No more need to mess with curl or the Jenkins SonarQube plugin, which can be flaky.

https://github.com/adnovum/sonar-build-breaker

Works with tools like the Gradle and Maven SonarQube plugins, and sonar-scanner tool

Cool @Andrew Roth

@Andrew Roth I think sonar quality gates plugin also does the same

Hey everyone, give a warm welcome to our newest members!
- @Mike Sarver
- @Ben

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @David Medinets
- @David
- @Alex Flores
- @Jitendra

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Mike Schueler
- @Christian Belisle
- @Soham Jadiya
- @Kumar
- @Jackson Kontny

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Marcos Hauer

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Serge MBikina
- @philippe scorsolini
- @Vladimir

Good to have you here =)

TLDR: would be nice to use less oppressive originated language going forward

Hey Amazing people.

Any chance Cloud Posse is going to explore Pulumi as a option beyond Terraform.

One argument I keep making often is it might take some time for Pulumi to catch with Community Modules. And I often take Cloud Posse's high quality Terraform modules to back my argument.

I am currently exploring Pulumi, and would like to hear what you guys have to say.

Is it too early. Would you personally consider Pulumi?

----

Also is it a big ask for you guys to provision a #pulumi channel to encourage discussion around it?

Thanks.

Pleasant day!

Hey everyone, give a warm welcome to our newest members!
- @Chris O.
- @shamil.kashmeri
- @Darren
- @sungbin.hong
- @naohiro
- @Ravi Lachhman
- @Tiffany Jachja

Good to have you here =)

👋 I’m here! What’d I miss?

Nothing, we have been waiting for you to start the party!

Hey everyone, give a warm welcome to our newest members!
- @Nelson Nunes
- @ismail yenigul
- @peterloron
- @avaussant
- @Elliott O'Hara

Good to have you here =)

Howdy!

Ty!

Hey everyone, give a warm welcome to our newest members!
- @Vishnupal

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Sai Krishna
- @Nille af Ekenstam

Good to have you here =)

Fedora CoreOS is frustrating. I can't find out what version of setroubeshoot are available. Surely find that information shouldn't take hours to find? https://en.wikipedia.org/wiki/RPM_Package_Manager does not mention a single thing about where the packages come from.

This is a little last minute, but if any SweetOps friends are interested in giving a talk in late September, our CFP closes tonight and has your name on it =): https://twitter.com/devopsdaysbos/status/1272295934014238721

Hey everyone, give a warm welcome to our newest members!
- @Leohu
- @Frank

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Csaba

Good to have you here =)

Hi, I am happy to be here

Hello all. 🙂

Hey everyone, give a warm welcome to our newest members!
- @Pablo Caderno
- @RogierD
- @Daniel Pilch
- @usammy

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @praneeth
- @DJ
- @jan

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Siva Neeli
- @dedline
- @Priyanka Murahari

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Chris Wahl
- @Jonathan
- @Rahul Singh

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @rajeshb

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Anil Nanda
- @Rebecca Fitzhugh

Good to have you here =)

Any https://drone.io/ users here? Just got tasked with using it for a client and I haven’t heard of it previously. Would be interested to hear thoughts + pros / cons if anybody has any experience with it.

RESOLVED? This might be a simple question. I have an EC2 centos7-based system with one nvme0n1p1 device. How does /dev and /dev/shm get mounted? I want to add "noexec".

devtmpfs on /dev type devtmpfs (rw,nosuid,seclabel,size=1885468k,nr_inodes=471367,mode=755)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,seclabel)

I thought this would be done in /etc/fstab but just has one line.

UUID=388a99ed-9486-4a46-aeb6-06eaf6c47675 /                       xfs     defaults        0 0

To answer my own question. I added two lines to the /etc/fstab file and rebooted. The server seems to still work.

tmpfs /dev/shm /tmpfs rw,seclabel,nosuid,noexec,nodev,size=2G 0 0
devtmpfs /dev devtmpfs rw,seclabel,nosuid,noexec,size=2G,nr_inodes=471366,mode=755 0 0

I have a question for today's #office-hours, I don't want to interrupt so I will just drop it here

What APM would you recommend for a Java Based application, and I can easily deploy on my Kubernetes cluster

Hey everyone, give a warm welcome to our newest members!
- @Edward Park
- @Scott Rogers
- @Steven Stevanus

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @quikstrike
- @Akhil Suryadevara
- @Jorge J.
- @Sébastien Pondichy
- @Nicolas Boisseau
- @Vasco
- @teck1999
- @Josh Duffney

Good to have you here =)

Just a heads up, the online public slack archive search endpoint might be broken?
https://archive.sweetops.com/search
getting a 404 error

Hey everyone, give a warm welcome to our newest members!
- @Alex S
- @rajat
- @rajat.tags.in
- @David J. M. Karlsen

Good to have you here =)

https://medined.github.io/centos/terraform/ansible/stig/2020/06/25/run-stig-on-centos7.html shows how to run a RHEL7 STIG playbook on Centos7 and improve the Lynis hardening index to 100 (skipping a few tests).

Hey everyone, give a warm welcome to our newest members!
- @Hao Wang
- @Zeromorphism

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @uenoma

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @corcoran
- @soumya
- @Osegbemoh Dania

Good to have you here =)

Hey! Is the http://artifacts.cloudposse.com/ still in use? We got an 404 error when trying to use https://github.com/cloudposse/terraform-aws-ses-lambda-forwarder

Could some provide me the correct link of the lambda.zip?

are there enough people in this community to warrant a #cloudcustodian channel ?

https://cloudcustodian.io/

Hey everyone, give a warm welcome to our newest members!
- @solidnerd
- @David Napier
- @confusdcodr
- @S L
- @Francis

Good to have you here =)

Hi folks. Really glad to be here. I stumbled upon cloud posse when I was searching for the cleanest way to implement IaC from the ground up. To begin with, your multi-aws account approach as step number 1 got me hooked and was exactly what I was hoping for. Very excited to try out the rest of the repos and I've been keenly reading your docs.
On this note, I'm trying geodesic out, in the hope that I can go try out the rest of the reference architecture repos so I can start building. TBH, I'm not sure if I can just run any of the repos upon checkout (I'm sure I'm missing a doc somewhere as I can't just run the readme commands ootb). Is this expected? Any help in the right direction on how to start would be really appreciated/helpful.
Anyway, glad to be in this community. I think what you made here is great!