#general - September 2023

Hey everyone, give a warm welcome to our newest members!
- @Andrea Saez
- @caroldelwing

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Igor Peric

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Michael
- @Petar Nikov
- @Shiva S

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Victor Orlov
- @Adam Jordens
- @Nilesh Kanawade
- @Michael
- @Michael Koroteev
- @Wilson Njogo

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Devin Roark
- @Ben Mills
- @Vitali
- @jz
- @Hernan Daguerre
- @Aniello Serio
- @Mauricio Dominguez

Good to have you here =)

Many thanks!

Hi every1! 👋🏼👋🏼

Hi there!

Hey everyone, give a warm welcome to our newest members!
- @reegnz
- @Stevie
- @Doyeon Hwang
- @James Worville
- @Leandro Lamaison

Good to have you here =)

Many thanks

Hey everyone, give a warm welcome to our newest members!
- @Phil Chen
- @Lakshay Nasa
- @Iulian Diminenco
- @Baldwin Sung

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @SUJIT SAHU

Good to have you here =)

I’m new to DevOps, I’m thinking CI/CD for my projects. I don’t trust GitHub Actions for security reasons, as to give you direct access to my production servers. Instead, I’m considering using a dedicated intermediate deployment server for added security. This server would handle the connection to my production servers, instead of GitHub. so isolate my production servers from gihutb actions, is a good practice? or could you give me a better suggestion?

Hey everyone, give a warm welcome to our newest members!
- @Danielsham

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Dhinesh
- @Kopal Anand
- @Vinoth Gulapala

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Alexandra Samohina
- @Gaurav Kardam
- @nvb

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @John Oberly
- @Sairam Madichetty
- @Yurii Kuznetsov
- @Chidubem Chinwuba

Good to have you here =)

Hey everyone - apologies if this is the wrong channel for this - happy to move if this is the case.
I'm at a new org and I'm on the verge of migrating everything away from the current deployed setup (all AWS console) into IaC. I've got good experience with Terraform (mainly vanilla and some Terragrunt) but I want to get my head around a proper structure and some strong conventions. I've looked into the CloudPosse offerings, but think it's likely too much for my organisation to go for.
The things I'm looking for are:
• Ability to instrument and deploy multiple AWS accounts and integrate them with SSO
• The ability to eventually manage the entire deployment of IaC from a pipeline - exclusively
• Implement my own modules (non-CloudPosse provided) ones with relative ease.
Has anyone gone fully "in" on the Atmos toolchain and associated structure? Would you be happy to briefly explain your setup?
And if you are using Atmos / SweetOps how are you finding it - assuming you are just using the open-source parts of the setup.

For some context - I am the sole engineer to manage infrastructure (amongst other responsibilities) - so I'd like to make the right choice at the start, as I don't want to spend a long time implementing things that already have had time and energy put into them. The alternatives for me are things like Terragrunt - so if you choose Atmos over TG - would be keen to hear your thoughts!

Hey everyone, give a warm welcome to our newest members!
- @Amit Sharma
- @GR
- @Radu Grecu
- @Tristan Murray
- @Jacob Larvie
- @m4jk3l
- @Michael Wong
- @David Gibbons
- @Manish Pandey
- @Jonas

Good to have you here =)

All,
I have a volume attached to machine A, now I need to mount the volume to machineB, but I am unable to access the data, as I checked the owner permissions got changed.
when I investigate, the same user has 1002:1002 in machine A, but in machineB, that uid:gid is changed to someother user which is why I'm unable to access the data.
Is there a way to script it to assign the uid:gid to that user default?? is it a good approach??

Hey everyone, give a warm welcome to our newest members!
- @Trapecija
- @p99
- @Sebastian Birsa

Good to have you here =)

Does Cloud Posse have anything specific to Bitwarden/Vaultwarden deployment on EKS, or anything for it on the road map?

Hey everyone, give a warm welcome to our newest members!
- @Joe

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Gihana innocent
- @Gary
- @Emmanuel
- @Dmitrii
- @Mavel KANDEL
- @saigopi.2011

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Shiva Panda
- @Simon Hofmann
- @Nikhil Agarwal

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Austin Maddox
- @Jake Levine
- @Deyan Peev

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Patrick Cheng
- @Jon Ryser
- @RickA
- @Doug Bergh
- @Quinn Thomson
- @Muhammed Tausif

Good to have you here =)

Thank you 🙂

Hey everyone, give a warm welcome to our newest members!
- @Adam Markovski
- @Agni
- @Jeff Tribble

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Peyton
- @Adeola Yomade

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Adetokunbo Ige
- @jay
- @Rahul Reddy Anugu

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Gnanesh
- @Rafal Rabenda
- @Oleksandr Polishchuk

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Moroianu Adrian
- @Ashish Pawar

Good to have you here =)

Everyone knows OWASP has a convenient "top 10" list of potential security risks, e.g. SQL Injection
Turns out they have other lists too, like Risks for LLM!s Here's the first three https://owasp.org/www-project-top-10-for-large-language-model-applications/

LLM01: Prompt Injection

Manipulating LLMs via crafted inputs can lead to unauthorized access, data breaches, and compromised decision-making.

LLM02: Insecure Output Handling

Neglecting to validate LLM outputs may lead to downstream security exploits, including code execution that compromises systems and exposes data.

LLM03: Training Data Poisoning

Tampered training data can impair LLM models leading to responses that may compromise security, accuracy, or ethical behavior.

They also have risks for APIs, and also an entire site of cheat sheets: https://cheatsheetseries.owasp.org/index.html

Hey everyone, give a warm welcome to our newest members!
- @shmileee
- @Hassan Shehzad
- @Mukhtar Yusuf
- @Omar Shams

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Alex Shea
- @Rustam
- @manee kantta
- @Kimberly Cottrell
- @Conor Maguire
- @Julien Bouchery
- @Akın Tekeoğlu
- @marksie1988

Good to have you here =)

Hi everyone ! 👋

https://github.com/jetporch/jetporch was launched earlier today

Interesting, from what I can tell it's basically an ansible clone+improvements in rust. I've been working on ansible stuff lately and have thought it'd be really nice to have a single-binary version of ansible to simplify things. Considering it's written by the same person who wrote Ansible in the first place I'm a little surprised and disappointed they didn't make it 100% compatible with existing playbooks/tasks. That would have been really nice.

Hey everyone, give a warm welcome to our newest members!
- @Jiri Vorel
- @Alexandar Alexandrov
- @Charles Ibrahim
- @vamshi
- @KSaff
- @Monica Hart
- @Woody Pearson

Good to have you here =)

Hey everyone, give a warm welcome to our newest members!
- @Cristian Sierra
- @Venkat Ravuri

Good to have you here =)