#office-hours - August 2020

@here office hours is starting in 30 minutes! Remember to post your questions here.

need to know about future with k3s

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

sahil kamboj has joined Public "Office Hours"

Andrew Roth has joined Public "Office Hours"

Nathaniel Alconcel has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Evgenii Prokofev has joined Public "Office Hours"

Eddie Wizelman has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Tyler Stilwagen has joined Public "Office Hours"

Robert Horrox has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Brian Tai has joined Public "Office Hours"

Marcin Branski has joined Public "Office Hours"

Nigel Kirby has joined Public "Office Hours"

• Terraform AWS 3.0 Provider
https://www.hashicorp.com/blog/announcing-v3-0-of-the-terraform-aws-provider/
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/guides/version-3-upgrade#region-attribute-is-now-read-only
• GitHub Actions Improve Workflows for Public Repos
https://github.blog/2020-08-03-github-actions-improvements-for-fork-and-pull-request-workflows/
• Datadog Operator for Kubernetes (finally!)
https://www.fairwinds.com/blog/introducing-astro-managing-monitors-in-a-dynamic-environment-0
• Synthetic Monitoring Agent for Kubernetes
https://github.com/Comcast/kuberhealthy
• Best Way to Support AWS Partitions (e.g. GovCloud, China, etc)
https://github.com/cloudposse/docs/issues/492 (Example implementation)

Gabriel Tam has joined Public "Office Hours"

Adam Crown has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

rb rb has joined Public "Office Hours"

rb rb has joined Public "Office Hours"

Adam Watson has joined Public "Office Hours"

Neil Gealy has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Scott Rogers has joined Public "Office Hours"

Andrey Nazarov has joined Public "Office Hours"

Scott Rogers has joined Public "Office Hours"

Adam Blackwell has joined Public "Office Hours"

Babajide Hassan has joined Public "Office Hours"

PePe Amengual has joined Public "Office Hours"

Mailing list vote for k3s to CNCF: https://lists.cncf.io/g/cncf-toc/topic/vote_k3s_for_sandbox/75908946?p=,,,20,0,0,0::recentpostdate%2Fsticky,,,20,2,0,75908946

Andrew Roth has joined Public "Office Hours"

Adam Blackwell has joined Public "Office Hours"

https://github.com/reviewdog/action-tflint 🙂

Btw, @Erik Osterman (Cloud Posse) am I getting you right that you stopped using Atlantis?

Cool looking OPA solution: https://github.com/fugue/regula

Maybe worth a try to test terraform with python?

https://github.com/GoogleCloudPlatform/terraform-python-testing-helper#example-usage
This example looks really readable comparing to terratest

Zoom chat ☝️

(sorry everyone - I tend to not look at the zoom chat during the call)

👉️ New Zoom Recording from our Office Hours session on 2020-08-05 is now available.

@here office hours is starting in 30 minutes! Remember to post your questions here.

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Eddie Wizelman has joined Public "Office Hours"

venkata has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Andrew Roth has joined Public "Office Hours"

There was a great discussion last time without too many questions, but if we’re looking for topics: it’d be great to chat through the solutions folks are using to solve the problem of disjointed terraform workflows.

For example, I’ve got a project where we’re using RDS with a bunch of databases. The RDS instance is of course in private subnets and access is only grants to particular application SGs and a Bastion SG. We want to use the Postgres Terraform provider to provide bootstrapping of the databases and its extensions, roles, etc. Now the problem is that the Postgres provider can’t connect to RDS without an SSH tunnel through our Bastion instance. So my solution was to carve up our project into multiple terraform projects / directories and then when creating a new workspace / environment the flow is to:

1. terraform apply the AWS infra in a particular directory — Creates RDS, Bastion, etc etc etc
2. Create the ssh tunnel to the RDS instance through the Bastion instance now that it’s up
3. Go to the postgres terraform directory and then terraform apply there.
This works, but I of course wonder if there is a better way and it’d be great to hear how others are tackling this type of thing!

Matt Gowie has joined Public "Office Hours"

Victor Fondevilla has joined Public "Office Hours"

Nathaniel Alconcel has joined Public "Office Hours"

Michael Holt has joined Public "Office Hours"

Torsten Trzeciak has joined Public "Office Hours"

Michael Martin has joined Public "Office Hours"

Marcos Soutullo Rodriguez has joined Public "Office Hours"

Robert Jackson has joined Public "Office Hours"

Brian Tai has joined Public "Office Hours"

Gabriel Tam has joined Public "Office Hours"

Geoff Weinhold has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Dan Meyers has joined Public "Office Hours"

Anton Shakh has joined Public "Office Hours"

Adam Blackwell has joined Public "Office Hours"

Adam Blackwell has joined Public "Office Hours"

Adam Watson has joined Public "Office Hours"

Anton Shakh has joined Public "Office Hours"

pepe amengual has joined Public "Office Hours"

How a PR looks

^from some experiments

https://octobox.io for GitHub notification hell

Gabriel Tam has joined Public "Office Hours"

https://github.com/aws/aws-controllers-k8s and https://github.com/awslabs/aws-servicebroker

Hey all - I’m trying to put together a career journey for SRE’s in our company. Does anyone have any examples? Whether public or you’d be willing to share?

Vicken Simonian has joined Public "Office Hours"

👉️ New Zoom Recording from our Office Hours session on 2020-08-12 is now available.

it's insecure to set secrets via environment variables, so I've read, because they can be accessed by any user on the OS. So, it would make sense to inject secrets at image build time (assuming the use of containers) by the CI runner. Any thoughts on this?

https://github.com/aws/containers-roadmap/issues/585 some update for office hours

Update your nodes just like you update your deployments(rolling update) + custom eks ami using launch templates also now can change instance type within worker node group specs (ie no need to create new node group)

Tag ec2 instances just like you tag worker node groups (finally we will have eks nodes with Name tag on AWS Console)

Still no Spot support 😞 But it's on the way!

Aws wont want us to use spot ;)

@here office hours is starting in 30 minutes! Remember to post your questions here.

Question : Setting = No IAM authentication, Group limit on IAM is a problem, No SSO and all manually setup in a separated aws account Question: How do you go about managing all users, groups and adding SSO and MFA with assume role using TF or other tool ( AWS Organizations, Control Tower etc)( we have Keycloak and google)

Question for today although I'm not sure I can attend live (are these recorded?): is there a way of allowing an AWS lambda to http a service running in same VPC behind an AWS classic LB that filters on IP addresses? In other words I have a classic LB that I want to configure to allow incoming traffic only from corp network (I have done that part), or from the Lambdas. I'm thinking that it cannot be done robustly (I would have to find WAN IP of the lambdas), instead I need to create internal LB that the Lambda will target. Any insight would be much appreciated!

M Hunter has joined Public "Office Hours"

Jose Netto has joined Public "Office Hours"

Andrew Roth has joined Public "Office Hours"

venkata has joined Public "Office Hours"

Rob Horrox has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Alex Vorona has joined Public "Office Hours"

Anton Shakh has joined Public "Office Hours"

Dan Meyers has joined Public "Office Hours"

Christopher Picht has joined Public "Office Hours"

Anton Shakh has joined Public "Office Hours"

Andrey Nazarov has joined Public "Office Hours"

Anton Shakh has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

Gabriel Tam has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Igor Bronovskyi has joined Public "Office Hours"

Pedro Torres has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Kareem Shahin has joined Public "Office Hours"

pepe amengual has joined Public "Office Hours"

Babajide Hassan has joined Public "Office Hours"

Eddie Wizelman has joined Public "Office Hours"

Nigel Kirby has joined Public "Office Hours"

Blaisep has joined Public "Office Hours"

Robert Jackson has joined Public "Office Hours"

Adam Watson has joined Public "Office Hours"

Rahul has joined Public "Office Hours"

Drew Davies has joined Public "Office Hours"

sri has joined Public "Office Hours"

sri has joined Public "Office Hours"

O A has joined Public "Office Hours"

Shoutout to https://github.com/haya14busa/action-bumpr which also does automatic releases 🙂 I really like that action

Mike Drummond has joined Public "Office Hours"

For automatic comment /test all : https://github.com/peter-evans/create-or-update-comment or Mergify / Pullapprove ( they both have options to post comments when something happens IIRC)

Ayrton Araújo has joined Public "Office Hours"

i should have asked this during office hours. doh.

https://sweetops.slack.com/archives/CCT1E7JJY/p1597864789200900

unfortunately i cant attend today but food for thought for the next one 😄

👉️ New Zoom Recording from our Office Hours session on 2020-08-19 is now available.

Kubecon sessions should be available on YouTube in early September they say.

@loren has joined the channel

@here office hours is starting in 30 minutes! Remember to post your questions here.

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Kareem Shahin has joined Public "Office Hours"

Michael Holt has joined Public "Office Hours"

Eddie Wizelman has joined Public "Office Hours"

@here our devops #office-hours are starting now! join us on zoom to talk shop
url: cloudposse.zoom.us/j/508587304
password: sweetops

Sheldon Hull has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Alex Vorona has joined Public "Office Hours"

Andrey Nazarov has joined Public "Office Hours"

Ian Bartholomew has joined Public "Office Hours"

sri has joined Public "Office Hours"

Scott Rogers has joined Public "Office Hours"

Perumal Varadharajulu has joined Public "Office Hours"

Robert Horrox has joined Public "Office Hours"

Nick James has joined Public "Office Hours"

Drew Davies has joined Public "Office Hours"

nata lie has joined Public "Office Hours"

Another GUI for K8s
https://kui.tools/

We’ve used Lens a bit. It was ok, but sloooow

Anton Shakh has joined Public "Office Hours"

Victor Avila has joined Public "Office Hours"

Andrew Elkins has joined Public "Office Hours"

Alex Siegman has joined Public "Office Hours"

Victor Ma has joined Public "Office Hours"

Jawwad Yunus has joined Public "Office Hours"

Wanderley Teixeira has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Robert Horrox has joined Public "Office Hours"

https://aws.amazon.com/about-aws/whats-new/2020/08/amazon-eks-now-supports-udp-load-balancing-with-network-load-balancer/ we get UDP with load balancers in 2020 🙂

Christopher Picht has joined Public "Office Hours"

Adedayo Akinpelu has joined Public "Office Hours"

https://blog.intive-fdv.com/a-comparison-between-packer-and-ecs-image-builder/#:~:text=EC2%20Image%20Builder%20is%20relatively,them%20when%20creating%20different%20images.

Adam Crown has joined Public "Office Hours"

If we have time I want a 101 of your future go based task project framework you are working on. a teaser? 🙂

Actually it’s sad to see that there is no future for Kontena. There were cool.

Eric Berg has joined Public "Office Hours"

Afaik Kontena tools were written in Ruby;)

Not Lens though)

Somebody might find this useful
https://cuelang.org/

Oh, so maybe go-releaser for your tasks and you’d have a single binary easily for all project. Super interesting.

raphael francis has joined Public "Office Hours"

MT has joined Public "Office Hours"

Great teaser. excited. As long as I can figure out how not to start from scratch and use perhaps some of my powershell 7 stuff, i’m going to try it!

raphael francis has joined Public "Office Hours"

Cool! That’s what I wanted to ask. How do you bootstrap things at Cloud Posse))

Had to hop off. Couldn’t find the ECS thread about setting env vars but outside of pulling them down from SSM programmatically in the app’s entrypoint you can directly reference them in SSM in the task definition

I use InvokeBuild (Cross platform, and like Make on steroids), but the caveat is that you need apt install powershell for example.
A precompiled binary provides consistency in multiple environments + also be able to run the same task in a build with no rework.

if this is too early to adopt and you have flexibility for considering powershell (object based vs text based is the main difference) then InvokeBuild is also great

🔽 general info on the Visual Studio Code “Task Explorer” i mentioned. Find it super helpful to ease of use. Wasn’t talking about a language server, but making dev experience super smooth to execute the same thing you run in build for example.

This is just a json “runner” built into vscode that calls a command. Would love to see a variant2 runner added in future.
Play button to run, grouping of tasks and more.

Keep up the great work

👉️ New Zoom Recording from our Office Hours session on 2020-08-26 is now available.

For the DockerHub new limit thingie: https://twitter.com/pgarbe/status/1298280715575087108

Hello guys,
I'm trying to install lens in centos 7.6(64-bit) using snap (https://snapcraft.io/install/kontena-lens/centos) and installation is successful, but when i run kontena-lens it gives below
/snap/kontena-lens/110/kontena-lens: error while loading shared libraries: libgtk-3.so.0: cannot open shared object file: No such file or directory
sudo yum provides libgtk-3.so.0
Last metadata expiration check: 0:40:31 ago on Fri 28 Aug 2020 06:00:51 AM UTC.
gtk3-3.22.30-3.el8.i686 : GTK+ graphical user interface library
Repo : @System
Matched from:
Provide : libgtk-3.so.0

gtk3-3.22.30-3.el8.i686 : GTK+ graphical user interface library
Repo : rhel-8-appstream-rhui-rpms
Matched from:
Provide : libgtk-3.so.0

sudo yum install gtk3-3.22.30-3.el8.i686 -y

after installing all dependency packages still getting same error any suggestion on this ?