#office-hours - July 2022

@here office hours is starting in 30 minutes! Remember to post your questions here.

Andy Miguel (Cloud Posse) has joined Public "Office Hours"

Brian Pauley has joined Public "Office Hours"

Ayobami Bamigboye has joined Public "Office Hours"

Oskar Maria Grande has joined Public "Office Hours"

Allan Mohr has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Isaac M has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Luis Masaya has joined Public "Office Hours"

Julian Diaz has joined Public "Office Hours"

Sean O'Dell has joined Public "Office Hours"

Charles Smith has joined Public "Office Hours"

Michael Williams has joined Public "Office Hours"

Alexander Goya has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

Alexandr Vorona has joined Public "Office Hours"

Marc Tamsky has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

Amer Zec has joined Public "Office Hours"

Arthur Dent has joined Public "Office Hours"

Olad Oke has joined Public "Office Hours"

Bob K has joined Public "Office Hours"

Charles Randall has joined Public "Office Hours"

Marc Tamsky has joined Public "Office Hours"

emem emem has joined Public "Office Hours"

Imran Hussian has joined Public "Office Hours"

Mohammed Yahya has joined Public "Office Hours"

Sherif Abdel-Naby has joined Public "Office Hours"

Roy Sprague has joined Public "Office Hours"

links from today's session
• https://github.com/infracost/vscode-infracost
• https://github.com/bridgecrewio/AirIAM
• https://www.cloudvulndb.org/
• https://aws.amazon.com/about-aws/whats-new/2022/06/bare-metal-support-amazon-eks-anywhere/
• https://aws.amazon.com/about-aws/whats-new/2022/06/aws-sam-accelerate-test-code-against-cloud/
• https://github.blog/2022-06-09-introducing-achievements-recognizing-the-many-stages-of-a-developers-coding-journey/
• https://github.com/hashicorp/terraform/releases/tag/v1.3.0-alpha20220706
• https://aws.amazon.com/about-aws/whats-new/2022/07/aws-identity-access-management-iam-roles-anywhere-workloads-outside-aws/

Santiago Campuzano has joined Public "Office Hours"

https://cloudposse.com/faqs/why-do-you-recommend-spacelift/#:~:text=With%20Spacelift%2C%20you%20have%20an,tech%20debt%20across%20all%20environments.&text=Drift%20Detection%20runs%20on%20a,what's%20failing%2C%20and%20what's%20queued.

atlantis VS spacelift ? https://docs.spacelift.io/concepts/run/pull-request-comments?utm_medium=email&_hsmi=218766087&_hsenc=p2ANqtz-92tvZKFvsWE8Rousp89MJrfF9bxzPMb5OlHL3uuVnftiZESd0GdDXRrI-TyaeN6ZiCtwes1EtaVRyzHtLGKiuAVlilAw&utm_content=218750146&utm_source=hs_email#pull-request-comment-driven-actions

interesting

https://github.com/danielfoehrKn/kubeswitch

^ If you find yourself dealing with multiple clusters, and many namespaces, then consider using kubeswitch

@here office hours is starting in 30 minutes! Remember to post your questions here.

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Oscar Blanco has joined Public "Office Hours"

Roy Sprague has joined Public "Office Hours"

Denis Simonovski has joined Public "Office Hours"

venkata mutyala has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Marcos Soutullo has joined Public "Office Hours"

Andy Miguel (Cloud Posse) has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Uwaila Adams has joined Public "Office Hours"

Alexandr Vorona has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Luis Masaya has joined Public "Office Hours"

Andy Roth has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

Harold Sphinx has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Bob K has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Yusuf has joined Public "Office Hours"

Brian Choate has joined Public "Office Hours"

Babu Balagani has joined Public "Office Hours"

Marcos Soutullo has joined Public "Office Hours"

tamsky has joined Public "Office Hours"

links from today's session
• https://aws.amazon.com/about-aws/whats-new/2022/07/amazon-guardduty-machine-learning-detect-malicious-access-data-s3/
• https://github.com/Pluralith/pluralith-cli
• https://www.hashicorp.com/blog/announcing-launch-and-free-public-beta-of-hcp-boundary
• https://aws.amazon.com/about-aws/whats-new/2022/07/aws-cloudformation-stacksets-support-account-level-targeting-organizational-unit/
• https://github.com/cloudposse/terraform-aws-security-group/releases/tag/2.0.0-rc1
• https://aws.amazon.com/about-aws/whats-new/2022/07/general-availability-aws-cloud-wan/

Marcos Soutullo has joined Public "Office Hours"

Amer Zec has joined Public "Office Hours"

Patrick McDonald has joined Public "Office Hours"

Sherif Abdel-Naby has joined Public "Office Hours"

Amer Zec has joined Public "Office Hours"

Paul Bullock has joined Public "Office Hours"

Asha Duri has joined Public "Office Hours"

Kayode Adeniyi has joined Public "Office Hours"

Basilis Markopoulos has joined Public "Office Hours"

Maybe can be a discussion for another Office Hours, but I now hate Helm Charts :'D

Helm Charts are "Shifting Right" instead of left. Our company Helm Charts for our apps (not third party apps) is now very complicated that only a "Platform / DevOps" guy can "debug" them.

We end up needing to parameterize everything, and Go Templates is basically "not enough" for all the logic we need. 😄
Curious to know your thoughts, do you feel the same way ?

https://kpt.dev/
^ Is interesting tho

I think @Sherif asked in the chat if anyone uses Crossplane. @Matt Gowie has been kicking the tires a lot on it lately

Speaking of AWS SSO ^^ — If we’re lacking topics for today, I would be interested to hear how folks are finding their implementations of AWS SSO w/ SAML vs IAM SAML. I’ve worked with AWS SSO but it was before it had Terraform support and even now that it does have Terraform support, it seems limited. I’d like to hear about any pitfalls, what can and can’t be automated today, and what to watch out for.

@here office hours is starting in 30 minutes! Remember to post your questions here.

I'm having some technical difficulties (network died) hoping to be back on shortly

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Allan Mohr has joined Public "Office Hours"

venkata mutyala has joined Public "Office Hours"

Yusuf has joined Public "Office Hours"

Isaac M has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Kayode Adeniyi has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

Jose Figueredo has joined Public "Office Hours"

Mohammed Yahya has joined Public "Office Hours"

Hari Prasad Venkatanarayana has joined Public "Office Hours"

Alexandr Vorona has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Bridget Royer has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

Amaan Khan has joined Public "Office Hours"

Adam Buggia has joined Public "Office Hours"

Amer Zec has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Ingvar Örn Ólason has joined Public "Office Hours"

Andrew Vitko has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

Sherif Abdel-Naby has joined Public "Office Hours"

Yusuf has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Christopher Pieper has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

A B has joined Public "Office Hours"

Santiago Campuzano has joined Public "Office Hours"

I have a question about best practice when using an API Gateway which handles authorization token validation.

Roy Sprague has joined Public "Office Hours"

Maged Abdelmoeti has joined Public "Office Hours"

PePe Amengual has joined Public "Office Hours"

Anyone here have a preferred helm chart they would recommend for deploying prometheus + grafana?

Adding another BeyondCorp tool question to the seemingly never ending pile: Has anyone used Cloudflare’s Tunnel + Access products? A prospect just brought it up and I’d be interested to hear if anyone has adopted it and what your experience was.

I'm working on pulling out my K8s workload deploys to a non-TF-based solution. What solutions are you using? I've come up with paths to using Flux, Github Actions, and Spacelift. I'd like to hear about some approaches you've taken, pros/cons, etc.

@here office hours is starting in 30 minutes! Remember to post your questions here.

Great questions today!

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Jeremy Bouse has joined Public "Office Hours"

Allan Mohr has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Alex Atkinson has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Linda Pham (Cloud Posse) has joined Public "Office Hours"

Dimitris Kargatzis has joined Public "Office Hours"

Robert Jordan has joined Public "Office Hours"

Christopher Pieper has joined Public "Office Hours"

Luis Masaya has joined Public "Office Hours"

Qazi Hasan has joined Public "Office Hours"

David Hawthorne has joined Public "Office Hours"

Charles Smith has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Allan Swanepoel has joined Public "Office Hours"

Andrew Hall has joined Public "Office Hours"

Ben Smith (Cloud Posse) has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

Rupinder Matharoo has joined Public "Office Hours"

Roy Sprague has joined Public "Office Hours"

Dave Gregory has joined Public "Office Hours"

Tim Gourley has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

Alexandr Vorona has joined Public "Office Hours"

Ozzy has joined Public "Office Hours"

Michael Williams has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Jim Park has joined Public "Office Hours"

Ian Bartholomew has joined Public "Office Hours"

Oskar Maria Grande has joined Public "Office Hours"

A few weeks ago (been looking through old vids but can't find it) there was some talk about Control Tower and whether it could be fully Terraformed. IIRC CloudPosse don't use Control Tower because it can't. What do you do instead? Just about to embark on building a fresh org to migrate old accounts into and was planning to use ATF to vend new accounts, but the lack of Terraformability put me off and now I can't really see what I'm getting from Control Tower.

Ozzy has joined Public "Office Hours"

Gerard Ceraso has joined Public "Office Hours"

Sherif Abdel-Naby has joined Public "Office Hours"

Patrick McDonald has joined Public "Office Hours"

Dave Gregory has joined Public "Office Hours"

Marc Tamsky has joined Public "Office Hours"

links from today's session:
• https://aws.amazon.com/about-aws/whats-new/2022/07/aws-single-sign-on-aws-sso-now-aws-iam-identity-center/
• https://aws.amazon.com/about-aws/whats-new/2022/07/programmatically-manage-primary-contact-information-aws-accounts/
• https://github.com/valentindeaconu/terralist
• https://medium.com/@elliotgraebert/four-great-alternatives-to-hashicorps-terraform-cloud-6e0a3a0a5482
• https://github.com/awslabs/ssosync

just a heads up for folks who might consider using ssosync - i'm using it but hit https://github.com/awslabs/ssosync/issues/81 and so i'm now using the fork as mentioned in one of the comments.

Hey there. I just ear the concern about multiple MFAs for AWS root accounts. You can use vault, 1pw or authy. You can also just share the mfa seed key with multiple people. Just share the qr code (or qr code content) and ask people to add it to their authenticator. It's not centralized, so not shared wich means you'll have to re-share the new key on a event of a renew for example. it's not ideal, but possible.

Came across this build framework today. The config looks like a cocktail made with one part Dockerfile and one part Makefile.
https://earthly.dev/

I'm curious if anyone has tried earthly and what the results were.