#office-hours - September 2022

Anyone here tried this yet? https://metacontroller.github.io/metacontroller/

https://github.blog/2022-09-01-github-actions-introducing-the-new-larger-github-hosted-runners-beta/ Finally it’s here. But still arm64 for linux still missing

Question for next time: anybody using Spacelift with CloudFormation? If yes, what was your experience?

Question:
You (Eric) mentioned AWS IC (SSO) and federation as an approach to fine grained, cross-account permission/access management.
I did not quite get it 😄

Like with IAM in the past or present, I know of users, groups, roles.

• Users belong to groups,
• Groups have permissions enforcing MFA and granting cross-account access (assume role), and the
• Other accounts have appropriate roles which users can assume based on the group they are in.
This also worked nicely on the CLI. You configure .aws/credentials and .aws/config with creds and profiles once
and then the CLI daily flow is:

• MFA once within the CLI and without the browser (8h or 12h duration)
• Switching the value of AWS_PROFILE (allowing for different terminal windows having different roles/accounts)
How does your flow on the CLI look (also scripting)?
What is the approach behind it?

Discussion topic for today: Anyone using ArgoCD-Autopilot? We were evaluating it at Masterpoint and I believe our intuition is to go in another direction to bootstrap clusters with Argo, but I would still be interested to hear others experience and if they’d recommend for or against.

https://argocd-autopilot.readthedocs.io/

@here office hours is starting in 30 minutes! Remember to post your questions here.

Ben Smith (Cloud Posse) has joined Public "Office Hours"

Allan Swanepoel has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Linda Pham (Cloud Posse) has joined Public "Office Hours"

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Isaac M has joined Public "Office Hours"

Antonio Rodriguez has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

venkata mutyala has joined Public "Office Hours"

Mauricio Wyler has joined Public "Office Hours"

Charles Smith has joined Public "Office Hours"

Patrick McDonald has joined Public "Office Hours"

Roy Sprague has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

Ayobami Bamigboye has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Mike Martin has joined Public "Office Hours"

Alexandr Vorona has joined Public "Office Hours"

Allen Lyons has joined Public "Office Hours"

Devendra Yadav has joined Public "Office Hours"

Jonathan Poczatek has joined Public "Office Hours"

Gabriel has joined Public "Office Hours"

Hakan Kaya has joined Public "Office Hours"

Bhushan Uparkar has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

Jim Park has joined Public "Office Hours"

Marc Tamsky has joined Public "Office Hours"

Bridget Royer has joined Public "Office Hours"

Antonio Rodriguez has joined Public "Office Hours"

Sam Caneer has joined Public "Office Hours"

Steven Vargas has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Vincent Werner has joined Public "Office Hours"

Vincent Werner has joined Public "Office Hours"

Question: has anyone tried zeet.co? Another multi-cloud build tool new kid on the block.

Fun note for MFA. Now I'd think twice to see if this even makes sense to do, but I've seen someone use oauthtool in github actions to answer a MFA.

Links from today's call:
https://hashiconf.com/global/
https://github.com/cloudposse/atmos/releases/tag/v1.5.0
https://aws.amazon.com/about-aws/whats-new/2022/09/automate-aws-control-tower-guardrail-management-apis/
https://aws.amazon.com/about-aws/whats-new/2022/08/workload-consolidation-karpenter/

Question for OH: Anybody upgraded EKS to 1.23? How did it go? Any issues?

I been missing recent Office Hours but I listen to the YT Videos. You chatted about managing AWS Config files last week, I been using https://granted.dev and It is very gooood.

Main highlights:

1. Auto Populated SSO Roles
2. Open AWS Console in Separate Chrome Profiles

FYI: I won’t make it to the call today 😞 Sorry!

@here office hours is starting in 30 minutes! Remember to post your questions here.

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Isaac M has joined Public "Office Hours"

Linda Pham (Cloud Posse) has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Allan Mohr has joined Public "Office Hours"

Patrick McDonald has joined Public "Office Hours"

venkata mutyala has joined Public "Office Hours"

Gabriel has joined Public "Office Hours"

Antonio Rodriguez has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Lucas Andrade has joined Public "Office Hours"

Charles Smith has joined Public "Office Hours"

Hm… I’m getting the following when I hit the meeting link today —

Matt Gowie has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

Amaan Khan has joined Public "Office Hours"

question i have if time: secrets are a pain to delete and recreate (say you delete a stack that has AWS secrets, and then recreate it and the secrets have same names), any tricks?

Ben Smith (Cloud Posse) has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

venkata mutyala has joined Public "Office Hours"

Mohammed Yahya has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

Andrew Vitko has joined Public "Office Hours"

Bridget Royer has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Roy Sprague has joined Public "Office Hours"

How do you handle updating EKS clusters? We use terraform. Is it safer to recreate everything inside the cluster in the updated version and use some kind of DNS switching? Or just update the version number in the same cluster in terraform. What do people generally do?

Maged Abdelmoeti has joined Public "Office Hours"

Life Lofranco has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Links from today's call:
https://hashiconf.com/global/
https://www.legitsecurity.com/blog/github-privilege-escalation-vulnerability-0
https://github.com/contentful-labs/terraform-diff
www.github.com/mineiros-io/terramate
https://github.com/cloudposse/atmos
https://github.com/cloudposse/atmos/pull/200
https://www.hashicorp.com/blog/terraform-partner-integration-program-changes
https://granted.dev/
www.github.com/mineiros-io/terramate
https://www.hashicorp.com/blog/drift-detection-for-terraform-cloud-is-now-generally-available
registry.terraform.io/providers/hashicorp/asws/latest/docs/resources/secretsmanager_secret
github.com/cloudposse/terraform-provider-awsutils
aws.amazon.com/blogs/containers/aws-controllers-for-kubernetes-ack
aws-controllers-k8s.github.io/community/docs/community/services/#amazon-iam
https://doc.crds.dev/github.com/crossplane-contrib/provider-jet-aws

@Erik Osterman (Cloud Posse) - I couldnt make the office hours today - but wanted to ask if youhave, ot thought of doing demos on some of your tools, such as https://github.com/cloudposse/geodesic/ and https://github.com/cloudposse/atmos ?

Yo! 👋🏻
Where's this week’s Office Hour recording 🤔

@here office hours is starting in 30 minutes! Remember to post your questions here.

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Gabriel has joined Public "Office Hours"

Brian Choate has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Jonathan Poczatek has joined Public "Office Hours"

Linda Pham (Cloud Posse) has joined Public "Office Hours"

Yusuf has joined Public "Office Hours"

Charles Smith has joined Public "Office Hours"

Vinko Vrsalovic has joined Public "Office Hours"

David Subar has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Andy Roth has joined Public "Office Hours"

Henry Ngo has joined Public "Office Hours"

Josh has joined Public "Office Hours"

Veronika Gnilitska has joined Public "Office Hours"

Steven Vargas has joined Public "Office Hours"

Chris Dobbyn has joined Public "Office Hours"

Isaac M has joined Public "Office Hours"

Paul Bullock has joined Public "Office Hours"

Oskar Maria Grande has joined Public "Office Hours"

Harold Sphinx has joined Public "Office Hours"

Mohammed Yahya has joined Public "Office Hours"

Dave Gregory has joined Public "Office Hours"

Guilherme Borges has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

Alexandr Vorona has joined Public "Office Hours"

Alex Siegman has joined Public "Office Hours"

Allan Swanepoel has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

Harold Sphinx has joined Public "Office Hours"

Marc Tamsky has joined Public "Office Hours"

Harold Sphinx has joined Public "Office Hours"

Harold Sphinx has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Andy Roth has joined Public "Office Hours"

Dave Gregory has joined Public "Office Hours"

PePe Amengual has joined Public "Office Hours"

Dave Gregory has joined Public "Office Hours"

Amaan Khan has joined Public "Office Hours"

Dave Gregory has joined Public "Office Hours"

Links from today's call:
https://hashiconf.com/global/
https://github.com/hashicorp/terraform/releases/tag/v1.3.0
https://github.com/ahmetb/kubectl-tree
https://www.macchaffee.com/blog/2022/k8s-under-documented-security-tips/
https://github.com/spacelift-io/prometheus-exporter
https://github.com/hashicorp/terraform/issues?q=is%3Aissue+is%3Aclosed+archived%3Afalse+reason%3A%22not+planned%22
https://github.com/padok-team/tfautomv
https://github.com/verifa/terraplate
https://github.com/dineshba/tf-summarize
https://docs.aws.amazon.com/securityhub/latest/userguide/standards-fsbp-config-resources.html
https://aws.amazon.com/about-aws/whats-new/2022/09/aws-fargate-increases-compute-memory-resource-configurations-4x/

@Matt Calhoun @Vlad Ionescu (he/him) @muhaha @Alanis Swanepoel @Ralf Pieper thanks for all your great insights today!

@here office hours is starting in 30 minutes! Remember to post your questions here.

was up for last week - but could we get a demo of geodesic and atmos at some point perhaps?

i understand theres a lot to cover from the normal news

also - aws is having a bad day - https://health.aws.amazon.com/health/status

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Johnmary Odenigbo has joined Public "Office Hours"

Jared Richards has joined Public "Office Hours"

Alex Atkinson has joined Public "Office Hours"

Assistant Cloud Posse has joined Public "Office Hours"

Alex Atkinson has joined Public "Office Hours"

Alex Atkinson has joined Public "Office Hours"

Alex Atkinson has joined Public "Office Hours"

Yusuf has joined Public "Office Hours"

Max Lobur has joined Public "Office Hours"

Gurvinder S. has joined Public "Office Hours"

Isaac M has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Vincent Werner has joined Public "Office Hours"

Alex Atkinson has joined Public "Office Hours"

Max Lobur has joined Public "Office Hours"

Madhusudan Satapathy has joined Public "Office Hours"

Andrew Vitko has joined Public "Office Hours"

Jose Figueredo has joined Public "Office Hours"

Rahul has joined Public "Office Hours"

Jonathan Poczatek has joined Public "Office Hours"

venkata mutyala has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

Ray Botha has joined Public "Office Hours"

Ben Smith (Cloud Posse) has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

Tim Gourley has joined Public "Office Hours"

Dave Gregory has joined Public "Office Hours"

Charles Smith has joined Public "Office Hours"

Allan Swanepoel has joined Public "Office Hours"

Alex Atkinson has joined Public "Office Hours"

Steven Vargas has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Max Lobur has joined Public "Office Hours"

@Erik Osterman (Cloud Posse) - https://www.complianceforge.com/secure-controls-framework-scf-download/

Links from today's call:
https://hashiconf.com/global/
https://health.aws.amazon.com/health/status
https://github.com/vulhub/vulhub
https://github.blog/changelog/2022-09-26-github-actions-dynamic-names-for-workflow-runs/
https://blog.cloudflare.com/workerd-open-source-workers-runtime/
https://aws.amazon.com/about-aws/whats-new/2022/09/amazon-route-53-support-dns-resource-record-set-permissions/
https://www.hashicorp.com/blog/terraform-enterprise-adds-run-metrics-versioned-docs-and-more
https://gist.github.com/AlexAtkinson/fb113e9001058b459d8a69bb52b7a18d

Hi folks, if it interests you I would love to hear some discussion on this question I just posted in #prometheus https://sweetops.slack.com/archives/CE2JD8N1M/p1664446180231159

🎉 DORA 2022 is out 🚀

Blog post is up at https://cloud.google.com/blog/products/devops-sre/dora-2022-accelerate-state-of-devops-report-now-out and I attached the PDF cause I find the “let us spam you” form annoying.