#office-hours - April 2025

@here office hours is starting in 30 minutes! Remember to post your questions here.

Links from today's office hours:

https://daniel.haxx.se/blog/2025/03/31/https-rr-in-curl/
https://datatracker.ietf.org/doc/html/rfc9460
https://www.praetorian.com/blog/codeqleaked-public-secrets-exposure-leads-to-supply-chain-attack-on-github-codeql/
https://grafana.com/blog/2025/03/11/grafana-oncall-maintenance-mode/
https://about.gitlab.com/blog/2025/03/24/prepare-now-docker-hub-rate-limits-will-impact-gitlab-ci-cd/
https://cloud.google.com/artifact-registry/docs/pull-cached-dockerhub-images
https://atmos.tools/core-concepts/stacks/yaml-functions/
https://docs.aws.amazon.com/global-infrastructure/latest/regions/aws-availability-zones.html
https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/use-consistent-availability-zones-in-vpcs-across-different-aws-accounts.html
https://github.com/managedkaos/tf-module-instance/tree/main
https://www.hashicorp.com/en/careers/open-positions

@here office hours is starting in 30 minutes! Remember to post your questions here.

I would be on the call but I'm double booked for work. Maybe next week! my work call is cancelled

Links from today's office hours:

https://www.calcalistech.com/ctechnews/article/bj90wnmrjl
https://yossarian.net/til/post/any-program-can-be-a-github-actions-shell/
https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-093a
https://github.blog/news-insights/product-news/github-copilot-agent-mode-activated/
https://cinc.sh/
https://github.com/zapier/tfbuddy?utm_source=www.weekly.tf&utm_medium=referral&utm_campaign=issue-214-aws-glue-to-airflow-terralith-again-orchestrating-ai-eks-auto-mode-ssh-with-aws-session-manager-terraform-git-backend
https://docs.cursor.com/settings/models
https://github.com/pulumi/mcp-server
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lb_listener_rule#authenticate-oidc
https://try.cloudflare.com/

Last week i asked about connecting to a web service running in a private subnet without the use of a VPN.

@Erik Osterman (Cloud Posse) I think you mentioned using Cloudflare tunnels and that approached worked out nicely.

Sharing the solution in case anyone has the same need:

https://gist.github.com/managedkaos/046f979cb0ea06120810667f48d29872

@here office hours is starting in 30 minutes! Remember to post your questions here.

Links from today's office hours:

https://techcrunch.com/2025/04/15/notorious-image-board-4chan-hacked-and-internal-data-leaked/?utm_source=tldrinfosec&guccounter=1
https://www.csoonline.com/article/3963190/cve-program-faces-swift-end-after-dhs-fails-to-renew-contract-leaving-security-flaw-tracking-in-limbo.html
https://www.thecvefoundation.org/home
https://www.jeffgeerling.com/blog/2025/its-easier-ever-de-censor-videos
https://filiph.github.io/unsure/
https://techcrunch.com/2025/04/15/figma-sent-a-cease-and-desist-letter-to-lovable-over-the-term-dev-mode/
https://kenneth.io/post/no-code-is-dead-long-live-vibe-coding?utm_source=tldrnewsletter
https://github.com/basecamp/gh-signoff
https://www.linkedin.com/posts/david-heinemeier-hansson-374b18221_developer-machines-are-getting-so-powerful-activity-7316734186025885696-rylA?utm_source=share&utm_medium=member_ios&rcm=ACoAAABZsBUBWKMGQCIG5JlgZ3-pz7WU35HDCw8
https://github.com/go-yaml/yaml
https://github.com/hashicorp/terraform/pull/36872#issuecomment-2810368608
https://github.com/opentofu/opentofu/issues/1230
https://developers.googleblog.com/en/a2a-a-new-era-of-agent-interoperability/?utm_source=tldrwebdev
https://github.blog/changelog/2025-04-09-dependabot-version-updates-now-support-helm/
https://github.com/eyaltoledano/claude-task-master
https://noyaml.com/
https://dhall-lang.org/
https://github.com/hashicorp/terraform/pull/36872#issuecomment-2810368608

I was not on the call today but Dhall lang sounds interesting. Was this brought up for discussion as a good thing or a bad thing for infrastructure as code?

@here office hours is starting in 30 minutes! Remember to post your questions here.

Hi, first time participating in office hours. I have 2 questions which I'm not of how to do using atmos.

first, we've run into a few issues with importing resources into state using atmos. We've been putting an import file with our import statements in the component definition then running a plan/apply against the stack with the import file present, but occasionally it seems like atmos doesn't recognize this as import and tries to create the resources again. Is there a standard method for importing resources with Atmos? is there a way to run atmos terraform import .... directly?

second, we have a resource we want to try to import, but it uses a newer provider than our repository is currently using, terraform suggests running terraform init --upgrade to update providers, but how would one run this command against an atmos repository?

Links from today's office hours:

https://github.blog/changelog/2025-04-22-github-actions-workflow-security-analysis-with-codeql-is-now-generally-available/
https://earthly.dev/blog/shutting-down-earthfiles-cloud/
https://dagger.io/blog/earthly-to-dagger-migration
https://github.com/dimonomid/nerdlog
https://github.com/LukasOgunfeitimi/TikTok-ReverseEngineering
https://philiplaine.com/posts/getting-forked-by-microsoft/
https://github.com/The-Pocket/Tutorial-Codebase-Knowledge
https://www.anthropic.com/engineering/claude-code-best-practices
https://github.com/The-Pocket/PocketFlow
https://github.com/jlcases/paelladoc
https://github.com/mem0ai/mem0
https://github.com/The-Pocket/PocketFlow/tree/main/cookbook/pocketflow-mcp
https://github.com/lobehub/mcp-hello-world
https://zacharyhuang.substack.com/p/mcp-simply-explained-function-calling
https://github.com/The-Pocket/PocketFlow/tree/main/cookbook/pocketflow-multi-agent

Can anyone help me with the karpenter configuration. I only want node disruption to be happened at the specific time. I tried below config but it is not working as expected.

  disruption:
    consolidationPolicy: WhenEmptyOrUnderutilized
    consolidateAfter: 5m
    budgets:
      - nodes: "100%"
        duration: 30m
        schedule: "0 9 * * *" 
        reasons:
          - Empty
          - Drifted
          - Underutilized

@here office hours is starting in 30 minutes! Remember to post your questions here.

Links from today's office hours:

https://thenewstack.io/opentofu-joins-cncf-new-home-for-open-source-iac-project/
https://github.com/akuity/kargo
https://github.com/hashicorp/terraform-provider-local/issues/408
https://github.com/cloudposse/atmos
https://github.blog/enterprise-software/ci-cd/when-to-choose-github-hosted-runners-or-self-hosted-runners-with-github-actions/
https://opentofu.org/blog/help-us-test-opentofu-1-10-0-alpha1/#native-locking-support-for-s3-backend
https://cloudposse.com/support
https://github.com/terraform-linters/tflint-ruleset-template
https://github.blog/enterprise-software/ci-cd/when-to-choose-github-hosted-runners-or-self-hosted-runners-with-github-actions/
https://aws.amazon.com/blogs/aws/in-the-works-new-availability-zone-in-maryland-for-us-east-n-virginia-region/
https://github.com/terraform-linters/tflint/blob/master/docs/developer-guide/plugins.md
https://docs.cloudposse.com/best-practices/terraform/
https://docs.github.com/en/copilot/using-github-copilot/code-review/configuring-coding-guidelines#coding-guidelines-examples
https://www.crewai.com/
https://aws.amazon.com/blogs/compute/migrating-aws-lambda-functions-from-the-go1-x-runtime-to-the-custom-runtime-on-amazon-linux-2/