Cloud Posse DevOps "Office Hours" (2021-08-11)

08/11/21 • 58 min

Cloud Posse DevOps "Office Hours" Podcast

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have.

You can register here: https://cloudposse.com/office-hours

Join the conversation:
https://slack.cloudposse.com/

Find out how we can help your company:
https://cloudposse.com/quiz
https://cloudposse.com/accelerate/

Learn more about Cloud Posse:
https://cloudposse.com
https://github.com/cloudposse
https://sweetops.com/
https://newsletter.cloudposse.com
https://podcast.cloudposse.com/

[00:00:00] Intro
[00:01:26] Announcing Amazon CloudWatch cross account alarms
https://aws.amazon.com/about-aws/whats-new/2021/08/announcing-amazon-cloudwatch-cross-account-alarms/
[00:03:04] So what’s wrong with 1975 programming?
http://varnish-cache.org/docs/trunk/phk/notes.html
[00:04:21] Defcon 29: Attacking Terraform Environments
https://www.youtube.com/watch?v=3ODhxYY9-9U
[00:09:32] Do you have tips/suggestions/pointers/resources on creating plugins for tflint?
[00:13:43] Open Terraforming Server (PoC) thanks weekly.tf
https://github.com/leg100/ots
[00:15:47] Gaia Terraform UI (Atlantis alternative? Thanks weekly.tf
https://github.com/gaia-app/gaia
[00:19:43] Terraform resource generators
https://github.com/hashicorp/terraform/pull/28874
[00:26:30] Searching SweetOps Slack Archives for Treasure
https://www.sheldonhull.com/sweetops-slack-archive/
[00:27:20] Terraform resource generators (cont)
https://github.com/hashicorp/terraform/pull/28874
[00:30:47] Ubiquity products are amazing for the home office (not just enterprise)
https://www.ui.com/consoles/
[00:35:04] DevOps Subcontractors Needed!
https://cloudposse.com/jobs/
[00:36:25] What options do we have for TF backend, providers & init args to make them DRY, similar to what terragrunt offers?
[00:50:31] How to import 826 resources into Terraform state - only 273 are in state file?
[00:56:56] Outro

#officehours,#cloudposse,#sweetops,#devops,#sre,#terraform,#kubernetes,#aws

Support the show (https://cloudposse.com/office-hours/)

Support the show (https://cloudposse.com/office-hours/)

Previous Episode

Cloud Posse DevOps "Office Hours" (2021-08-04)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have.

You can register here: https://cloudposse.com/office-hours

Join the conversation:
https://slack.cloudposse.com/

Find out how we can help your company:
https://cloudposse.com/quiz
https://cloudposse.com/accelerate/

Learn more about Cloud Posse:
https://cloudposse.com
https://github.com/cloudposse
https://sweetops.com/
https://newsletter.cloudposse.com
https://podcast.cloudposse.com/

[00:00:00] Intro
[00:01:15] Save the date! August 18th: HashiCorp Boundary Demo (Taylor Dolezal)
[00:01:42] New Cloud Posse AWS SFTP Module
https://github.com/cloudposse/terraform-aws-transfer-sftp
[00:02:48] New Cloud Posse Self-signed Certificate Module with SSM/ASM support
https://github.com/cloudposse/terraform-aws-ssm-tls-self-signed-cert
[00:03:37] New Cloud Posse AWS Macie Module
https://github.com/cloudposse/terraform-aws-macie
[00:04:50] GitHub Releases 15+ code scanning integrations with open source security tools
https://github.blog/2021-07-28-new-code-scanning-integrations-open-source-security-tools/
[00:09:34] Terraform Kubernetes Provider Now Supports Custom Resources
https://github.com/hashicorp/terraform-provider-kubernetes/issues/215#issuecomment-892028190
[00:10:35] CISA and NSA Kubernetes hardening guide released
[00:12:39] Certificate Manager now supports cert-manager
[00:14:28] EC2 Classic is going away August 15th
[00:19:54] Geodesic provides SSH tokens to auth to GitHub, what if I use user name and password?
[00:22:19] ACM offers replacement of Lets Encrypt with Private CA
[00:25:25] Has anyone explored HashiCorp Nomad?
[00:31:16] Using CodeDeploy blue/green deployments to ECS causes 503s
[00:36:30] Struggling to use AWS SSO for handling permissions?
[00:43:46] Outro

#officehours,#cloudposse,#sweetops,#devops,#sre,#terraform,#kubernetes,#aws