Public “Office Hours” (2021-07-28)

Erik OstermanOffice Hours

2 min read

Here's the recording from our DevOps “Office Hours” session on 2021-07-28.

We hold public “Office Hours” every Wednesday at 11:30am PST to answer questions on all things DevOps/Terraform/Kubernetes/CICD related.

These “lunch & learn” style sessions are totally free and really just an opportunity to talk shop, ask questions and get answers.

Register here:

Basically, these sessions are an opportunity to get a free weekly consultation with Cloud Posse where you can literally “ask me anything” (AMA). Since we're all engineers, this also helps us better understand the challenges our users have so we can better focus on solving the real problems you have and address the problems/gaps in our tools.

[00:00:00​] Intro
[00:01:19] Save the date! August 18th: HashiCorp Boundary Demo (Taylor Dolezal)
[00:02:25​] Mitchell Hashimoto Steps aside as CTO of HashiCorp
[00:03:16​] Library of Conftest Rules (via – thanks Anton!)
[00:05:05​] Easily list AWS Resources with awsls (via
[00:05:53] How do I get basic debugging on Kubernetes clusters?
[00:13:54] Abbot is a platform to build and run automation scripts from chat without a lot of hassle
[00:15:31​] Has anyone test-run opstrace as an alternative to other saas “o11y” offerings? if so how did it go and did you go further into production with it?
[00:16:56​] What’s the best policy to be as safe as possible with storing TF state because TF hasn't given us anything to help with secrets in TF state?
[00:23:51​] Has anyone used PGP to encrypt AWS access keys generated by the TF module for secret keys?
[00:25:45] How do you use Git pre-hooks for identifying secrets on organization-level?
[00:30:22​] How are people terraforming alerts specifically in the case where there are many identical underlying resources spread across numerous accounts or environments that require different threshold values?
[00:45:00] Terraform doesn't enforce any workflows
[00:54:35] Cloud Posse tutorials and Spacelift
[00:56​:56] Outro
Author Details
Erik Osterman is a technical evangelist and insanely passionate DevOps guru with over a decade of hands-on experience architecting systems for AWS. After leading major cloud initiatives at CBS Interactive as the Director of Cloud Architecture, he founded Cloud Posse, a DevOps Accelerator that helps high-growth Startups and Fortune 500 Companies own their infrastructure in record time by building it together with customers and showing them the ropes.