2 min read

Here's the recording from our DevOps “Office Hours” session on 2021-07-28.

We hold public “Office Hours” every Wednesday at 11:30am PST to answer questions on all things DevOps/Terraform/Kubernetes/CICD related.

These “lunch & learn” style sessions are totally free and really just an opportunity to talk shop, ask questions and get answers.

Register here: cloudposse.com/office-hours

Basically, these sessions are an opportunity to get a free weekly consultation with Cloud Posse where you can literally “ask me anything” (AMA). Since we're all engineers, this also helps us better understand the challenges our users have so we can better focus on solving the real problems you have and address the problems/gaps in our tools.

—

[00:00:00​] Intro
[00:01:19] Save the date! August 18th: HashiCorp Boundary Demo (Taylor Dolezal)
[00:02:25​] Mitchell Hashimoto Steps aside as CTO of HashiCorp
https://www.hashicorp.com/blog/mitchell-s-new-role-at-hashicorp
[00:03:16​] Library of Conftest Rules (via weekly.tf – thanks Anton!)
https://github.com/Cigna/confectionery
[00:05:05​] Easily list AWS Resources with awsls (via weekly.tf)
https://github.com/jckuester/awsls
[00:05:53] How do I get basic debugging on Kubernetes clusters?
https://pixielabs.ai/
[00:13:54] Abbot is a platform to build and run automation scripts from chat without a lot of hassle
https://ab.bot
https://news.ycombinator.com/item?id=27974077
[00:15:31​] Has anyone test-run opstrace as an alternative to other saas “o11y” offerings? if so how did it go and did you go further into production with it?
[00:16:56​] What’s the best policy to be as safe as possible with storing TF state because TF hasn't given us anything to help with secrets in TF state?
[00:23:51​] Has anyone used PGP to encrypt AWS access keys generated by the TF module for secret keys?
[00:25:45] How do you use Git pre-hooks for identifying secrets on organization-level?
[00:30:22​] How are people terraforming alerts specifically in the case where there are many identical underlying resources spread across numerous accounts or environments that require different threshold values?
[00:45:00] Terraform doesn't enforce any workflows
[00:54:35] Cloud Posse tutorials and Spacelift
[00:56​:56] Outro