DevOps "Office Hours" (2025-03-26)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have. You can register here: https://cloudposse.com/office-hours Join the conversation: https://slack.cloudposse.com/ Find out how we can help your company: https://cloudposse.com/quiz https://cloudposse.com/accelerate/ Learn more about Cloud Posse: https://cloudposse.com https://github.com/cloudposse https://sweetops.com/ https://newsletter.cloudposse.com https://podcast.cloudposse.com/ #officehours,#cloudposse,#sweetops,#devops,#sre,#terraform,#kubernetes,#awscertifications Timestamps: [00:00:00] Intro [00:01:18] Announcements [00:01:32] Fine-grained PATs are now generally available https://github.blog/changelog/2025-03-18-fine-grained-pats-are-now-generally-available/ [00:07:13] Cloud Posse Automated Component Testing https://docs.cloudposse.com/blog/automated-component-testing/ [00:13:09] Remote Code Execution Vulnerabilities in Ingress NGINX https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities [00:14:42] Trapping misbehaving bots in an AI Labyrinth https://blog.cloudflare.com/ai-labyrinth/ [00:18:51] How NixOS and reproducible builds could have detected the xz backdoor https://luj.fr/blog/how-nixos-could-have-detected-xz.html [00:20:19] Talk with your AWS using Claude. Model Context Protocol (MCP) server for AWS. https://github.com/RafalWilinski/aws-mcp [00:21:04] Infralog (WIP) - generate webhook events from (s3) TF state changes https://github.com/hvalls/infralog [00:22:42] Generate Kubernetes architecture diagrams from Kubernetes manifest files https://github.com/philippemerle/KubeDiagrams [00:24:56] Kubernetes Features by Version https://kaniuse.gerome.dev/ [00:28:07] Some new Atmos Functionality https://github.com/cloudposse/atmos/pulls?q=is%3Apr+atmos.d+is%3Aclosed+ [00:34:24] Q&A [00:34:57] ECS Task Definition Automation & Improving Containerized Application Deployment Discussion [00:47:38] Outro