DevOps "Office Hours" (2025-03-19)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have. You can register here: https://cloudposse.com/office-hours Join the conversation: https://slack.cloudposse.com/ Find out how we can help your company: https://cloudposse.com/quiz https://cloudposse.com/accelerate/ Learn more about Cloud Posse: https://cloudposse.com https://github.com/cloudposse https://sweetops.com/ https://newsletter.cloudposse.com https://podcast.cloudposse.com/ #officehours,#cloudposse,#sweetops,#devops,#sre,#terraform,#kubernetes,#awssecretmanager Timestamps: [00:00:00] Intro [00:01:20] Announcements [00:01:27] Deel allegedly spied on competitor and the scheme goes all the way up to CEO https://techcrunch.com/2025/03/17/rippling-sues-deel-deel-denies-all-legal-wrongdoing-and-slack-is-the-main-witness/ [00:05:54] Chaos in Cloudflare’s Lisbon office: securing the Internet with wave motion https://blog.cloudflare.com/chaos-in-cloudflare-lisbon-office-securing-the-internet-with-wave-motion/ [00:07:37] Tembo Announces dba — Your Database Wingman https://www.dba.ai [00:09:17] ICANN Update: Launching RDAP; Sunsetting WHOIS R.I.P. https://www.icann.org/en/announcements/details/icann-update-launching-rdap-sunsetting-whois-27-01-2025-en [00:15:25] tj-actions/changed-files action was compromised - StepSecurity https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised [00:18:24] How to pin GitHub Actions to a full commit length SHA https://dev.to/suzukishunsuke/pin-github-actions-to-a-full-length-commit-sha-for-security-2n7p [00:30:28] Cross-Repo STS GitHub Hub Token Service https://www.chainguard.dev/unchained/the-end-of-github-pats-you-cant-leak-what-you-dont-have [00:36:45] A "deep merge" utility provider for OpenTofu https://github.com/apparentlymart/terraform-provider-deepmerge [00:39:15] A simple, slick and user-friendly alternative to 'find' https://github.com/sharkdp/fd [00:42:17] EXPERIMENTAL support for running Terraform Modules directly in Pulumi. https://github.com/pulumi/pulumi-terraform-module [00:43:08] Amazon ECR announces ECR to ECR pull through cache https://aws.amazon.com/about-aws/whats-new/2025/03/amazon-ecr-pull-through-cache/ [00:44:42] Google Strikes $32 Billion Deal for Cybersecurity Startup Wiz (after turning down 23B last summer!) https://www.wsj.com/business/deals/alphabet-back-in-deal-talks-for-cybersecurity-startup-wiz-41cd3090 [00:51:43] Q&A [00:51:47] Terraform and Github Cache Solutions https://github.com/zloeber/terraform-cicd-image [00:55:11] Magic Cache for GitHub Actions https://runs-on.com/caching/magic-cache/ https://developer.hashicorp.com/terraform/cli/config/config-file#locations [00:57:47] Outro