Cloud Posse DevOps "Office Hours" (2022-09-21)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have.

You can register here: https://cloudposse.com/office-hours

Join the conversation:
https://slack.cloudposse.com/

Find out how we can help your company:
https://cloudposse.com/quiz
https://cloudposse.com/accelerate/

Learn more about Cloud Posse:
https://cloudposse.com
https://github.com/cloudposse
https://sweetops.com/
https://newsletter.cloudposse.com
https://podcast.cloudposse.com/

[00:00:00] Intro
[00:01:34] Reminder! HashiConf Global - Los Angeles, October 4-6
https://hashiconf.com/global/
[00:01:48] Terraform 1.3.0 Released
https://github.com/hashicorp/terraform/releases/tag/v1.3.0
[00:02:52] kubectl plugin to browse Kubernetes object hierarchies as a tree
https://github.com/ahmetb/kubectl-tree
[00:03:25] Under-documented Kubernetes Security Tips
https://www.macchaffee.com/blog/2022/k8s-under-documented-security-tips/
[00:03:51] A Prometheus exporter for scraping Spacelift metrics.
https://github.com/spacelift-io/prometheus-exporter
[00:06:30] Deep merging natively in Terraform core closed as “not planned”
https://github.com/hashicorp/terraform/issues?q=is%3Aissue+is%3Aclosed+archived%3Afalse+reason%3A%22not+planned%22
[00:08:08] Automatically Generate Terraform moved {} blocks (via weekly.tf)
https://github.com/padok-team/tfautomv
[00:09:49] DRY Terraform with Go Templates (via weekly.tf)
https://github.com/verifa/terraplate
[00:20:47] A command-line utility to print the summary of the terraform plan (via weekly.tf)
https://github.com/dineshba/tf-summarize
[00:26:00]AWS Security Hub launches a new security best practice control
https://docs.aws.amazon.com/securityhub/latest/userguide/standards-fsbp-config-resources.html
[00:34:31] AWS Fargate increases compute and memory resource configurations by 4x
https://aws.amazon.com/about-aws/whats-new/2022/09/aws-fargate-increases-compute-memory-resource-configurations-4x/
[00:36:42] I want to deploy a dotnet 6 applications backed by PostgreSQL. I'm torn between using Lambda, ECS and EKS.
[00:49:55] Any alternatives to run a Managed Private CA? We need to be able to easily create/revoke SSL certificates, since these need to be deployed on IoT devices/ I feel AWS Pricing is quite expensive (400$ per month + 0,75$ per certificate)
[00:59:52] Outro