#geodesic - May 2024

v2.10.0
🚀 Enhancements
Initial support for dark mode terminals @Nuru (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2272818612" data-permission-text="Title is private" data-url="https://github.com/cloudposse/geodesic/issues/933"...

v2.10.1
🚀 Enhancements
You can now run update-terminal-mode dark or update-terminal-mode light to force the dark/light mode setting if auto-detection does not work.
Dark mode caching fix @Nuru (<a class="issue-link js-issue-link" data-error-text="Failed to load title"...

v2.11.0 OpenTofu, Minor Breaking Changes
💥 Breaking Changes
OpenTofu
OK, not a breaking change, but we are excited about it:
we have made it easy to install OpenTofu into
Geodesic. At the command line or in your Dockerfile, just run:
Debian:
# We recommend pinning the version to ensure reproducibility
apt-get update && apt-get install tofu=1.6.2
Alpine:
# At this point, it seems there is only one version of OpenTofu available
# for Alpine, and a new version would be in a different...

v2.11.1
🚀 Enhancements

Dockerfile examples, Renovate config, color text bugfixes @Nuru (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2285058498" data-permission-text="Title is private" data-url="https://github.com/cloudposse/geodesic/issues/939"...

v2.11.2
🏗️ Build/Release Maintenance

PR & Release management maintenance @Nuru (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2290499005" data-permission-text="Title is private" data-url="https://github.com/cloudposse/geodesic/issues/940"...

been thinking about the best way to have a portable collection of devops tooling that I can use from any machine, and my favorite approaches so far have been

• geodesic
• devcontainers
• maaaaaaybe nix
any reasons I would pick one over the other? how are folks here handling multi aws assume role profiles effectively and kubeconfig ? .aws/config + kubeconfig files on the host machine? or baked into the containers?

Is there any way to integrate geodesic and leapp? I want to see which session I'm currently in -_- Even the account name would be helpful.

v2.11.3
🚀 Enhancements

Fix colorized string in prompt @Nuru (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2299175728" data-permission-text="Title is private" data-url="https://github.com/cloudposse/geodesic/issues/942"...

v2
No content.

Here's my solution for using aws-sso-cli as a replacement for Leapp with geodesic.

In the profile.d folder (or .bashrc), copy the aws-sso-cli profile locally, changing it to headless mode:

mkdir ~/.aws-sso
sed 's/open/print/g' /localhost/.aws-sso/config.yaml | sed '/SecureStore/d' > ~/.aws-sso/config.yaml
echo "SecureStore: json" >> ~/.aws-sso/config.yaml

This stores your interim credentials inside the docker container in plain JSON -- I know this is insecure, but I struggled with a generic way of using a key-vault inside docker that would be cross platform.

I then created a login script that I run this during initialization, so startup prompts me with a URL for AWS login (which I control-click), and then I loop thru and authenticate all the profiles I need in this session.

aws-sso --no-config-check
for f in PROFILE1 PROFILE2 PROFILE3; do
	SHELL=/bin/bash aws-sso -L error --no-config-check eval -p $f > /dev/null
done
aws-sso list

(NOTE: SHELL=/bin/bash is needed just in profiile.d scripts before the SHELL environment variable has been set)

When I'm complete, you can then see the expiration times by doing and aws-sso list.

My ~/.aws/config is populated like this:

[profile pinnacle-data]
credential_process = /usr/bin/aws-sso -S "pinnacle" process --arn arn:aws:iam::########:role/AWSAdministratorAccess
region = us-east-1

Thanks @Mike Crowe -remind me, does aws-sso-cli invoke the browser for logins, or does it use a scraping technique?

Browser. But inside geodesic, my configuration simply prints out the link which you have to click in the console to fire up the browser.

So far, I found it to be on par with leapp and I really like using it. It even has the console function to open up a browser to the AWS console for the current profile