#office-hours - October 2019

@here public #office-hours starting now! join us to talk shop https://zoom.us/j/508587304

Chamber:
https://github.com/segmentio/chamber
https://docs.cloudposse.com/tools/chamber/

What is ctl https://github.com/cloudposse/example-app/blob/master/deploy/ctl?

Create Jenkinsfile to deploy UI code to S3 bucket.

What’s that website that was shared before where you can see what other companies are paying for a SaaS?

We’re looking at terraform cloud

@oscar https://www.producthunt.com/posts/capiche

Thanks - a shame it isn’t widely adopted though

Will there be a an office hours meeting today?

Sorry guys! Had to go to emergency hospital to pick up doggie and totally spaced

Will be back next week, same time and place

I have a question for tomorrow’s Office Hours. How to maintain a single source of truth and updating a secrets manager (AWS SM or HashiCorp Vault) while having some audit and using a CI?

Good question!

Office hours today?

Yep!

@oscar bump 😃

@here public #office-hours starting now! join us to talk shop https://zoom.us/j/508587304

a nodes group per az, equivalent to an eks worker pull i believe

Validating cluster us-east-1.staging.spoton.sh

INSTANCE GROUPS
NAME			ROLE	MACHINETYPE	MIN	MAX	SUBNETS
bastions		Bastion	t3.small	1	1	utility-us-east-1c,utility-us-east-1d,utility-us-east-1a
master-us-east-1a	Master	t3.medium	1	1	us-east-1a
master-us-east-1c	Master	t3.medium	1	1	us-east-1c
master-us-east-1d	Master	t3.medium	1	1	us-east-1d
nodes-us-east-1a	Node	t3.medium	1	3	us-east-1a
nodes-us-east-1c	Node	t3.medium	1	3	us-east-1c
nodes-us-east-1d	Node	t3.medium	1	3	us-east-1d

awesome turn out! thanks everyone for joining and sharing what your working on. hope we answered your questions 😃

make sure to check out the links that were shared ☝️

I have one thing I'd like to review today with those on the call.

We are working on releasing our official "code of conduct" for SweetOps

Would love your feedback.

@here public #office-hours starting now! join us to talk shop https://zoom.us/j/508587304

/conf/$project, and then in project, you define each environment.

environment ~ workspace

workspace ~ account

terraform cli_arg_init var?

LSIF example

Do not ask questions in #announcements. Search channel instead or suggest one, if you can’t find one.

You should be able to limit people's ability to post in general, That's better than trying to enforce a rule

Usually when I see that as the situation what people have done is completely disable/delete general, create an #announcements channel, and go from there

Yea, not a bad suggestion. I do like that people can welcome each other in #announcements though

questions asked in zoom ☝️

As a general rule of thumb, If I am able to automatically enforce something, I'll always try to do that rather than try to make sure people are following a rule. A perfect example is - don't use a coding style document, use Prettier

Don't use a terraform style document, use terraform fmt in your CI

and reject if it changes files

and reject if it changes files

I'd offer that it's even more blissful to have the CI update and commit fmt changes for you if you forget.

I wish that was done more.

I'm not a big fan of CI making commits to my code. There are minor exceptions like Weave Flux updating versions, but other than that I want commits to my codebase to be coming from developers.

Pre-commit hooks take care of automating it from the developer's standpoint

I'd suggest that's still playing favorites to a tool git -- those hooks won't get run if you create a commit using any other tool

Awesome session, thank you sifu @Erik Osterman (Cloud Posse)!!

Thank you @Blaise Pabon!

I did not get too far into the weeds with my project. I’m happy I asked about this. I’m going to start using geodesic

🤯 @Erik Osterman (Cloud Posse) I took a closer look at how you are using geodesic and what you had explained during office hours, I can’t wait to get home and start testing this.

I think piecing it together as you did today helped a great deal.

@dalekurt that's great news! let me know how it goes....

I was just having some fun with using a Makefile for pulling remote modules

here's a demo:

https://share.vidyard.com/watch/TzZS8W5m8NEYV3qBAL7x81?

Here's the Makefile: https://sweetops.slack.com/archives/CB84E9V54/p1571871423051800?thread_ts=1571850575.042600&cid=CB84E9V54

Here's the video from today's "office hours" (from when we hit "record")

@Erik Osterman (Cloud Posse) Could you re-iterate the strategy and pros for deploying a kubernetes node pool within a single AZ opposed to deploying across multiple AZs?

Little show-and-tell I can do tomorrow at office hours if people are interested. We're using the tool pre-commit heavily in most of our projects. This is an example from the state backend project I set up for one of our stacks.

That's great! I'd like to see it.

@Andrew Roth I’m looking forward to that, I was reading about it earlier this morning on a reddit post - https://github.com/antonbabenko/pre-commit-terraform/blob/master/README.md

@here public #office-hours starting now! join us to talk shop https://zoom.us/j/508587304

I'm stuck in a meeting still, might have to miss this one. we'll see.

Read: Securing Environment Variables with 1Password

https://grantorchard.com/securing-environment-variables-with-1password/?utm_source=share&utm_medium=ios_app&utm_name=iossmf

this ?

thank you

Read: tfsec
https://github.com/liamg/tfsec/blob/master/README.md

Read: terraform-compliance

https://github.com/eerkunt/terraform-compliance/blob/master/README.md

@Kareem ☝️🏻

@Kareem has joined the channel

Sorry I missed office hours! If people still want to see the pre-commit stuff I can definitely show it at the next one