#office-hours - April 2022

Wanted to share this for office hours today. Its a pretty nifty tool that I’ve been putting to use lately. Its already helped me shave a couple dozen $$/mo off of a AWS account which will add up to hundreds/thousands by year end.
https://www.infracost.io/
https://github.com/infracost/infracost

Invited David to join us hopefully today!

@here office hours is starting in 30 minutes! Remember to post your questions here.

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Christopher Picht has joined Public "Office Hours"

Emile Fugulin has joined Public "Office Hours"

dario erregue has joined Public "Office Hours"

David Hawthorne has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

Mazin Ahmed has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

deniz gokcin has joined Public "Office Hours"

Mazin Ahmed has joined Public "Office Hours"

Mohammed Yahya has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Jim Park has joined Public "Office Hours"

Yusuf has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Connor High has joined Public "Office Hours"

Connor High has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

Tim Gourley has joined Public "Office Hours"

Ben Smith (Cloud Posse) has joined Public "Office Hours"

Jim C has joined Public "Office Hours"

Jeremy (Cloud Posse) has joined Public "Office Hours"

Kris Musard has joined Public "Office Hours"

Sherif Abdel-Naby has joined Public "Office Hours"

stelios L has joined Public "Office Hours"

Tim Gourley has joined Public "Office Hours"

Vicken Simonian has joined Public "Office Hours"

Abraham Quintero has joined Public "Office Hours"

Allen Lyons has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

Ross Rfd has joined Public "Office Hours"

Amer Zec has joined Public "Office Hours"

wasim k has joined Public "Office Hours"

AWS also have a 100k dollar bill for a single click of a button :D
https://www.cyclic.sh/posts/aws-s3-why-sometimes-you-should-press-the-100k-dollar-button

dag viggo lokoeen has joined Public "Office Hours"

Jose Figueredo has joined Public "Office Hours"

Anyone going to KubeCon EU 2022 ? 👀

https://community.f5.com/t5/technical-articles/using-f5-s-terraform-modules-in-an-air-gapped-environment/ta-p/291070 😆

wasim k has joined Public "Office Hours"

deniz gokcin has joined Public "Office Hours"

https://github.com/kube-rs/kube-rs
https://github.com/linkerd/linkerd2/tree/main/policy-controller
Last is linkerd new policy controller using kube-rs, can be a good inspiration

Question for next office-hours — How have folks automated AWS IAM Access Key + Secret Key rotation policies (e.g. IAM keys are only active for 1 year)? I’ve always thought about doing it, but never went down the rabbit hole. Huge bonus points if somebody has a simple solution that doesn’t involve lambda 😅

My life just got better

Question for today: Pros and cons of using the latest EKS AMIs or managing roll-out of new AMI releases manually.

@here office hours is starting in 30 minutes! Remember to post your questions here.

hmm I do have a question that maybe is out of scope for office hours, if so feel free to not answer or just point me in the right direction, but are there any examples on the use of helmfile that showcase how one might use it in a "bigger" situation? I.E, multiple releases spanning 1-2 env's that maybe pulls from a helm repo and overrides some of those values as well. Maybe it's just a complete misunderstanding on my part but I was finding the examples in the helmfile repo kind-of lackluster, and a lot of the guides I came across on the internet pretty much showcased an entirely different way of doing it.. Not sure if there's a "standard" or just kind of the wild west lol. Also, I guess a followup would be, if I decide to just roll with Argocd and Gitops is helmfile still relevant in that regard? It seems like a pretty lightweight wrapper overall but due to complete noobness I can't be sure they're compatible.

Lol I guess my particular situation is that I've learned how to install helm charts from a repo, and can make one from scratch, but somehow am scratching my head on how to create a repeatable CI\CD pipeline in which I can say "I need istio, these are the values I need you to overwrite, please do the thing"

My first office hours, so apologies if this isn't the place 😛

another question for today: what kind of a git repo structure do you recommend if I want to seperate my terraform modules in repository A along with the terragrunt files for some common resources like the vpc, alb some security groups etc. and store my app source code and app specific terragrunt files in repository B(ecr, ecs, app security groups etc.) I also want to note that my ecs hcl file needs dependencies from the common resources(like vpc id)

deniz gokcin has joined Public "Office Hours"

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Brian Pauley has joined Public "Office Hours"

Marcos Soutullo has joined Public "Office Hours"

MALCON MOREIRA has joined Public "Office Hours"

Christopher Picht has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

Jim Park has joined Public "Office Hours"

Arthur Dent has joined Public "Office Hours"

Andy Roth has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Jesus Martinez has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Scott Mathson has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

Stevan Arychuk has joined Public "Office Hours"

Tim Gourley has joined Public "Office Hours"

Brandon James Miller has joined Public "Office Hours"

Jeremy (Cloud Posse) has joined Public "Office Hours"

Jose Figueredo has joined Public "Office Hours"

Mazin Ahmed has joined Public "Office Hours"

Josh B has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Waqar Ahmed has joined Public "Office Hours"

Marcelo Santoro has joined Public "Office Hours"

Connor High has joined Public "Office Hours"

Jeremy Bouse has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

Connor High has joined Public "Office Hours"

Paul Bullock has joined Public "Office Hours"

Jose Figueredo has joined Public "Office Hours"

Marin Purgar has joined Public "Office Hours"

Guilherme Borges has joined Public "Office Hours"

Shaun Wang has joined Public "Office Hours"

Allen Lyons has joined Public "Office Hours"

michael dizon has joined Public "Office Hours"

Josh B has joined Public "Office Hours"

Kris Musard has joined Public "Office Hours"

shreenu kumar has joined Public "Office Hours"

Nimesh Amin has joined Public "Office Hours"

wasim k has joined Public "Office Hours"

Amer Zec has joined Public "Office Hours"

Ross Rfd has joined Public "Office Hours"

@here office hours is starting in 30 minutes! Remember to post your questions here.

Arthur Dent has joined Public "Office Hours"

Andy Miguel (Cloud Posse) has joined Public "Office Hours"

venkata mutyala has joined Public "Office Hours"

Andy Roth has joined Public "Office Hours"

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Emile Fugulin has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Igor Miltchman has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

Brian Pauley has joined Public "Office Hours"

Brandon James Miller has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Derek Davis has joined Public "Office Hours"

deniz gokcin has joined Public "Office Hours"

Tim Gourley has joined Public "Office Hours"

Jim Park has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

Josh B has joined Public "Office Hours"

Steven Hopkins (Cloud Posse) has joined Public "Office Hours"

Kris Musard has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

links from today's session
• https://github.com/hashicorp/terraform/issues/19898#issuecomment-1101853833
• https://thehackernews.com/2022/04/github-says-hackers-breach-dozens-of.html
• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/pricing_product
• https://calebporzio.com/i-just-hit-dollar-100000yr-on-github-sponsors-heres-how-i-did-it
• https://aws.amazon.com/about-aws/whats-new/2022/04/aws-security-hub-cross-region-security-scores-compliance-statuses/
• https://aws.amazon.com/about-aws/whats-new/2022/04/aws-single-sign-on-hipaa-eligible/
• https://aws.amazon.com/about-aws/whats-new/2022/04/aws-shield-application-balancer-automatic-ddos-mitigation/
• https://blog.symops.com/2022/04/14/terraform-pipeline-with-github-actions-and-github-oidc-for-aws/
• https://github.com/lyraproj/hiera

Jose Figueredo has joined Public "Office Hours"

Oliver Schoenborn has joined Public "Office Hours"

Yusuf has joined Public "Office Hours"

Ayobami Bamigboye has joined Public "Office Hours"

Stevan Arychuk has joined Public "Office Hours"

Scott Mathson has joined Public "Office Hours"

Marc Tamsky has joined Public "Office Hours"

Christopher Picht has joined Public "Office Hours"

Alexandr Vorona has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

Andrew Vitko has joined Public "Office Hours"

Connor High has joined Public "Office Hours"

Here's JHipster's page on the bug bounty stuff they do: https://www.jhipster.tech/bug-bounties/

Jim C has joined Public "Office Hours"

Ayobami Bamigboye has joined Public "Office Hours"

Steven Hopkins (Cloud Posse) has joined Public "Office Hours"

Florain Drescher has joined Public "Office Hours"

Paul Bullock has joined Public "Office Hours"

Jim C has joined Public "Office Hours"

Mohammed Almusaddar has joined Public "Office Hours"

emem emem has joined Public "Office Hours"

@here office hours is starting in 30 minutes! Remember to post your questions here.

Andy Miguel (Cloud Posse) has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

Christopher Picht has joined Public "Office Hours"

Andrew Elkins has joined Public "Office Hours"

Allan Mohr has joined Public "Office Hours"

Isa Aguilar has joined Public "Office Hours"

Eric Berg has joined Public "Office Hours"

David Hawthorne has joined Public "Office Hours"

Guilherme Borges has joined Public "Office Hours"

Emile Fugulin has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Opinions and thoughts on K8s ingress controllers for high volume deployments.
• traefik (currently using)
• haproxy (currently considering)
• nginx
• ??

Andy Roth has joined Public "Office Hours"

Matt Calhoun has joined Public "Office Hours"

Connor High has joined Public "Office Hours"

Erik Osterman (Cloud Posse) has joined Public "Office Hours"

Paul Bullock has joined Public "Office Hours"

Josh B has joined Public "Office Hours"

Brandon Miller has joined Public "Office Hours"

Alex Kiss has joined Public "Office Hours"

Isaac M has joined Public "Office Hours"

What advice do you have for how to communicate expectations when people decide to use something brand new that is still super beta/rough, are having problems, and are annoyed that things aren't working?

Lucas Andrade has joined Public "Office Hours"

Tim Gourley has joined Public "Office Hours"

Benjamin Smith has joined Public "Office Hours"

Ralf Pieper has joined Public "Office Hours"

links from today's session
• https://github.blog/changelog/2022-04-25-git-io-deprecation/
• https://github.com/cloudposse/build-harness/issues/314
• https://techcrunch.com/2022/04/25/google-donates-the-istio-service-mesh-to-the-cloud-native-computing-foundation/
• https://www.theregister.com/AMP/2022/04/20/aws_log4j_patches/
• https://github.com/FairwindsOps/reckoner
• https://medium.com/@cfatechblog/edge-computing-at-chick-fil-a-7d67242675e2
• https://github.com/jasonwbarnett/terraform-registry-proxy

Josh B has joined Public "Office Hours"

Vlad Ionescu has joined Public "Office Hours"

PePe Amengual has joined Public "Office Hours"

looks like is similar to what this does https://github.com/apparentlymart/terraform-aws-tf-registry

Ross Rfd has joined Public "Office Hours"

Arthur Dent has joined Public "Office Hours"

Brian Pauley has joined Public "Office Hours"

Tony Scott has joined Public "Office Hours"

Matt Gowie has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

Justin Davis has joined Public "Office Hours"

Florain Drescher has joined Public "Office Hours"

Nimesh Amin has joined Public "Office Hours"

Michael Jenkins has joined Public "Office Hours"

@Matt Calhoun https://github.com/cloudposse/terraform-aws-iam-system-user/blob/master/main.tf#L24-L28

Andrew Thompson has joined Public "Office Hours"

Amer Zec has joined Public "Office Hours"

dag viggo lokoeen has joined Public "Office Hours"

https://css-tricks.com/making-mermaid-diagrams-in-markdown/

https://github.blog/2022-02-14-include-diagrams-markdown-files-mermaid/#:~:text=Mermaid%20has%20been%20getting%20increasingly,feature%20to%20everyone%20on%20GitHub.

In reference to the question asked yesterday about how to keep expectations realistic during OSS development... I was reading this and it seems like a great solution. Essentially use Mermaid to maintain a roadmap within your readme. First link shows an example roadmap, while the second is the Github-specific implementation details from their announcement post. Haven't done this yet myself, so I can't say with 100% certainty that it will be painless but it does seem to be possible :)