#office-hours - July 2023

For the upcoming office hours: Using the new TF import functionality to move existing infra into the atmos style stacks

@here office hours is starting in 30 minutes! Remember to post your questions here.

Links from today's office hours:

https://github.com/common-fate/common-fate
https://github.com/aws/containers-roadmap/issues/876#issuecomment-1546760257
https://github.com/shihanng/tfvar
https://twitter.com/stefanprodan/status/1676216365819088899
https://twitter.com/stefanprodan/status/1676216365819088899
https://symops.com/
https://aws.amazon.com/blogs/security/temporary-elevated-access-management-with-iam-identity-center/
https://docs.datadoghq.com/logs/guide/forwarder/?tab=terraform
https://github.com/fluxcd/flux2/releases/tag/v2.0.0

Curious to see what folks are thinking about Datadog Workflow Automation and how they might use it. 🤔. Will you add automation to your monitoring?

Reminds me of PagerDuty’s acquisition of Rundeck to add automation to incident management. And yet, I don’t know of anyone that’s actually used PD+RD 🤷‍♂️🏾 not saying no one’s applied it, I just don’t know anyone that has. Interested in hearing folks experience with this one as well.

https://www.datadoghq.com/blog/automate-end-to-end-processes-with-datadog-workflows/

@here office hours is starting in 30 minutes! Remember to post your questions here.

https://github.com/GlueOps/terraform-module-provider-versions
https://github.com/GlueOps/terraform-registry-proxy
cc: @BATeller @Erik Osterman (Cloud Posse)

Something that bothered me recently, I guess I'll ask in case there is time: Has anyone found a linter that will enforce deprecation warnings on outputs? That is, if you make a module that consumes deprecated outputs of another tfstate, the linter warns or even fails the module.

Links from today's office hours:

https://github.com/kubernetes/kubernetes/pull/116429
https://www.awsdocsgpt.com/
https://fly.io/blog/litefs-cloud/
https://factoryfactoryfactory.net/
https://www.hashicorp.com/blog/terraform-apply-as-code-the-multispace-pattern
https://tacosprice.com/
https://github.com/diggerhq/tacoscalculator
https://www.datadoghq.com/blog/automate-end-to-end-processes-with-datadog-workflows/
https://kubevirt.io/2023/KubeVirt-v1-has-landed.html
https://seths.blog/2005/03/dont_shave_that/
https://github.com/charmbracelet/mods
https://cruft.github.io/cruft/
https://warpforge.io/
https://earthly.dev/
https://masterpoint.io/updates/passing-on-crossplane/
https://medium.com/gitlab-magazine/multi-cloud-maturity-model-2de185c01dd7

@here office hours is starting in 30 minutes! Remember to post your questions here.

https://github.com/hashicorp/terraform/releases/tag/v1.6.0-alpha20230719 just got released an hour ago. Terraform will be moving terraform test out of experimental 🎉

Links from today's office hours:

https://news.apache.org/foundation/entry/save-open-source-the-impending-tragedy-of-the-cyber-resilience-act
https://blog.qualys.com/vulnerabilities-threat-research/2023/07/19/cve-2023-38408-remote-code-execution-in-opensshs-forwarded-ssh-agent
https://www.bleepingcomputer.com/news/security/google-cloud-build-bug-lets-hackers-launch-supply-chain-attacks/amp/
https://techcrunch.com/2023/07/17/microsoft-lost-keys-government-hacked/
https://github.blog/changelog/2023-07-13-github-actions-oidc-integration-with-aws-no-longer-requires-pinning-of-intermediate-tls-certificates
https://github.blog/changelog/2023-07-13-github-actions-oidc-integration-with-aws-no-longer-requires-pinning-of-intermediate-tls-certificates
https://www.bleepingcomputer.com/news/security/github-goes-passwordless-announces-passkeys-beta-preview/
https://twitter.com/iamvlaaaaaaad/status/1681036216685191168
https://aws.amazon.com/about-aws/whats-new/2023/07/aws-codebuild-github-actions/
https://docs.aws.amazon.com/codebuild/latest/userguide/action-runner.html
https://statusgator.com/
https://endoflife.date/amazon-eks
https://www.youtube.com/watch?v=AbSehcT19u0
https://steampipe.io/

Question for office hours:


How do you folks handle dependencies between repos? For example,

I update Repo A and cut a release/tag.
Repo B needs to be updated with the tag from Repo A and then a release gets cut for Repo B.
Repo C needs to be updated with the tag from repo B.

Also, there are situations where Repo B will have a release not dependent on Repo A and there are situations where Repo C will not have a release dependent on Repo A or B.


Are there any solutions for this? or do folks usually handroll their own automation to make this easier?

@here office hours is starting in 30 minutes! Remember to post your questions here.

we ran out of time, but was going to ask if anyone has used github.com/nikita-skobov/monorepo-git-tools (mgt)

Links from today's office hours:

https://github.com/SpotOnInc/renovate-config
https://tinyurl.com/cp-renovate
https://github.com/SpotOnInc/renovate-config/
https://www.youtube.com/watch?v=l28pukLJvss&list=PLIsz9zLIWsDI71mpnceqPivLAX4kiWEOE
https://grem1.in/post/terraform-lockfiles-maxymvlasov/
https://github.com/antonbabenko/pre-commit-terraform
https://docs.renovatebot.com
https://github.com/renovatebot/.github/blob/main/default.json
https://github.com/kelseyhightower/nocode
https://medium.com/forto-tech-blog/automated-versioning-of-terraform-modules-with-github-actions-semver-style-800f91ed5037