#office-hours - September 2024

@here office hours is starting in 30 minutes! Remember to post your questions here.

Links from today's office hours:

https://www.elastic.co/blog/elasticsearch-is-open-source-again
https://www.bleepingcomputer.com/news/security/halliburton-cyberattack-linked-to-ransomhub-ransomware-gang/
https://www.dogesec.com/blog/full_text_rss_atom_blog_feeds/
https://llmstxt.org/
https://www.infoq.com/news/2024/09/figma-ecs-kubernetes-eks/?utm_source=tldrdevops
https://aws.amazon.com/about-aws/whats-new/2024/08/amazon-s3-conditional-writes/
https://aws.amazon.com/about-aws/whats-new/2024/09/amazon-dynamodb-attribute-based-access-control/
https://repost.aws/articles/ARZy0AK1RZSLSL7wKU8SmO9g/a-first-look-at-aws-cloudformation-iac-generator
https://aws.amazon.com/about-aws/whats-new/2024/08/cloudformation-resource-discovery-template-review-iac-generator/
https://github.com/opentofu/opentofu/blob/main/TSC_SUMMARY.md#sanctions-russia-vs-registry-access
https://forums.docker.com/t/docker-hub-is-not-accessible-from-russia/141678/12
https://github.com/opentofu/registry/pull/824
https://github.com/yandex-cloud/terraform-provider-yandex/issues/258#issue-1234059608
https://github.com/opentofu/opentofu/releases/tag/v1.8.0-alpha1
https://www.freshrss.org/
https://github.com/muchdogesec/history4feed
https://www.arl.org/blog/training-generative-ai-models-on-copyrighted-works-is-fair-use/
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudformation_stack_set.html
https://medium.com/@joachim8675309/devops-concepts-snowflake-vs-phoenix-845e56006ccc
https://masterpoint.io/updates/passing-on-crossplane/
https://www.vcluster.com/

@here office hours is starting in 30 minutes! Remember to post your questions here.

Sorry, had to drap for another meeting but great to catch up with everyone

Links from today's office hours:

https://github.com/aws/amazon-ecs-cli
https://www.law.com/therecorder/2024/08/07/red-hat-files-complaint-to-counter-patent-cases-against-ibm-hp-google-amazon/
https://search.opentofu.org/
https://www.pulumi.com/blog/any-terraform-provider/?utm_campaign=blog&utm_content=305906828&utm_medium=social&utm_source=twitter&hss_channel=tw-837770064870817792
https://github.com/opentofu/registry/issues/920
https://arstechnica.com/tech-policy/2013/07/the-webs-longest-nightmare-ends-eolas-patents-are-dead-on-appeal/
https://github.com/opentofu/opentofu/issues/741
https://log.martinatkins.me/2024/05/22/terraform-ephemeral-values/
https://cloudtrail-events-react.pages.dev/
https://reclaim-the-stack.com/
https://github.com/stacklok/minder
https://github.com/stacklok/minder-rules-and-profiles/tree/main
https://github.com/stacklok/minder-rules-and-profiles/blob/main/rule-types/github/scorecard_enabled.yaml
https://aws.permissions.cloud/
https://aws.permissions.cloud/iam/ce
https://netflixtechblog.com/noisy-neighbor-detection-with-ebpf-64b1f4b3bbdd
https://github.com/hamzabouissi/fissaa
https://www.waypointproject.io/
https://dagger.io/
https://garden.io/
https://discuss.hashicorp.com/t/refresh-state-after-apply-recommendations-best-practices/34354/3
https://registry.terraform.io/providers/hashicorp/awscc/latest

So I went to ChatGPT, and asked some questions about concepts I wanted to do, and wow, it is so clear. Questions for concepts I would ask are:

1. In DevOps, what's pets vs cattle
2. In DevOps, what's bake vs fry
3. In DevOps, what's snowflake server vs phoenix server
4. In DevOps, what's service discovery vs change configuration
In the later, it actually got stuff right. For SD, it mentioned consul, etcd, and kubernetes built-in w kube-proxy, and it also for change configuration, mentioned Puppet, Ansible, and Terraform.

Might not make the meeting but for this week…
https://blog.kubecost.com/blog/ibm-acquisition-announcement/

Does anyone have favorite sources for incident recaps? I enjoy reading the GitHub blog and Google status page but curious where others like!

@here office hours is starting in 30 minutes! Remember to post your questions here.

The Secrets store csi driver works very well for those with hashicorp vault in their environment https://secrets-store-csi-driver.sigs.k8s.io/ (it supports aws/azure/vault providers)

Links from today's office hours:

https://github.com/aws/amazon-ecs-cli
https://prometheus.io/blog/2024/09/11/prometheus-3-beta/
https://github.com/noperator/sol
https://blog.kubecost.com/blog/ibm-acquisition-announcement/
https://docs.cloudposse.com/layers/eks/design-decisions/decide-on-secrets-management-for-eks/
https://docs.cloudposse.com/layers/github-actions/design-decisions/decide-on-self-hosted-runner-architecture/
https://coolaj86.com/articles/vanilla-devops-git-credentials-cheatsheet/
https://serverlessca.com/
https://cyberinsider.com/20-domain-purchase-exposed-mobis-critical-security-flaw/
https://medium.com/@KevsAlex/interpreting-terraform-plan-outputs-with-the-help-of-an-llm-8f9824c63ecd
https://medium.com/@williamwarley/harnessing-apache-mesos-and-marathon-a-practical-deployment-guide-on-vmware-and-aws-4919d95ffaf7
https://github.com/bitnami-labs/sealed-secrets

I've requested an invite to the Office Hours call a few times, but never seem to get an invite sent.
Any suggestions on what I should do?

Super interesting vulnerability discovery that allows remote code execution without any interaction for the Arc Browser: https://kibty.town/blog/arc/

@here office hours is starting in 30 minutes! Remember to post your questions here.

Links from today's office hours:

https://tanka.dev/
https://github.com/octo-sts/app
https://www.linkedin.com/posts/navam-w_today-marks-the-end-of-my-eight-year-journey-ugcPost-7244028270067798018-A-Wd?utm_source=share&utm_medium=member_desktop
https://kibty.town/blog/arc/
https://www.theregister.com/2024/09/18/open_source_maintainers_underpaid/
https://grafana.com/oss/oncall/
https://www.theregister.com/2024/09/19/kelsey_hightower_civo/
https://www.bleepingcomputer.com/news/security/clever-github-scanner-campaign-abusing-repos-to-push-malware/
https://stack-auth.com/
https://github.com/cmackenzie1/tfstate-worker
https://www.zdnet.com/home-and-office/work-life/a-catastrophic-browser-flaw-is-patched-almost-immediately-heres-how/
https://support.atlassian.com/jira-service-management-cloud/docs/start-shifting-from-opsgenie-to-jira-service-management/
https://github.com/cloudposse/helmfiles/blob/b6f6066af5f0fda0fc7dce2e7c0ce28d438b4c26/deprecated/portal.yaml#L138
https://github.com/ory/oathkeeper
https://www.pomerium.com/
https://pidgin.im/plugins/?publisher=all&query=&type=