#general (2023-09)
General conversations related to DevOps/Automation
General Discussions
2023-09-01
Hey everyone, give a warm welcome to our newest members!
- @Andrea Saez
- @caroldelwing
Good to have you here =)
Hello there! :)
Welcome, @caroldelwing
2023-09-02
Hey everyone, give a warm welcome to our newest members!
- @Igor Peric
Good to have you here =)
12023-09-04
Hey everyone, give a warm welcome to our newest members!
- @Michael
- @Petar Nikov
- @Shiva S
Good to have you here =)
2023-09-05
Hey everyone, give a warm welcome to our newest members!
- @Victor Orlov
- @adam114
- @Nilesh Kanawade
- @Michael
- @Michael Koroteev
- @Wilson Njogo
Good to have you here =)
42023-09-06
Hey everyone, give a warm welcome to our newest members!
- @Devin Roark
- @Ben Mills
- @Vitali
- @jz
- @Hernan Daguerre
- @nelloserio1992
- @Mauricio Dominguez
Good to have you here =)
1
Many thanks!
Hi every1!
Hi there!
2023-09-07
Hey everyone, give a warm welcome to our newest members!
- @reegnz
- @Stevie
- @Doyeon Hwang
- @James Worville
- @Leandro Lamaison
Good to have you here =)
1
Many thanks
2023-09-08
Hey everyone, give a warm welcome to our newest members!
- @Phil Chen
- @Lakshay Nasa
- @Iulian Diminenco
- @Baldwin Sung
Good to have you here =)
2023-09-09
Hey everyone, give a warm welcome to our newest members!
- @SUJIT SAHU
Good to have you here =)
1
I’m new to DevOps, I’m thinking CI/CD for my projects. I don’t trust GitHub Actions for security reasons, as to give you direct access to my production servers. Instead, I’m considering using a dedicated intermediate deployment server for added security. This server would handle the connection to my production servers, instead of GitHub. so isolate my production servers from gihutb actions, is a good practice? or could you give me a better suggestion?
Perhaps post on #release-engineering instead, or #github-actions or #gitops or #atlantis
As your are admittedly new to DevOps, I recommend trying to use a preexisting tool rather than build. Better to learn what you don’t like about existing tooling, than build from scratch.
And which one do you recommend ?
Are you planning to have Terraform deployments?
2023-09-10
Hey everyone, give a warm welcome to our newest members!
- @Danielsham
Good to have you here =)
2023-09-11
Hey everyone, give a warm welcome to our newest members!
- @dhineshtd
- @Kopal Anand
- @Vinoth Gulapala
Good to have you here =)
2023-09-12
Hey everyone, give a warm welcome to our newest members!
- @Alexandra Samohina
- @Gaurav Kardam
- @nvb
Good to have you here =)
2023-09-13
Hey everyone, give a warm welcome to our newest members!
- @John Oberly
- @Sairam Madichetty
- @Yurii Kuznetsov
- @chidubemchinwuba01
Good to have you here =)
22023-09-14
Hey everyone - apologies if this is the wrong channel for this - happy to move if this is the case. I’m at a new org and I’m on the verge of migrating everything away from the current deployed setup (all AWS console) into IaC. I’ve got good experience with Terraform (mainly vanilla and some Terragrunt) but I want to get my head around a proper structure and some strong conventions. I’ve looked into the CloudPosse offerings, but think it’s likely too much for my organisation to go for. The things I’m looking for are:
• Ability to instrument and deploy multiple AWS accounts and integrate them with SSO
• The ability to eventually manage the entire deployment of IaC from a pipeline - exclusively
• Implement my own modules (non-CloudPosse provided) ones with relative ease. Has anyone gone fully “in” on the Atmos toolchain and associated structure? Would you be happy to briefly explain your setup? And if you are using Atmos / SweetOps how are you finding it - assuming you are just using the open-source parts of the setup.
For some context - I am the sole engineer to manage infrastructure (amongst other responsibilities) - so I’d like to make the right choice at the start, as I don’t want to spend a long time implementing things that already have had time and energy put into them. The alternatives for me are things like Terragrunt - so if you choose Atmos over TG - would be keen to hear your thoughts!
This would be good question for refarch
also, happy to provide a demo
Hey everyone, give a warm welcome to our newest members!
- @amitshr6779
- @GR
- @Radu Grecu
- @Tristan Murray
- @Jacob Larvie
- @m4jk3l
- @Michael Wong
- @David Gibbons
- @Manish Pandey
- @Jonas
Good to have you here =)
22023-09-15
All, I have a volume attached to machine A, now I need to mount the volume to machineB, but I am unable to access the data, as I checked the owner permissions got changed. when I investigate, the same user has 1002:1002 in machine A, but in machineB, that uid:gid is changed to someother user which is why I’m unable to access the data. Is there a way to script it to assign the uid:gid to that user default?? is it a good approach??
Can you run and show the output of id 1002 on both machines?
Hey everyone, give a warm welcome to our newest members!
- @jenkif
- @p99
- @Sebastian Birsa
Good to have you here =)
2023-09-16
Does Cloud Posse have anything specific to Bitwarden/Vaultwarden deployment on EKS, or anything for it on the road map?
Nope. Not at this time…
Hey everyone, give a warm welcome to our newest members!
- @Joe
Good to have you here =)
12023-09-18
Hey everyone, give a warm welcome to our newest members!
- @Gihana innocent
- @gauravn
- @Emmanuel
- @Dmitrii
- @Mavel KANDEL
- @saigopi.2011
Good to have you here =)
12023-09-19
Hey everyone, give a warm welcome to our newest members!
- @Shiva Panda
- @Simon Hofmann
- @Nikhil Agarwal
Good to have you here =)
2023-09-20
Hey everyone, give a warm welcome to our newest members!
- @amaddox
- @Jake Levine
- @Deyan Peev
Good to have you here =)
22023-09-21
Hey everyone, give a warm welcome to our newest members!
- @Patrick Cheng
- @Jon Ryser
- @RickA
- @Doug Bergh
- @Quinn Thomson
- @Muhammed Tausif
Good to have you here =)
2023-09-22
Thank you
Hey everyone, give a warm welcome to our newest members!
- @Adam Markovski
- @amitesh_agnihotri
- @Jeff Tribble
Good to have you here =)
12023-09-23
Hey everyone, give a warm welcome to our newest members!
- @Peyton
- @adeolayomadesamuel
Good to have you here =)
2023-09-24
Hey everyone, give a warm welcome to our newest members!
- @Adetokunbo Ige
- @jay
- @an.rahulreddy
Good to have you here =)
12023-09-25
Hey everyone, give a warm welcome to our newest members!
- @Gnanesh
- @Rafal Rabenda
- @Oleksandr Polishchuk
Good to have you here =)
2023-09-26
Hey everyone, give a warm welcome to our newest members!
- @moroianuadrian884
- @ashishpawar11111
Good to have you here =)
2023-09-27
Everyone knows OWASP has a convenient “top 10” list of potential security risks, e.g. SQL Injection
Turns out they have other lists too, like Risks for LLM!s Here’s the first three https://owasp.org/www-project-top-10-for-large-language-model-applications/
LLM01: Prompt Injection
Manipulating LLMs via crafted inputs can lead to unauthorized access, data breaches, and compromised decision-making.
LLM02: Insecure Output Handling
Neglecting to validate LLM outputs may lead to downstream security exploits, including code execution that compromises systems and exposes data.
LLM03: Training Data Poisoning
Tampered training data can impair LLM models leading to responses that may compromise security, accuracy, or ethical behavior.
They also have risks for APIs, and also an entire site of cheat sheets: https://cheatsheetseries.owasp.org/index.html
Hey everyone, give a warm welcome to our newest members!
- @shmileee
- @Hassan Shehzad
- @mukhtarapril2000
- @Omar Shams
Good to have you here =)
2023-09-28
Hey everyone, give a warm welcome to our newest members!
- @Alex Shea
- @Rustam
- @manee kantta
- @Kimberly Cottrell
- @Conor Maguire
- @Julien Bouchery
- @Akın Tekeoğlu
- @marksie1988
Good to have you here =)
11
2023-09-29
https://github.com/jetporch/jetporch was launched earlier today
Interesting, from what I can tell it’s basically an ansible clone+improvements in rust. I’ve been working on ansible stuff lately and have thought it’d be really nice to have a single-binary version of ansible to simplify things. Considering it’s written by the same person who wrote Ansible in the first place I’m a little surprised and disappointed they didn’t make it 100% compatible with existing playbooks/tasks. That would have been really nice.
Hey everyone, give a warm welcome to our newest members!
- @Jiri Vorel
- @Alexandar Alexandrov
- @Charles Ibrahim
- @vamshi
- @kevin.saffarian
- @Monica Hart
- @Woody Pearson
Good to have you here =)
12023-09-30
Hey everyone, give a warm welcome to our newest members!
- @cdsbarrera
- @Venkat Ravuri
Good to have you here =)