SweetOps #general for September, 2024

General Discussions

2024-09-01

SweetOps

07:00:07 PM

Hey everyone, give a warm welcome to our newest members!

@Chris Redwine

Good to have you here =)

2024-09-02

SweetOps

07:00:02 PM

Hey everyone, give a warm welcome to our newest members!

@Chris Redwine
@Honeyball
@Mike
@simplyumair17

Good to have you here =)

Dhamodharan

09:20:14 PM

Hello #general

I have my application hosted on gcp vm and I have configured the VM to a loadbalancer and the same is mapped to cloudflare with my organisation’s url. I have configured the public loadbalancer, now facing a challenge with firewall rule that added to the instance.

Firewall rule added port 8080 to the instance from the loadbalancer IP(added the public IP of google’s IP list https://cloud.google.com/load-balancing/docs/https#firewall-rules) because of this all the public requests are reaching my loadbalancer IP and its forwarding to 8080 port to the backend.

But i wanted the loadbalancer to listen only from the cloudflare’s Ip range ( https://www.cloudflare.com/en-gb/ips/rather) listening from public. How can i restrict my 8080 port to listen from LB IP but it should allow public to reach the LB.

Can someone help on this?

Gabriela Campana (Cloud Posse)

02:00:56 PM

@Andriy Knysh (Cloud Posse) @Yonatan Koren

toka

07:32:04 AM

@Dhamodharan you need to attach Cloud Armor WAF with a IP whitelisting rule

Dhamodharan

11:59:57 AM

thanks @toka I found the similar article, trying that. Will post again if i have any challenges.

Thanks @Gabriela Campana (Cloud Posse) for your support aswell.

2024-09-03

SweetOps

07:00:04 PM

Hey everyone, give a warm welcome to our newest members!

@Chris Redwine
@Honeyball
@Mike
@simplyumair17
@Ignacio Ovsannikov
@Maryia

Good to have you here =)

2024-09-04

SweetOps

07:00:15 PM

Hey everyone, give a warm welcome to our newest members!

@Chris Redwine
@Honeyball
@Mike
@simplyumair17
@Ignacio Ovsannikov
@Maryia
@Pierre-Luc Maheux
@Hitarth
@chamilad
@mohitgaikwad9
@Emmanuel O
@Jamie Jackson
@harshanahmad940

Good to have you here =)

2024-09-05

05:02:19 PM

Has anyone checked out stacklok/minder for open source maintenance ? They have a lot of open source rules. I was forwarded this one which proposes a github action per repo in an org for enablement of openssf’s scorecard.

SweetOps

07:00:02 PM

Hey everyone, give a warm welcome to our newest members!

@Chris Redwine
@Honeyball
@Mike
@simplyumair17
@Ignacio Ovsannikov
@Maryia
@Pierre-Luc Maheux
@Hitarth
@chamilad
@mohitgaikwad9
@Emmanuel O
@Jamie Jackson
@harshanahmad940
@CL YONG
@Rahul kumar
@Sashidhar Thallam
@Emmanuel Kenze
@himanshu.a.varia

Good to have you here =)

2024-09-06

SweetOps

07:00:06 PM

Hey everyone, give a warm welcome to our newest members!

@Chris Redwine
@Honeyball
@Mike
@simplyumair17
@Ignacio Ovsannikov
@Maryia
@Pierre-Luc Maheux
@Hitarth
@chamilad
@mohitgaikwad9
@Emmanuel O
@Jamie Jackson
@harshanahmad940
@CL YONG
@Rahul kumar
@Sashidhar Thallam
@Emmanuel Kenze
@himanshu.a.varia
@kirstenruge
@Patrick
@cschandu22

Good to have you here =)

2024-09-07

SweetOps

07:00:05 PM

Hey everyone, give a warm welcome to our newest members!

@Chris Redwine
@Honeyball
@Mike
@simplyumair17
@Ignacio Ovsannikov
@Maryia
@Pierre-Luc Maheux
@Hitarth
@chamilad
@mohitgaikwad9
@Emmanuel O
@Jamie Jackson
@harshanahmad940
@CL YONG
@Rahul kumar
@Sashidhar Thallam
@Emmanuel Kenze
@himanshu.a.varia
@kirstenruge
@Patrick
@cschandu22
@Callum
@Roman Orlovskiy
@Aldana
@Lee
@steph.monclova

Good to have you here =)

2024-09-08

mauryapatel093

05:40:54 PM

mauryapatel093

05:54:09 PM

Hi i am GreenApple undergrad student recently discovered domains like devOps and SRE …etc. what steps shall i take in which direction in order to dive deep and explore this domain, any precautions to look out for , any resources as such to get started with any guidance would be much appreciated. Thank You .

Gabriela Campana (Cloud Posse)

02:04:33 PM

@Dan Miller (Cloud Posse)