Continuous Integration/build engineering/devops thread

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > The Cavern of COBOL > Continuous Integration/build engineering/devops thread

vanity slug: Jul 20, 2010

Matt Zerella posted:

Ami reading this right that you can't stand up Amazon Workspaces with terraform? Just the VPC and the Directory server?

Yeah, because a lack of API support from AWS: https://github.com/terraform-providers/terraform-provider-aws/issues/434

e: Oh, there's progress: https://github.com/terraform-providers/terraform-provider-aws/pull/11608

# ¿ May 8, 2020 20:46

Adbot: ADBOT LOVES YOU

# ¿ May 15, 2024 13:08

vanity slug: Jul 20, 2010

Matt Zerella posted:

But I can stand up the VPC for it? Or is that not a good idea if I'm plunking manually created stuff into it?

The VPC resources you create in Terraform don't care about what you put in it, and it'd create a good base to import the other Workspaces resources once it's supported. I'd go for it.

# ¿ May 8, 2020 21:16

vanity slug: Jul 20, 2010

Boz0r posted:

What is it called in Azure DevOps when committed code gets rejected if it doesn't build and pass all tests? People from our team break our pipelines all the time and I'm sick of it.

branch policies, i guess? https://docs.microsoft.com/en-us/azure/devops/repos/git/branch-policies?view=azure-devops

# ¿ May 11, 2020 09:00

vanity slug: Jul 20, 2010

VS Code?

# ¿ Aug 27, 2020 20:27

vanity slug: Jul 20, 2010

We've been doing SAFe for the past year. To me, the experience is 50 people being stuffed into a small meeting room without proper chairs or any ventilation for two days and being told to lose all autonomy.

# ¿ Oct 2, 2020 10:51

vanity slug: Jul 20, 2010

LochNessMonster posted:

Unfortunately I'm dealing with on prem VM's, otherwise I'd just have used EKS/AKS/GKE.

Thanks for the feedback everyone.

https://aws.amazon.com/eks/eks-anywhere/

Fresh off the press.

# ¿ Dec 2, 2020 15:20

vanity slug: Jul 20, 2010

at least 0.14 has forward compatible state files

# ¿ Jan 30, 2021 20:50

vanity slug: Jul 20, 2010

i stopped loving around with all that boolean bullshit inside modules when they added count to modules

# ¿ Feb 4, 2021 15:33

vanity slug: Jul 20, 2010

I don't think that module is official. It's one of Anton Babenko's modules iirc and he has a bad case of overengineering.

# ¿ Feb 4, 2021 22:42

vanity slug: Jul 20, 2010

I use tfenv, it's pretty good.

# ¿ Feb 25, 2021 09:16

vanity slug: Jul 20, 2010

gently caress you if your generated password isn't eight digits

# ¿ Apr 10, 2021 12:36

vanity slug: Jul 20, 2010

Yeah, gently caress Alpine.

# ¿ Jan 20, 2022 18:49

vanity slug: Jul 20, 2010

Apigee is neat.

# ¿ Aug 3, 2022 13:08

vanity slug: Jul 20, 2010

Why wouldn't Terraform be the right tool for this job? Sounds like a perfect fit to me.

# ¿ Aug 16, 2022 23:18

vanity slug: Jul 20, 2010

just use nix op

# ¿ Nov 8, 2022 17:50

vanity slug: Jul 20, 2010

github is still way more expensive than gitlab

# ¿ Mar 3, 2023 17:59

vanity slug: Jul 20, 2010

jenkins is good job security but bad all other security

# ¿ May 22, 2023 21:15

vanity slug: Jul 20, 2010

gently caress off alpine

# ¿ Jul 14, 2023 02:22

vanity slug: Jul 20, 2010

hashicorp has a lot of faults, but azure being poo poo to work with isn't theirs

# ¿ Aug 22, 2023 10:24

vanity slug: Jul 20, 2010

HashiCorp Terraform Registry is now for "HashiCorp Terraform" only. That's a nice gently caress you to OpenTF, I guess they'll just have to spin up their own registry.

# ¿ Aug 31, 2023 14:37

vanity slug: Jul 20, 2010

Hadlock posted:

Wow already? That's probably not good for user retention for them, and pretty poor show of face. I'd love to know which exec made that decision, so I know which products to avoid when they get fired and move on to the next place

If this were a less important product I think they might be able to get away with this but most devops people are going to be highly salty about this, like taking the knife out of a butchers hand, they're not going to forget this

It's hashicorps product and all, and they can do what they want but the community has been unwaivering in their opinion on this change

"You may download providers, modules, policy libraries and/or other Services or Content from this website solely for use with, or in support of, HashiCorp Terraform."

This was not in the previous version of the terms of use (link to archive). Updated last week.

# ¿ Aug 31, 2023 16:47

vanity slug: Jul 20, 2010

can't wait for the opentofu / chef collaboration

# ¿ Sep 21, 2023 10:04

vanity slug: Jul 20, 2010

Mustache Ride posted:

Also if you subscribe to Jira cloud you get opsgenie, Atlassian's pagerduty for free.

Yeah, that's great if you're okay with your incident management system being unavailable for over a week.

# ¿ Oct 3, 2023 13:48

vanity slug: Jul 20, 2010

I still can't make MR X depend on MR Y, which depends on MR Z. Can't choose whether to expand multi-line scripts in GitLab CI either. But fortunately, there's now a webhook for emoji reactions.

# ¿ Oct 4, 2023 23:11

vanity slug: Jul 20, 2010

it's the jenkins of this decade

# ¿ Oct 11, 2023 10:39

vanity slug: Jul 20, 2010

pretty much all of vault's announcements this year have been "we added a feature to our piece of poo poo cloud platform, please give us money"

# ¿ Oct 13, 2023 09:56

vanity slug: Jul 20, 2010

ruamel.yaml does yaml 1.2 and has its own host of issues (like using sourceforge in tyool 2023)

# ¿ Dec 17, 2023 22:39

vanity slug: Jul 20, 2010

stop thinking there's logic behind it, a random pm is assigned short naming duty and they just make it up

# ¿ Dec 27, 2023 00:47

vanity slug: Jul 20, 2010

LochNessMonster posted:

I agree, but this person has very strong opinions on a product they have 0 experience with.

i love these people, and by love i mean i want to bash their heads in with my keyboard

LochNessMonster posted:

I just need to come up with a way to prevent them reading state locally as to not circumvent the pipeline entirely.

if you're hosting it in s3, setup a bucket policy which only allows access from the ip range of your ci runners.

# ¿ Jan 12, 2024 21:48

vanity slug: Jul 20, 2010

We have a few standard tags but the most useful to me is linking to the repository in which the resource was created

# ¿ Feb 22, 2024 00:42

vanity slug: Jul 20, 2010

I've used Dmarcian before and it works well, I'm using PowerDMARC for my personal domains.

If you're hitting SPF lookup limits you could go for SPF flattening, but in the long run you're better off splitting stuff off to their own subdomains.

# ¿ Mar 18, 2024 21:07

vanity slug: Jul 20, 2010

Docjowles posted:

Annoyed at the terraform AWS provider devs today. They released a new minor version that "fixes" an issue where you could add the same route to a VPC route table multiple times. Which, yeah, that probably shouldn't be allowed. But in practice it didn't hurt anything, it's not like you ended up with multiple routes in reality. AWS just silently ignored the subsequent attempts to create dupes. Now your terraform apply hard fails on the same code.

A module we wrote had a bug, and was creating some harmless dupe routes. I tried to upgrade the provider today and it broke the module. If I remove one of the duplicate declarations, terraform wants to delete the routes. A second plan/apply will restore them since the other declaration is still present. But this still means eating a 30 second network outage. I tried some fuckery with their moved{} syntax but it didn't help in this case, TF still insists on deleting the routes. The best workaround I came up with is manually doing a "terraform state rm" on the resources I am deleting from the code first so it doesn't want to delete them from AWS too. I can pin the provider version to the old version for a while but that's obviously not a long term solution. All of this sucks.

The change they've made is ~technically correct~ but it was not causing any issues whatsoever in practice. Why the hell would you stick this in a 0.01 point release and not sit on it until the next major version with all your other breaking changes

OpenTofu lets you use a removed block for this use case, no idea why Terraform hasn't added this

# ¿ Mar 20, 2024 22:13

vanity slug: Jul 20, 2010

Vulture Culture posted:

The product seems solid but the UX on it feels wobbly as gently caress in the same way as, like, ArgoCD. Definitely not as polished as TFC but it will get the job done

i feel the opposite tbh, spacelift's ux is way more refined than tfc

the pricing and support is good too

# ¿ Apr 27, 2024 22:51

Adbot: ADBOT LOVES YOU

# ¿ May 15, 2024 13:08

vanity slug: Jul 20, 2010

I'm pretty happy with Spacelift, pricing's good (compared to Terraform Cloud) and their support is very helpful and responsive.

# ¿ May 11, 2024 13:28

The Something Awful Forums > Discussion > Serious Hardware/Software Crap > The Cavern of COBOL > Continuous Integration/build engineering/devops thread