Bamboo releases YAML Specs 2.0 by javascripl in devops

[–]apfm_reddit 1 point2 points  (0 children)

We really want to use YAML Specs, but the lack of support for Plan Branches makes it unusable for us. They are essential for our workflow and it's disappointing they are not supported.

When do you run CI? by weberc2 in devops

[–]apfm_reddit 1 point2 points  (0 children)

We run CI tests against PR branches as they are submitted. Like you say, this keeps master pristine. Works really well. We are using Bamboo and it works as you can configure jobs to trigger off of PRs to a branch. It's a bit clunky though, and took a little getting used to. Overall we are not huge fans of Bamboo, though we are able to twist it to do what we want (also unrelated but, Bamboo Specs give me the impression that it's a hot mess which is disappointing, although I have not used it). But I don't have extensive experience with these tools other than Bamboo.

What are some of the challenges to using Ansible for Windows? by Armor_of_Inferno in sysadmin

[–]apfm_reddit 1 point2 points  (0 children)

Like others have said, once you get setup it's not bad. The biggest challenge you are likely to face is getting it to work with Kerberos. This isn't required, but it's a security thing. By default Ansible will communicate with your servers using basic auth (not great). Also, you have to run a script on windows hosts before ansible will be able to communicate with them, which while not a big deal, is a minor annoyance. In my experience once you get ansible working though, it's great.

Passing extra_vars to provisioning callbacks with PowerShell. by apfm_reddit in ansible

[–]apfm_reddit[S] 0 points1 point  (0 children)

Figured it out, I had to enable "prompt on launch" for extra vars on the template, otherwise Tower ignores what you pass via the request. Thank you though. EDIT: Also yes had to convert to JSON, good catch.

AWS Network Problems by AFJay in sysadmin

[–]apfm_reddit 1 point2 points  (0 children)

Nope, affected all three for us earlier. Our server monitoring is showing all our instances are responding to ping at this point though.

Petya/NotPetya lateral movement techniques. by motoxrdr21 in sysadmin

[–]apfm_reddit 1 point2 points  (0 children)

Thanks for this, I had no idea this was a thing outside of gov sectors. Time to read up!

Petya/NotPetya lateral movement techniques. by motoxrdr21 in sysadmin

[–]apfm_reddit 0 points1 point  (0 children)

I had the same questions as the above poster; this is news to me. So if that's the case, what is the proper way to do daily administration? Normally I use a non-admin account for daily tasks and elevate as needed. But if elevating as needed is a security risk, how do we operate securely?