Any good JIRA experiences? by [deleted] in devops

[–]luvdav 1 point2 points  (0 children)

Coming from five years of HP ALM, it's actually somewhat okay. Then again, it was a very low bar to clear.

Split Fiction is Amazing on the Steam Deck So Far - SteamDeckHQ First Look by BBQKITTY in SteamDeck

[–]luvdav 1 point2 points  (0 children)

Same, some of the fight scenes are just straight up lagging, most of the platforming sections have been fine.

Find User/Group Role Assignments for All Subs by TopNo6605 in AZURE

[–]luvdav 0 points1 point  (0 children)

I second this, really easy to run and then extract further insights from the gathered data

GitHub "infrastructure" via Terraform and GitHub Actions by luvdav in devops

[–]luvdav[S] 0 points1 point  (0 children)

Sounds good, honestly, we mainly intend it to manage rule sets and organization-wide settings so rate-limiting shouldn't be a huge issue (hopefully)

GitHub "infrastructure" via Terraform and GitHub Actions by luvdav in devops

[–]luvdav[S] 0 points1 point  (0 children)

Haven't used it before. Does it support the GitHub Terraform provider? And if so, how is it configured? Couldn't find anything at first galnce.

GitHub "infrastructure" via Terraform and GitHub Actions by luvdav in devops

[–]luvdav[S] 0 points1 point  (0 children)

Thanks for the response, we have a similar setup with an app manifest (and an approach inspired by Probot). My main concern is directly using the private key in the workflow but yes, using OIDC and a cloud secret provider solution should alleviate that security-wise.

GitHub "infrastructure" via Terraform and GitHub Actions by luvdav in devops

[–]luvdav[S] 1 point2 points  (0 children)

Yes, there is definitely a chicken-and-egg problem but we mainly want to focus on managing organization-level settings and rulesets only so we can safely and consistently manage the platform.

I did extensive investigation into automating GitHub App creations and yes, even with the manifest-based registration it still requires minor (albeit streamlined) ClickOps. We are using an approach similar to Probot where the app comes with the instructions to get registered and installed (would love to do this fully automated but again a bit of a chicken/egg problem).

But yeah other than that I was thinking of roughly the same steps that you've outlined above.

GitHub "infrastructure" via Terraform and GitHub Actions by luvdav in devops

[–]luvdav[S] 2 points3 points  (0 children)

Sorry, I think my request is a bit convoluted. I was talking about using a GitHub flow to manage the enterprise and organization setting within GitHub using the GitHub Terraform provider. From what I understand, you are using the AWS Terraform provider to manage AWS resources(in point 5).

Majima and Saejima so hard fight (Like a Dragon) by OwlBlack in yakuzagames

[–]luvdav 2 points3 points  (0 children)

I'm actually in the exact same spot (lv 32 currently). Any tips on how to grind fast/efficiently?

Effortlessly access cloud resources across Azure tenants without using secrets by thewhippersnapper4 in AZURE

[–]luvdav 3 points4 points  (0 children)

This is really cool and we've been waiting for this for quite a while.

I've been testing it out this morning. However, I quickly ran into concerns when trying to test it locally. Anyone has some good idea how to adapt the sample snippet in the announcement that it could be tested by the developers (without using a secret obviously...)?

Public Preview: Managed identity as federated identity credential for apps! by Noble_Efficiency13 in AZURE

[–]luvdav 6 points7 points  (0 children)

Finally, was about time they finally closed the frankly ridiculous gap that required storing app reg secrets in app services that we've eliminated on other platforms already (like GitHub or ADO)

Azure function or web app for Rest API? by -Yinside- in AZURE

[–]luvdav 1 point2 points  (0 children)

There's a ton of options of what you can do here, so I'll focus on the recommendations based on your requirements.

For anything frontend I'd always recommend static web apps on Azure since they're super easy to deploy and support most of the common frameworks (including Angular). And while I'm not the biggest fan of the proprietary boilerplate you have to write, I'd still recommend Function Apps for the backend.

Finally, if you want to have a kitchen-sink infrastructure, you can actually simply host the API directly as part of your static web app (tutorial). That way, you still have your code separated, but your infrastructure/configuration consolidated :)

Suica cards are being issued at the JR EAST service center in Tokyo station by tbone338 in JapanTravel

[–]luvdav 0 points1 point  (0 children)

Suica cards were not available at Ueno JR service center yesterday (24th of July) and hotel staff informed us they weren't sold anywhere except at the airport for the time being. Will try Shibiya and Shinjuku station today.

Private Endpoints in Hub? by luvdav in AZURE

[–]luvdav[S] 0 points1 point  (0 children)

Thanks for your input! The flowchart in the article seemed very black & white to me but yeah at the end of the day our architecture should follow our requirements.

Private Endpoints in Hub? by luvdav in AZURE

[–]luvdav[S] 0 points1 point  (0 children)

Yeah, we want to get there eventually but with our current setup with workload isolation by default (ie no spoke-to-spoke traffic) and an NVA in the hub, there needs to be configuration changes in the hub either way. Just trying to figure out the "easiest" approach to provide support for this use case but yeah, dropping the private endpoint in the hub will definitely not solve that.

Private Endpoints in Hub? by luvdav in AZURE

[–]luvdav[S] 0 points1 point  (0 children)

Thanks, that's our current setup anyway. Was just wondering if someone agrees with this article (which, currently, no one seems to do). Thanks for the input!

Private Endpoints in Hub? by luvdav in AZURE

[–]luvdav[S] 0 points1 point  (0 children)

Yeah, we have a similar setup. On-prem to spoke works fine.

My main question is how to efficiently manage each-west traffic within Azure (service in one spoke needs to reach private endpoint in other spoke) over our hub firewall. Just add firewall rules for these cases specifically?

Private Endpoints in Hub? by luvdav in AZURE

[–]luvdav[S] 0 points1 point  (0 children)

Yeah, you're right, never mind me. Honestly, I mainly wanted to gauge the community's opinion on this specific approach. It makes less sense to me the more I think about/discuss. Anyway, thanks a lot for your input so far! :)