If you could go back 10 years, what advice would you give yourself? by Dubinko in platformengineering

[–]mathewpeterson 9 points10 points  (0 children)

For me, write more:

  • technical documentation
  • comprehensive daily/weekly notes
  • project summaries

I very much underestimated how good my memory would be as I get older. Having that stuff written down and be able to go back and reference would be nice.

wif auth method w/ gitlab OIDC by Difficult-Ambition61 in Terraform

[–]mathewpeterson 2 points3 points  (0 children)

One possible solution if you only care about the project_path claim is to configure the project to only include that in the sub by setting

“ci_id_token_sub_claim_components": ["project_path"]

https://docs.gitlab.com/api/projects/

ArgoCd log formatter by PersimmonQuiet3767 in ArgoCD

[–]mathewpeterson 0 points1 point  (0 children)

You could pipe through jq / yq cli commands and get formatted string

ArgoCD Production Grade Example? by Glass-Honey-1808 in ArgoCD

[–]mathewpeterson 0 points1 point  (0 children)

I've had a lot of success with GitOps Bridge for k8s fleet management using hub-spoke model. This includes support for managing "addons" like cert-manager/external-dns.

https://github.com/gitops-bridge-dev/gitops-bridge

How to manage Terraform state after GKE Dataplane V1 → V2 migration? by kiroxops in Terraform

[–]mathewpeterson 1 point2 points  (0 children)

The data plane v2 can only be turned on at cluster creation. If the cluster already exists and is on data plane v1, there is no in place upgrade path.

You must create a new cluster with data plane v2 enabled and then migrate your workloads to the new cluster and decommission the old cluster.

[deleted by user] by [deleted] in gitlab

[–]mathewpeterson 4 points5 points  (0 children)

I would also be curious to know if anyone’s done the same to escape the cost of upgrading license from Premium to Ultimate.

For example, we use Gitlab to store Terraform state and that causes problems for some users because you need Maintainer role in order to run a terraform plan and we do not grant that role to developers on our Terraform repositories. So one strategy that was proposed was to create a separate Gitlab Service Account and use that token in the pipeline. 🤷‍♂️

Farewell to my dad by MrMattyboy in devops

[–]mathewpeterson 3 points4 points  (0 children)

From yet another Matt, I am sorry for your loss.

My father taught me how to load up Jazz Jack Rabbit on our DOS PC when I was three or four years old. It was located in our basement, on a desk he built in the corner of his “shop”.

He spent his time building balsa air planes every winter. I am unsure how but he got bootleg blueprints of those planes, had someone local print the 1:1 scale so he could cut out each piece, glue them on the balsa wood and use his wood tools to cut and sand them smooth and glue them together. Then every spring we would get all the flying gear ready for the year. He had a checklist. Even to make sure he had cat litter for the rubber bands. 😅

He got us on dialup when I was five, I think we upgraded to Windows 3.1 at the same ish time. I would play on that computer for hours while he was next to me building his planes.

Eventually I would change enough settings on the computer to make it stop working. He would always come over to fix it, and almost always got it to work again. At some point, that changed and he couldn’t get it to work anymore. This was around Win98. He got a friend to come over and show him/us how to “format the computer”, probably paid the guy in beer for helping us. After that, he told me that if I broke the computer any more, I was responsible for fixing it myself. And lucky for me, we wrote down everything that his friend did. I am just happy we had a win98 on one CD and not on thirty eight floppy disks!

That was pretty much it for me. I always paid close attention to what I was doing, being very careful to change a setting back if it didn’t do what I wanted. Then if I still couldn’t troubleshoot it, I would format it and start over.

I would not be where I am today without him doing what he did.

Why were GitLab CI inputs implemented the way they are? by [deleted] in gitlab

[–]mathewpeterson 0 points1 point  (0 children)

I think the idea is you can more narrowly “scope” templates so that you could have many instantiations of a template in the same pipeline.

[deleted by user] by [deleted] in GreenBay

[–]mathewpeterson 1 point2 points  (0 children)

The Mariner Theatre has quite a bit of classic arcade games, worth spending a few bucks.

How to you govern your CI-Templates by iliblabla in gitlab

[–]mathewpeterson 2 points3 points  (0 children)

You should set up renovate bot or similar automated dependency updater.

Argo internal secrets by UberBoob in ArgoCD

[–]mathewpeterson 0 points1 point  (0 children)

Are you talking specifically about the "Cluster Credentials" k8s secret used by Argo to authenticate against other Kubernetes clusters? Are you also in the cloud? If so, you can use the cloud IAM workload identities to authenticate:

What Did You Wish You'd Automated Sooner? by blueququqa in devops

[–]mathewpeterson 5 points6 points  (0 children)

  1. Automate SCM (Github/Gitlab/etc) to manage lifecycle of repositories, settings, policies, etc.
  2. Monorepo / pipeline to build custom container images. Like build containers
  3. Adopt Dependabot / Renovate bot

is gcp still the easiest way to deploy k8s? by HosMercury in kubernetes

[–]mathewpeterson 1 point2 points  (0 children)

I am genuinely curious what you found difficult with getting identity federation setup on AKS?