aynsof

We ran Terraform in Bitbucket Pipelines builds - full testing with awspec, remote state in S3, statefile locking in DynamoDB.

It might surprise you, but there are cases where you might not want to run Terraform in a pipeline.

I was of the same opinion as the GP until I started using Terraform. Coming from a sysadmin background, I was always told to use default tools 'because one day you'll ssh into a random server and it won't have any of your fancy tools and config'.

So I started using Terraform. A lot. Day in, day out, I would type terrafrom, teraform, terrafomr. And I'm a good typist! But something about that word just makes it hard to get out right. (I have a similar issue with 'infrastructure'.)

Finally replacing it with a 'tf' alias saved me a lot of frustration.

A real problem I've found in Australia is the overuse of fog lights. People will drive around the suburbs with four lights blasting from the fronts of their SUVs. It's widespread, it's dangerous, and it's illegal, but it's apparently not enforced.

Someone more familiar with satellites can correct me, but from my understanding you should be able to detect deforestation from real-time satellite data. You alert on changes in the level of greenery in the images. The indicator might trail behind detecting chainsaw noises, but it wouldn't require the mass distribution of detector devices.

Have you looked into Cloud Foundry? From my understanding, it can operate like a FaaS provider or like a Docker container scheduler.

It's weird that the author chooses Iceland as an example of a GMT+0 country, rather than Britain which is where Greenwich is.

It looks like they've been phasing it in. This is from March last year: https://techcrunch.com/2017/03/22/medium-debuts-its-paid-mem...

Interesting write-up. I'd love to see stats on how the new database is performing. Have they reduced it from running on 45 4xlarge instances? Do backups still take a day? Was it a good financial decision?

The linked article is a little light on detail. I found this to be a much more interesting explanation of the why/how/where: https://www.techradar.com/news/why-is-jeff-bezos-building-a-...

I don't think that's accurate. We stopped paying because we couldn't justify the expense. Great product, great support, but we didn't have the necessary uptake with users. We would totally use an alternative like this.

Looks like a great tool. The lovely folks at Hava.io are going to be unhappy about this!

Somebody once told me in a meeting: "The company was going to deliver their presentation, but the resource had a baby."

We really need to end this craziness.

I had that same thought initially. When the Minion appeared, though, I was struck by the power of cooperation in achieving great things. We can achieve far more when we band together.

I find it frustrating that we're still having this conversation. I feel like it was common knowledge five years ago that DevOps was a cultural shift, and definitely not a toolset, not a team, not a position title. But I still see the anti-pattern all over the place.

How do we change this? And how do we prevent it from happening to similar movements in future? How do you get people to look at where the finger is pointing, and not the finger itself?

It reminds me of the first line of the Tao Te Ching: "The Tao that can be named is not the real Tao."

He talks about how important it is for people not to feel judged for taking more than the minimum amount of time off, then calls out a member of his team by name:

"Tyler has taken over double what most of the rest of the team has at this point."

But it's fine, because Tyler has a legitimate reason that we're assured no-one is judging him for:

"Tyler got married and went on a honeymoon. Literally no one in the company is mad that he did that."

What if my reason is because I just wanted to have some time away? Or because I had some deeply personal reason that I don't feel comfortable advertising? This system doesn't exactly scream 'psychological safety' to me.

It was a mixture of the two. Some of the phones were purchased by the company, some were personal devices.

I was asked by a previous employer to perform the rollout of MDM to our mobile fleet, and I fully agree with everything in the article. Restrictions were implemented at the whim of my boss.

As an example, he found out there was a feature in the MDM service to block access to YouTube. He made sure that was ticked. Why? He didn't want people wasting time on 'his' phones. And the helpdesk would explode every time a new restriction was rolled out, but he didn't seem to notice or care. In his mind they were his phones.

That was a conversation we were just having today. We definitely went out further than was safe, simply because there were lifeguards on the beach. I've been to plenty of beaches without lifeguards and been far more risk-averse.

It wasn't a conscious choice. It was only something I became aware of once I'd had that dangerous experience in the water.

Risk management is a funny thing.

I was out in the surf off the NSW coast today, and it was scary as hell. Massive waves that suck you in and spin you around like a washing machine, coupled with a strong current pulling you out to deep water.

I definitely would have felt safer knowing there was a drone in the sky above me, ready to drop a flotation device on me. Our lifesavers do a great job, but it's a long, long way from the beach out to a drowning swimmer.

At Geoscience Australia there are a handful of positions that deploy remote sensors for things like seismic monitoring. One of my friends is at this very moment in Antarctica to deploy sensors. If you're in the States, maybe look into NOAA or something similar.

Yup, seconded. My first thought was that I was seeing Chrome's no SSL warning. I'd recommend changing the colour scheme, even just slightly.

I got a Vågsberg/Sporren: https://ikea.com/au/en/catalog/products/spr/29006662/

I definitely wouldn't recommend it to someone who hasn't tried it out first, though.

I'm hooked on Ikea stools/chairs for work. My back just can't deal with those mushy OSHA-compliant office chairs. My recommendation would be to head to your nearest Ikea and try them all out.

The other thing that really helped my back pain was getting some Alexander Technique lessons from an experienced teacher. YMMV, of course.

Best of luck!

Context: https://www.theguardian.com/world/2018/jan/02/outcry-as-yout...

Apparently a YouTube 'celebrity' released a video showing the body of a man in Japan who had committed suicide. YouTube is apologising for not having dealt better with the issue.

Especially when you blame your investors for how hard your job is these days: "[It] used to be that way but its changed in the last ten years because the activists [investors] have gotten more involved."

Those darn meddling activists!

Fantastic ideas here! I love your peaceful, holistic approach to an industry that is so often dominated by stress, last-minute planning, and local optimisation at the expense of the whole. Thanks so much for sharing.

"Children will be allowed to bring their phones to school, but not allowed to get them out at any time until they leave, even during breaks."

https://www.theguardian.com/world/2017/dec/11/france-to-ban-...

You're right! Thanks for the pick-up.

I'd change the statement in my parent post, but I don't seem to be able to edit it.

$288 comes from here: https://aws.amazon.com/directoryservice/pricing/

It looks like AD Connector is much less: https://aws.amazon.com/directoryservice/other-directories-pr...

I tested this out just yesterday. It was fairly easy to set up - enable SSO, create a Directory Service, add a management EC2 instance, and you're pretty much up and running.

You've got to set up your own Active Directory using Directory Services, which is $288USD/month minimum for two domain controllers.

In order to have MFA for logging into the console (non-negotiable in my opinion), you have to configure your own RADIUS server.

And the question of how to manage access keypairs still remains unanswered, as far as I can tell.

I don't know if this is going to supplant Azure AD as our SSO method of choice.