Jonathan Matthews jpluscplusm

Don’t Feed the Beast – the Great Recruitment Agency Infestation

“Don’t move to that London” warned my northern grandfather once. “It’s full of spivs”.

The Oxford Dictionary (somewhat chauvinistically) defines a spiv as:

A man, typically a flashy dresser, who makes a living by disreputable dealings

“But I work in IT” I told him. “engineers aren’t like that”.

BOSH Links: Why and How

Audience: anyone in the BOSH ecosystem, whether you work on something open-source or proprietary

"BOSH Links" is a feature which simplifies how data is shared between BOSH-deployed jobs that need to collaborate with one another (e.g. a web server and its backing database). Like many BOSH things, the whole "BOSH Links" thing can seem counter-intuitive at first, and it may not be clear why things are the way they are. This note hopes to show some of the powerful benefits of BOSH Links, and provide examples and explanations that make things more intuitive.

Why?
BASIC: A simple problem statement
BASIC: Putting the puzzle pieces together
ADVANCED: But what about...

Currently, there is an explosion of tools that aim to manage secrets for automated, cloud native infrastructure management. Daniel Somerfield did some work classifying the various approaches, but (as far as I know) no one has made a recent effort to summarize the various tools.

This is an attempt to give a quick overview of what can be found out there. The list is alphabetical. There will be tools that are missing, and some of the facts might be wrong--I welcome your corrections. For the purpose, I can be reached via @maxvt on Twitter, or just leave me a comment here.

There is a companion feature matrix of various tools. Comments are welcome in the same manner.

	#!/usr/bin/awk
	# 1-liner: awk '{for(i=0;i<4;i++){byte=$1%256;ip="." byte ip;$1-=byte;$1/=256}}END{sub(".","",ip);print ip}'

	{
	for(i=0; i<4; i++) {
	byte = $1 % 256
	ip = "." byte ip
	$1 -= byte
	$1 /= 256
	}

	#!/usr/bin/env bash
	set -ueo pipefail

	outofbandlogstring="This string must NEVER appear in the script's stdout/err ..." # or, like, simply "§" ...

	function enter() {
	echo "$@"
	echo "${outofbandlogstring}+2"
	}

	#!/bin/bash

	# vpnc-script wrapper for use with openconnect that routes all AWS IP ranges over the VPN.
	# Pass any additional IP ranges to be routed as args to the script.
	#
	# Requirements: bash, curl and jq.
	#
	# Example usage:
	# openconnect https://vpn.example.com/profile --script '/path/to/vpnc-script-aws'
	#

	resource "aws_instance" "instance" {
	ami = "ami-32rrg4334f"
	instance_type = "t2.small"
	subnet_id = "subnet-abc123dasf"
	key_name = "key"

	associate_public_ip_address = false

	vpc_security_group_ids = [
	"${aws_security_group.1.id}",

	setup() {
	# Global setup
	if [ $BATS_TEST_NUMBER -eq 1 ]; then
	{
	echo export FOO=bar
	} >${BATS_TMPDIR}/bats.import.$PPID
	fi
	. ${BATS_TMPDIR}/bats.import.$PPID

	# Per-test setup as per documentation

	#!/bin/bash
	# ASCII-delimited input and output
	awk -vFS="\x1F" -vRS="\x1E" -vOFS="\x1F" -vORS="\x1E" "$@"

	/.terraform/terraform.tfstate*
	/plan.out
	/.plan.out.*