Today I deleted WhatsApp. I have been using Signal for years now almost exclusively but I kept it as a backup purely due to its mass appeal.
On paper WhatsApp sounds okay. The original founders were great, and they enabled end-to-end encryption before they left unhappy with how Facebook handled privacy. However I have a hard time trusting Facebook, for very much the same reasons why most people dislike it.
And this as well:
As you can infer from the founder’s values, Facebook…
I am a little obsessed with finding great quality eggs here in the UK so I wanted to keep a list for myself and share it with everyone on the best ones I could find. I will try to keep updating this post as I find more great egg brands.
Great eggs have golden, intense dark orange yolks, the darker the yolk, generally speaking, the better the egg. A mediocre egg, on the other hand, has a pale yellow colour and the flavour is not as rich — this is the egg that most people are used to. …
Vault is, for the most part, great. Currently I don’t know of any other product that comes close to provide what it does, even for all the hundreds of managed tools and services that GCP and AWS provide, the closest I’ve seen is GCP’s secret manager, but even that doesn’t offer dynamic secrets so Vault is still the best there is as far as I know in this domain.
That being said, this article is not a love letter extolling all its virtues, mostly is a therapy session listing some things I wish were better about it and the issues…
You wake up in the morning in a very good mood; you have some exciting ideas for your new project, let’s say migrating your microservices to kubernetes, or improve the monitoring of the whole company, your CI/CD pipelines, or whatever tickles your fancy.
But first you need to do a very simple task for another team, you need to create an AWS resource to spin a new service and give it the correct role permissions. Should be a five minute thing, and then you can start working on your dreams.
In Spain we have a saying, “Piensa mal y acertaras”, which roughly translates as “think the worst and you won’t be far from wrong”. This nugget of Spanish wisdom is probably a shield against a culture of espabilado, and it may be useful on occasion to take this approach, but someone who is always “pensando mal” will rarely ever be happy.
Malpensado is another Spanish word that doesn’t have a very good translation in English. …
The ideas and opinions presented here are my own, based on my observations and exposure to multiple cultures. If you feel that I am wrong, I would love to hear your counterargument in the comments, just please be civil and constructive.
Many years ago while working at a hotel’s restaurant in Ibiza there was a guest on the slow side that was always buzzing around in an out of the restaurant into the pool.
One day I saw him stealing crips from the counter and I called him out on it, to which he apologised embarrassedly and walked away briskly.
…
I originally posted this on Reddit so I could get a good sample of opinions from other engineers to see how they compared to mine before posting and expanding here. This is my opinion based on my experience with both platforms (two years in each). My bias towards GCP is mostly based on the superior experience I have gotten with it and I am in no way affiliated with Google. AWS is still my second choice as an enterprise option for cloud platform and it would be nice for them to do better. …
This post assumes you have a moderate working knowledge of terraform
Write for users, not infrastructure experts
Whoever grabs your scripts should be able to use them only by changing or creating variable contents in a tfvars files. They should never need to edit modules or files in order to make it work, so try and accommodate enough variation to fit the most common future applications of your scripts.
Bear in mind that even if one of your team mates is a very competent and knowledgable engineer, she may not be very familiarised with your work or the type of…
Even though there is a pretty good guide already on how to configure oidc with vault, I have gone through a fair bit of pain to configure it with both Google and AWS Cognito because I couldn’t find any documentation that applied exactly to these tools and because oidc is also confusing to understand and use. So hopefully this guide can assist you in setting up your vault oidc flow and save you some time.
At the end of this guide you should be able to login with Vault with your google credentials and manage user group membership with Cognito.