Meeting Notes for August 26, 2021

Community Meetings
1

Below are the meeting notes for this week's Community Meeting, a text-based meeting held weekly in #community-meetings on our community slack, which you can join: https://community-slack.chef.io/

DevRel/Community

benny Vasquez shared

Ohai there @here ! It’s Community Meeting time!!!

I hope everyone’s week is going well. Glad you all are tuned in.

This week’s releases

Chef Automate

benny Vasquez shared

Chef Habitat

benny Vasquez shared

Chef Infra Server

benny Vasquez shared

Chef Infra Client

benny Vasquez shared

Let’s get into some releases:
Looks like there is only one today.

Chef Infra Client 17.4 Released. Read more about that here.

Chef Inspec

benny Vasquez shared

Chef Workstation

benny Vasquez shared

Other releases

tas50 shared

Updates

Chef Automate

Ankur Mundhra shared

Hello community
Things which we worked on include:

  • Upgraded components and fixed CVEs: Handlebars updated to 4.7.7, tar to 4.4.15
  • Better session management: Introduced the concept of idle session timeout to log out folks in case of inactivity, id_token is cleaned after session logout
  • Time format: SAML, LDAP users will be able to change the time format from settings
  • Compliance profile updates: SSHD fix across Ubuntu 18.04, RHEL 7 v2.2.0, CentOS 7, CentOS 6, Ubuntu 16.04, RHEL 6
  • New Automate HA config file created as a wrapper to take care of AWS and Existing nodes deployment
  • Control tags should be available with each profile
  • Policy group metadata and list of policy groups in policy group details page
  • Consistent search capabilities across all policy objects in Infra Server views
  • Data feed: S3 web hook integration
  • Sanitising meta data information form telemetry perspective
  • Changed default settings for default time format

Chef Habitat

mwrockx shared

Habitat update:

  • working of automating core-plans version bumps
  • wrapping up core-plans refresh validation
  • Spiking on a neo4j build order calculation
  • NATS library overhaul

Chef Infra Client

tas50 shared

Hey folks like @Kiah said we shipped Infra Client 17.4.

This release includes a bunch of improvements to Compliance Phase as we further integration that functionality into the client. We're working on even tighter integration between Infra Client and the compliance phase to let you ship you compliance content directly in your cookbooks so you can fully test infra and compliance changes together. If you want to see more about that check out my ChefConf talk.

Here's a screenshot from our latest test build though with content loading right out of a cookbook and executing without the need to fetch from automate, supermarket, or github. We're also continuing work on our Secrets Management Integration Beta. We have a PR open for HashiCorp Vault support and we're starting work on Akeyless Vault as well. Stay tuned there for updates, but hopefully that ships in 17.5 next month.

And finally we're still working on our windows client.pem migration into cert stores

oh I realized I forgot the 2nd part of that beta screenshot

here's infra recipes loading inspec content which lets you do things like programmatically deciding if you want to load profiles based on policygroups or clouds. That's it for this week for the Infra Client team

Chef Infra Server

prajakta shared

Chef Inspec

cwolfe shared

The Chef InSpec team has been working on:

  • Integrating cookstyle with inspec check
  • Replacing the deprecated wmic command on windows
  • Updating CLI docs
  • Working on a new release

Chef Workstation

Nikhil Gupta shared

Sure @Kiah...
Hi All! Here are the updates from Workstation team
Ready-for-release

  • Solaris support in chef-run
  • Updated Cookstyle with 6 new cops
  • Optimised chef -v Go implementation is merged to main
  • Workstation app, kitchen-vagrant plugin fixes

Work-in-progress

  • POC on integration test for Go implementation changes
  • Looking into few customer issues & bugs

Others

  • The team was in a 2-day Chef Intermediate training

Sous Chefs

ramereth shared

Hello from Sous Chefs!

Here's the list of new releases in the past week (most of which are from the docker cookbook!):

  • docker - 7.7.4
  • Standardise files with files in sous-chefs/repo-management
  • docker - 7.7.5
  • Disable installation-script-main suite on Debian 9 due to lack of upstream support
  • docker - 7.7.6
  • Properly document the devices syntax
  • docker - 7.7.7
  • Update port syntax for docker_container
  • docker - 7.7.8
  • Fixes image prune filters to match updated format
  • docker - 8.0.0
  • Remove upstart
  • docker - 8.1.0
  • Remove Ubuntu 16.04 support
  • line - 4.2.0
  • Add owner and group properties to the append_if_no_line and replace_or_add resources
  • line - 4.3.0
  • Add mode property to the append_if_no_line and replace_or_add resources
  • selinux - 5.1.0:
  • Fix selinux_install on Alma Linux / Oracle Linux
  • transmission - 6.0.0
  • Set unified_mode on resources for Chef 17 support
  • Require Chef 15.3+ for unified_mode support

We had a minor issue with the automated release system where it wasn't sending releases to #announcements so hopefully I caught everything there

That should be fixed now however (thanks @Xorima)

Hello from the Cinc Project!

We only had the one release this weekCinc Client

  • Released 17.4.25

Cinc Updates

ramereth shared

Sure! On the Cinc Server side, I am working on a PR off of 14.9 which utilizes the newly available ChefUtils::Dist::Server constants. I've replaced all wordmarks (I think) within chef-server-ctl and am just working to fix issues with tests passing. Should have something ready before next week's meeting, I think.

Other updates

We have a team now working on Supermarket and they've made some great progress modernizing that codebase and resolving some longstanding security tech debt we had

@Sabyasachi Ghosh is the lead on that team and we'll be sure to get him in the mix giving updates in the future

Supermarkert is now running Rails 6.1 on Ruby 2.7 with Infra Client 16

We recently added brakeman security scanning and resolved a large number of issues that came out of those scans

We've also bumped redis from 3 -> 6

Started producing RHEL 8 specific packages for FIPS users and enabled FIPS on Ubuntu builds

and we're doing a ton of misc cleanup on the UI. Things like adding confirmations on some destructive changes, updating links and copy text, and fixing some rendering

Folks will also be happy to know that we're planning the work involved with having Supermarket auth to Automate so you can use Automate HA or Automate with the embedded Infra Server and still get Supermarket logins

And we're planning out the work for modernizing the cookbook quality metrics. We'll be retiring some old metrics and moving the scanning over to Cookstyle. That will enable us to do fun things in the future like note cookbooks that aren't compatible with new releases of Infra Client

oh check the changelog for everything we've merged so far: supermarket/CHANGELOG.md at main · chef/supermarket · GitHub

See you next week!

2

This topic was automatically closed after 3 days. New replies are no longer allowed.