# Meeting Notes for December 2, 2021

**URL:** <https://discourse.chef.io/t/meeting-notes-for-december-2-2021/20561>\
**Category:** Community Meetings\
**Created:** [December 2, 2021, 10:25pm UTC](https://discourse.chef.io/t/meeting-notes-for-december-2-2021/20561 "2021-12-02T22:25:14Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ktolliver](https://avatars.discourse-cdn.com/v4/letter/k/51bf81/32.png) [@ktolliver](https://discourse.chef.io/u/ktolliver)\
**Post date:** [December 2, 2021, 10:25pm UTC](https://discourse.chef.io/t/meeting-notes-for-december-2-2021/20561/1 "2021-12-02T22:25:14Z")

</div>

Below are the meeting notes for this week's Community Meeting, a text-based meeting held weekly in #Community Meetings on our community slack, which you can join: [https://community-slack.chef.io/](https://community-slack.chef.io/)

* * *

**DevRel/Community**

Kiah Tolliver shared

A few updates from DevRel:

1. Learn Chef maintenance: [http://learn.chef.io](http://learn.chef.io/) will be unavailable for around an hour Wed 8 Dec, at 9 am UK / 4 am ET. [Learn Chef Maintenance](https://status.chef.io/incidents/43b0ck8k4ctq)
2. Our new branding launches December 7th at approximately 2am eastern time. Keep an eye out! If you want a sneak peak, take a look at the screenshots in [this thread](https://chefcommunity.slack.com/archives/C1P99AXGV/p1635437059033300).
3. We're having out internal Sales Kick Off meeting next week so we will be skipping our regularly scheduled live streams on 12/7 & 12/9. We'll resume on 12/14 with our Thankmas stream.

# This week’s releases

**Chef Automate**

Kiah Tolliver shared

**Automate 2 version 20211125063136 Released**. This release adds global events to understand Node Summary Count among a host of other improvements and bug fixes. Read more about it [here](https://discourse.chef.io/t/automate-2-version-20211125063136-released/20527).

**Automate 2 version 20211201164433 Released.** This release fixes high CPU usage and ingestion failures caused by the previous release. Learn more about it [here](https://discourse.chef.io/t/automate-2-version-20211201164433-released/20554).

**Chef Infra Client**

Kiah Tolliver shared

**Chef Infra Client 16.17.18 Released.** This release contains Compliance Phase improvements and a host of packaging and security updates. Read more about it [here](https://discourse.chef.io/t/chef-infra-client-16-17-18-released/20553).

**Chef Infra Client 17.8.25 Released.** This release contains Compliance Phase improvements, resource updates and security and packaging updates. Check it out [here](https://discourse.chef.io/t/chef-infra-client-17-8-25-released/20556).

**Chef Inspec**

Kiah Tolliver shared

**Chef InSpec 4.50.3 Released**. This release adds Windows support to the http resource. Read more about it [here](https://discourse.chef.io/t/chef-inspec-4-50-3-released/20522).

**Other releases**

Kiah Tolliver shared

**Chef Manage 3.2.13 Released.** This release contains a few UI and Security updates. If you’re still using Manage, read more about the release [here](https://discourse.chef.io/t/chef-manage-3-2-13-released/20550).

**Chef AWS Cloud Resources Released.** A whole slew of new AWS cloud resources have been made available. Check them out [here](https://discourse.chef.io/t/chef-aws-cloud-resources-released/20552).

# Updates

**Chef Habitat**

mwrockx shared

- Making progress on next core-plans refresh
- Working on tool to auto version bump core packages
- Working on HA on prem builder support
- ensuring powershell hooks prefer PSv7 modules over windows PS modules
- Updating latest version of rust for habitat and builder codebases

**Chef Infra Client**

tas50 shared

Like [@Kiah](https://chefcommunity.slack.com/team/U023PGMFFFV) said above we made 2 releases of Infra Client this week with a bunch of nice new improvements and updated Ruby releases to resolve some CVEs there

This next week we're going to continue to dig into IAM support for Akeyless Vault in the secrets helper and merge in approle support for Hashi Vault in the secrets helper

We're also digging into adding built in log rotation in the client, which is a particularly big problem on windows where you don't have things like logrotate to do it for you

We'll make sure we don't fill up your drives anymore

client.pem migration into Windows Certificate Store is back on track now that we cleaned up how we build our all PowerShell DLLs and fixed up our win32\_certificate gem

Hopefully we'll get the initial support for that out in the next release

And then a bit more forward-looking we're going to start digging into Target Mode once again with a focus on managing network and security devices over REST API calls thanks to the initial work that [@theinen](https://chefcommunity.slack.com/team/U37DFJ5NY) did

That's it for Infra Client for this week. Sorry for the timing everyone

**Chef Infra Server**

Lincoln Baker shared

Updates from chef-server for this week are...

- Continuing work on cookbook version response caching solution.

> <https://github.com/chef/chef-server/pull/2955>
>
> Most of our time post-depsolve in the \`cookbook\_versions/\` endpoint is spent ass…embling the results for the client to consume. On a heavily loaded server since OTP 20, the same
> call can take 60+ seconds to complete and significantly degrade performance of the entire system. Prior to that, it could still take 3-6 seconds though without systemic performance degradation.
> 
> This change introduces an ets-based cache that:
> \- allows callers to cache the results 
> \- has overload protection, allowing the caller to force client retry (via 503 response) instead of waiting for the cache to become available
> \- has synchronization capabilities, so that one caller can determine that another process is already calculating results for a given key and retry the request instead of allowing multiple callers to do the same results calculation. 
> 
> Some numbers, using sample org data that tends towards generating large
> responses to cookbook\_version endpoint, because of the total number of
> cookbook files:
> 
> 7k clients/15min interval - cache disabled - CPU 1800-2000%, LA 25. cookbook\_versions rough average time range 2-5s
> 7k clients/15min interval - cache enabled - CPU 150-200%, LA 5-6. cookbook\_versions rough average time range 0.2-1.1s (edited)
> 40k clients/15min interval - cache enabled - CPU 1000-1200%, LA 19 . CBV time range: 0.2-3s with most on the \< 0.5 end.
> 40k clients/15min interval - cache disabled - server fails within a minute
> 
> 
> For more details, see the commit messages in this PR. 
> 
> 
> Signed-off-by: Marc A. Paradise \<marc.paradise@gmail.com\>

- Fixed logrotate issue (Thanks to CollinM!).

> <https://github.com/chef/chef-server/pull/2972>
>
> Signed-off-by: Collin McNeese \<cmcneese@chef.io\>
> 
> \### Description
> 
> Fixes iss…ue with permissions on \`/etc/opscode/logrotate.d/nginx\` which should be owned by \`root\` user. This was changed incorrectly in #2570 and \`/etc/opscode/logrotate.d/nginx\` ownership settings are reverted back with this update.
> 
> \### Issues Resolved
> 
> \#2960 
> 
> \### Check List
> 
> \- \[\] New functionality includes tests
> \- \[\] All buildkite tests pass
> \- \[\] Full omnibus build and tests in buildkite pass
> \- \[X\] All commits have been signed-off for the Developer Certificate of Origin. See \<https://github.com/chef/chef/blob/main/CONTRIBUTING.md#developer-certification-of-origin-dco\>
> \- \[X\] PR title is a worthy inclusion in the CHANGELOG

- Continuing work on upgrading chef-server in automate.

[https://g](https://g) [ithub.com/chef/chef-server/issues/2652](http://ithub.com/chef/chef-server/issues/2652)

- Investigation of A2\_HA issue.

> <https://github.com/chef/chef-server/issues/2980>
>
> \### Chef Server Version
> 
> 14.4
> 
> \### Platform Details
> 
> A2HA
> 
> \### Configura…tion
> 
> Deployed A2HA using terraform.
> 
> \### Scenario
> 
> After deploying A2HA using terraform, They observed that oc\_erchef & nginx services are in critical state
> 
> \### Steps to Reproduce
> 
> After deploying A2HA using terraform, They observed that oc\_erchef & nginx services are in critical state.
> 
> \### Expected Result
> 
> All the services are in OK state
> 
> 
> \### Actual Result
> 
> oc\_erchef & nginx services are in the critical state
> \<img width="895" alt="Screenshot 2021-12-02 at 1 00 33 PM" src="https://user-images.githubusercontent.com/76031665/144377361-fc37282b-484d-4ec5-8db1-ec6fe9cdb571.png"\>

**Chef Inspec**

cwolfe shared

The Chef InSpec team has been working on:

- Adding support for using a private supermarket source of profiles
- Adding proxy support to the `http` resource
- Creating architecture diagrams for InSpec
- Adding support for using an SSH config file

**Chef Workstation**

Vikram Karve shared

Hi All! Here are the updates from the Workstation & Community Tools team this week.. much of it is a continuation of what we shared last time.Ready for release / completed

- Addressed few test-kitchen issues [[1]](https://github.com/test-kitchen/kitchen-ec2/issues/497) & [[2]](https://github.com/test-kitchen/kitchen-dokken/issues/126)
- The fix to chef-vault ([chef-vault command not returning any results · Issue #373 · chef/chef-vault · GitHub](https://github.com/chef/chef-vault/issues/373)) is merged

Work-in-progress

- Implementing `chef env` in Golang
- Identifying what telemetry data is sent via workstation already, and what more could be added.
- Identified some changes that are needed in the build configuration to [support](https://github.com/chef/chef-workstation/issues/2365) Apple M1 ARM64 architecture.
- Begun looking into kitchen-vra plugin update to support vRA 8
- Addressing issue where workstation tray icon would disappear on upgrade.

What's Next?

- Support ad hoc chef-run on AIX
- Explore wizard-like UI development techniques in ElectronJS

**Sous Chefs**

ramereth shared

Hello from the Sous Chefs!

We've had a lot of releases in the past few weeks:

- bind - 3.2.0: add :create\_config\_only action to bind\_primary\_zone
- bind - 3.3.0: add primaries option to bind\_config
- chrony - 1.2.0: Reorder resources so Chrony is configured before it is started
- consul - 5.0.0: Remove Poise dependencies, Rewrite resources as Chef custom resources, Drop compatibility with Chef \< 15.3
- consul - 5.0.1: Fix setting program in consul\_service resource
- consul - 5.1.0: Support :stop action for consul\_service resource
- consul - 5.2.0: Added setting license\_path in consul\_config resource for enterprise installations
- docker - 10.1.3: Update to tarball checksums to 20.10.11 and 19.03.15, Update to using version 20.10.11 for testing suites
- etcd - 8.0.0: Set unified mode to be false, otherwise resources are not correctly being passed through to systemd resource, Remove -debug line from etcd\_cmd as it is deprecated as of etcd 3.5.0
- etcd - 9.0.0: Use partials instead of including a library., Require Chef 16 for resource partials, Remove unused libraries
- nginx - 12.0.8: Rename config\_dir to conf\_dir in nginx\_site.md
- nginx - 12.0.9: Change the unit tested Debian platform to bullseye
- nginx - 12.0.10: Fix CI Badge Link in README
- ruby\_build - 2.1.5: Retry when cloning the ruby-build code repository
- rundeck - 6.0.0: Pointing to a valid repository, as Bintray has been deprecated
- rundeck - 7.0.0: Enabled unified mode on all resources
- rundeck - 7.1.0: Require Chef 15.5 for systemd helper (cookstyle fixes)
- vcruntime - 2.2.8: Update vc14 checksum for new releases of 2015-2019 and 2015-2022 runtimes
- vcruntime - 2.2.9: Remove CircleCI and Dangerfile now the release system is taking care of this for us

**Cinc Updates**

ramereth shared

Hello from the Cinc Project!

Cinc Auditor

- Released 4.50.3

Cinc Server

- Looking into issues when upgrading to latest Cinc Server release

Cinc Client

- Looking into run-time issues with Cinc 17 on Windows
- Working on building/releasing the latest 16/17 upstream releases

In addition:

- Working on add MacOS 12 x86 builds globally
- Removing MacOS 10.14 builds globally

**Other updates**

## **See you next week!**

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/chef/original/2X/b/b9c6cc2dba194e37f0fa44a13d1ad740b99aae03.png) [@system](https://discourse.chef.io/u/system)\
**Post date:** [December 5, 2021, 10:25pm UTC](https://discourse.chef.io/t/meeting-notes-for-december-2-2021/20561/2 "2021-12-05T22:25:47Z")

</div>

This topic was automatically closed after 3 days. New replies are no longer allowed.