3 ms·
I have been using this at work internally. Basically I write an app that parse a directory of markdown file. However, the code block is runnable. The code blo
by kureikain 7y ago
I have been using this at work internally.
Basically I write an app that parse a directory of markdown file. However, the code block is runnable.
The code block is organize like this:
```
input:
- name:
description:
- othervar:
description:
---
real shell code here
```
It adds a run button under the code block, when run, it parse the inputs to generate UI for input these parameter. Then it spin up a pod in kubernetes and run the script. We are already using Vault, so the script can access vault to get the secret it wants.
It feels awesome because we put the link to runbook in pagerduty alert. It keeps the document and code in-sync.
However, it's a kind of like a backdoor :-(. It essentially give shell access to entire infrastructure(Since it has Vault access). I tried hard to protect this tool but still feel uneasy about it. But without it I don't know how hard it is to keep code and document in-sync.