3 ms·

Hey hey! Good to see you here! Talos is absolutely incredible. There's a learning curve to it, but it's not as steep as it seems. I started with Ansible, but

Hey hey! Good to see you here! Talos is absolutely incredible. There's a learning curve to it, but it's not as steep as it seems. I started with Ansible, but found myself getting really annoyed at the amount of YAML I was shoveling around for basic things, so I ended up writing a series of bash scripts that rsync files out to where they need to go, run actions when a particular file changes, etc. Provisioning scripts are bundled up and piped to the remote machine over SSH. It's been pretty nice. I'm thinking about building that out into a separate project somewhere. I'd love to check out what you're working on! The link seems to be broken though.

nathan_douglas 1y ago
Talos (and Talhelper) seem pretty reasonable so far. Digging Sops too for managing secrets. I was using Ansible Vault before which worked but was weirdly cumbersome to automate (go figure), and Sops seems to Just Work™. > The link seems to be broken though. Yeah, I'm a world-class infra engineer. smdh. Changed how the DNS record was created but didn't push my changes so they were reverted by a scheduled job facepalm Think it's back now...
- cweagans 1y ago
  > Digging Sops too for managing secrets. I was using Ansible Vault before which worked but was weirdly cumbersome to automate (go figure), and Sops seems to Just Work™. I considered both of those and ended up using the External Secrets Operator + 1Password for my secrets. Maybe not the _best_ solution, but it saved a fair amount of effort on my part. > Think it's back now... It's back! Looking forward to reading!
  - nathan_douglas 1y ago
    Oh, that's super cool! I somehow missed that ESO and 1Password would work together. I set up a 1Password Connect Server at one point but ended up not doing much with it. Hmm...
    - cweagans 1y ago
      Don’t even need connect! You can use a service account token. Retries if 1pass is down or whatever too!

nathan_douglas 1y ago

Talos (and Talhelper) seem pretty reasonable so far. Digging Sops too for managing secrets. I was using Ansible Vault before which worked but was weirdly cumbersome to automate (go figure), and Sops seems to Just Work™. > The link seems to be broken though. Yeah, I'm a world-class infra engineer. smdh. Changed how the DNS record was created but didn't push my changes so they were reverted by a scheduled job facepalm Think it's back now...

cweagans 1y ago
> Digging Sops too for managing secrets. I was using Ansible Vault before which worked but was weirdly cumbersome to automate (go figure), and Sops seems to Just Work™. I considered both of those and ended up using the External Secrets Operator + 1Password for my secrets. Maybe not the _best_ solution, but it saved a fair amount of effort on my part. > Think it's back now... It's back! Looking forward to reading!
- nathan_douglas 1y ago
  Oh, that's super cool! I somehow missed that ESO and 1Password would work together. I set up a 1Password Connect Server at one point but ended up not doing much with it. Hmm...
  - cweagans 1y ago
    Don’t even need connect! You can use a service account token. Retries if 1pass is down or whatever too!