Let's make Cloud #45: Github Actions with Kubernetes and Karpenter, Automated diagram generation with Holori, Advanced Credential Rotation for IAM Users

Hello CloudMakers!

🛫 I'm off to Japan! 🇯🇵 Words can't describe how thrilled I am to explore this mesmerizing land. 🎎 Tokyo's bright lights 🌃, anime, manga 📘, robots 🤖, and of course, savoring authentic Japanese dishes 🍣🍜 are all on my list. And I'm told the autumn foliage 🍁 is a sight to behold! If you have any raccomandations, let me know!

Today we shall see:

• Github Actions with Kubernetes and Karpenter

• Automated diagram generation with Holori

• Advanced Credential Rotation for IAM Users

Enjoy!

Github Actions with Kubernetes and Karpenter to dynamically provision your runners on spot instances

Addressing the challenges of capacity limitations and parallel execution in CI pipelines often requires innovative solutions. In this article, the author delves into the integration of GitHub Actions with AWS Spot Instances, presenting a comprehensive approach. By setting up self-hosted runners with GitHub Actions on AWS spot instances and dynamically managing resources within a k8s cluster using Karpenter, you’ll introduced to a refined methodology for enhancing their CI workflows.

Automated diagram generation with Holori

While many are acquainted with Draw.io for general diagramming, cloud architecture calls sometimes for a more tailored tool. Holori stands out with its singular focus on cloud platforms, from AWS to Linode. It simplifies tasks with automated diagram generation, allowing users to directly import their AWS configurations or even transform Terraform files into visual representations. Integrated into your CI/CD, Holori also updates infrastructure diagrams in Pull Request comments. With innovations like diff diagrams on the horizon, Holori promises a unique approach. Have you tried it?

Advanced Credential Rotation for IAM Users with a Grace Period

Persistent IAM user credentials in AWS come with their challenges, especially when tools (like Tableau, for example) demand their consistent use. While rotating these secrets using AWS's secret manager paired with Lambda offers a way forward, it doesn't provide a smooth transitional window between old and new credentials. This article dives into these challenges, highlighting the nuances and introducing a comprehensive code-driven solution to ensure more secure and efficient credential management.

Thank you for reading my newsletter!

If you liked it, please invite your friends to subscribe!

If you were forwarded this newsletter and liked it, you can subscribe for free here:

Have you read an article you liked and want to share it? Send it to me and you might see it published in this newsletter!

Interested in old issues? You can find them here!