Indeed. Government-provided digital services can be a good experience. There is a lot of initiative in the US to improve the sprawling and incoherent experience. As an example, on the IRS website you can access your personal information (returns, all submitted tax info from various sources) going back for several years. As far as I'm aware this is a newer service.
We built digger to enable teams to be able to run terraform plan/apply within their existing CI. The tool is entirely open-source and we are looking for feedback and contributions. This would also help us spread the word amongst terraform cloud users.
All you have to do is use the quick start guide in our github repo below, and after you've used it or tested it, send me (utpal) a slack (link below) message of your email and I can send the gift card over!
Only constraint is that you are an active Terraform Cloud/ Spacelift/ Atlantis/ Env0 user and understand the problem space.
Thanks all - genuinely appreciate your feedback and contributions!
Digger is a Github Action that runs Terraform plan and apply with PR-level locks. The idea is that terraform jobs run natively in your Github Actions - no need to share sensitive data with another CI system. There's no need to deploy and maintain a backend service either. We migrated from Python to Golang yesterday. None of the team had experience with golang, but we managed to migrate in a week. Here's why we did it:
Faster runtimes (upto 30x faster)
Can be compiled into single binary, advantages for Github actions is that we don’t need to wrap action into Dockerfile.
Easy to compile binary to multiple platforms, it helps us run from same codebase.
Interface based development , more guarantees about the code correctness by the compiler when compared to using Python.
Golang is more popular in the DevOps and infrastructure community, we can find several libraries and reuse them in our code.
Would love to hear from HN on our code quality! Please be as critical as possible!
Other code quality issue encountered on a quick review:
- use of utils package
- use of models package
- naming of receivers (too long)
- returning empty structs instead of (nil) pointers
- too much log.Fatal scattered around the code
- unhandled errors, inconsistent error handling
sometimes handled twice a la log.Printf(..., err) then return err
consider error wrapping here
- useless use of err2 variables
- use of Must functions which will panic if fail, transition to err producing fns
- stuttering (digger.DiggerConfig)
- naming things ...Impl instead of naming the interface ...er || ..or
This is done correctly in tf.go, not so good in locking.go
While not exactly "code quality," recommending the use of static AWS credentials is an antipattern now that both GitHub and GitLab have working JWT implementations that make `AssumeRoleWithWebIdentity` work correctly, and is supported by all modern aws sdks (including, of course, terraform). One can even configure that exclusively via env-vars so local `terraform plan` works using local credentials, and then the GitHub/GitLab plan uses the ARWWI flow
We actually have an SCP that `Deny`s `iam:CreateAccessKey` in our Organization(s)
Have you heard of Vipassana meditation? They do something similar, but you are allowed to eat. It isn't for 1 day though, but for 10. Link here - https://www.dhamma.org/en/
I'd definitely recommend doing a 1 day retreat before diving into something longer - some people suffer psychotic breaks and other challenging meditation experiences.
I've been to a ten-day retreat, reportedly days 3/4 are the most common ones for something to happen. The organisation linked by GP actually doesn't accept applications for the one-day retreats unless you've previously completed a ten-day one with them.
This is an amazing product & given that gumroad has recently increased prices, the timing could not have been better. But information architecture of the landing page needs to change. I am left with the following questions after reading the content on the website.
1. How much margin does the platform charge?
2. Why can't I see a preview to what I am paying for?
3. How is it better than Gumroad, Stripe and others? Margins, ease of use etc, whatever your arguments are, I would love a detailed explanation.
