Community Meeting Minutes 2021-12-07

[castrojo]

December 7th 2021

C7n Community Meeting Minutes

tags: Templates Meeting

:::info

• URL: https://meet.google.com/mii-evqh-esh
• Date: December 7th, 2021 (3:00 PM (ET) / 12:00 PM (PT) / 7PM (UTC))
• Timezone Converter (Click me)
• Agenda

1. Intros 10m
2. Agenda Items 20m
3. PR Party 30m

• Meeting Contact: Jorge: [email protected]
• Host: Jorge Castro
• Permalink:
• Video URL: https://youtu.be/jiz9SyOaBUQ

:::

Agenda Items

• reInvent was fun!

  • Thanks to everyone who stopped by and gave us feedback!

• Important upgrade for AWS users!! #6969: Wait for 'updated' state before lambda deploy (Last Call!)

  • You need to upgrade to 0.9.14!
  • Filed/pinned #7010
  • If this broke you it would have started breaking yesterday

• 🆕 Webinar this Friday

  • Discover the Cloud Custodian Toolbox: Applying Policies Across Multiple Accounts With c7n-org
  • No doc sprint this friday (this conflicts)
  • Last meeting of the year, see everyone on January 4th
  • Notes are a week behind, they'll be caught up tomorrow!

• CNCF Annual Report

  • Check it out here
    • TLDR: 24% contributor growth this past year!
  • Summary: We do an annual report to the Cloud Native Computing Foundation (CNCF) to show that we're a healthy OSS project.
  • We are in the process of applying for incubation (next step after sandbox)
  • We have checked in an ADOPTERS.md - which is a list of organizations that say they use c7n. If you're using c7n and want to add your organization, please let us know or submit a PR, it helps the project show who is using it in production and helps new users answer "who is using this?"
  • If your organization wants to volunteer to be interviewed by the CNCF about your c7n usage, please let Jorge know.

🎯 Goals for the week

• New release?

Weekly Stats

	Opened this week	Closed this week
Issues	8	4
PR's	5	7

New stars	16
New forks	2

PR's Closed

• #7015: aws - python 3.9 lambda policy support
• #7014: 7013 - gcp non customer managed encrypted snapshot
• #7012: aws - check-permissions - fix for boundary handling
• #7008: Fixes import path for IamPolicyFilter
• #7004: Initial commit using speaker affiliations from the CNCF Governance as…
• #7002: 7001 - fix GCP Unencrypted DiskDetection Failure
• #6994: c7n_mailer: add formatting for service-quota
• 🆕 #7015: aws - python 3.9 lambda policy support
• 🆕 #7014: 7013 - gcp non customer managed encrypted snapshot
• 🆕 #7012: aws - check-permissions - fix for boundary handling

PR's Opened

• #7018: ISSUE-7107 - allow for policy name in AWS IAM set-policy action
• 🆕 #7016: releng - 0.9.15.0 release prep and dep graph update

Issues Opened

• #7021: Integration CC with Prometheus pushgateway
• #7020: c7n-org cannot output to S3 bucket configured with KMS encryption
• #7019: Filter and action for s3 bucket ownership controls (disable ACLs)
• #7017: Enable AWS IAM set-policy action to use policy name instead of ARN similar to set-boundary action
• #7013: GCP Snapshot get method uses wrong key name
• #7011: SNS remove-statements action on single statement policy
• #7010: ResourceConflictException when calling the UpdateFunctionConfiguration operation
• #7009: check-permissions filter not working on aws.iam-group resource

Issues Closed

• #7013: GCP Snapshot get method uses wrong key name
• #7011: SNS remove-statements action on single statement policy
• #7001: GCP Unencrypted DiskDetection Failure
• #6818: sanity check policy to cleanup AMIs