Community Meeting Minutes 2021-11-23

[castrojo]

November 23rd 2021

C7n Community Meeting Minutes

tags: Templates Meeting

:::info

• URL: https://meet.google.com/mii-evqh-esh
• Date: Novermber 23rd, 2021 (3:00 PM (ET) / 12:00 PM (PT) / 7PM (UTC))
• Timezone Converter (Click me)
• Agenda

1. Intros 10m
2. Agenda Items 20m
3. PR Party 30m

• Meeting Contact: Jorge: [email protected]
• Host: Jorge Castro
• Permalink:
• Video URL: https://youtu.be/-EuPyEpSvNw

:::

Agenda Items

• reInvent (Last call!)

  • Who's going?
    • If you're going let us know, we're getting together Tuesday night
    • https://stacklet.io/aws-reinvent
    • Come for the party! https://stacklet.io/cloud-custodian-reception-aws-reinvent

• Important upgrade for AWS users!! #6969: Wait for 'updated' state before lambda deploy (Last Call!)
  * You need to upgrade to 0.9.14!

  • After Dec 6, lambas updated in place will fail.
    • You will need to upgrade c7n before Dec 6th.
    • Without this fix you will get errors during policy provisioning.
  • We won't be bumping semver as we're not making changes to c7n, we're just fixing a bug.
    • As usual, your policies will not need any changes, we try hard to make sure you don't need to change your policies.
  • Blog post from AWS with more information on the change: Coming soon: Expansion of AWS Lambda states to all functions
  • [AJ] File a template bug so we can pin the issue?
    • Filed/pinned #7010
  • [Kapilt] Pin the template bug filed by AJ.

• Another point release coming week of reinvent, see: #6996: releng - exempt sendgrid from frozen dep when releasing

• Reminder, we have chat! https://gitter.im/cloud-custodian/cloud-custodian

  • Lots of activity, help always wanted!

🎯 Week in Review

• Most of the team was focused on reInvent
• AJ: Filter and action for s3 bucket ownership controls (disable ACLs) #7019

Weekly Stats

	Opened this week	Closed this week
Issues	8	3
PR's	11	6

New stars	16
New forks	6

PR's Closed

• #7007: tests - bug fix for s3 ap, eks node delete functional test
• #7005: CSV and simple report can optionaly output all findings
• #7000: tools/c7n_sphinxext - update sphinx-rtd-theme to fix search
• #6998: Use windows syntax for activate instructions
• #6997: Windows quickstart should use powershell syntax
• #6996: releng - exempt sendgrid from frozen dep when releasing

PR's Opened

• #7008: Fixes import path for IamPolicyFilter
• #7007: tests - bug fix for s3 ap, eks node delete functional test
• 🆕 Contributor: Thanks Guillaume! #7005: CSV and simple report can optionaly output all findings
• #7004: Initial commit using speaker affiliations from the CNCF Governance as…
• #7002: 7001 - fix GCP Unencrypted DiskDetection Failure
• #7000: tools/c7n_sphinxext - update sphinx-rtd-theme to fix search
• #6998: Use windows syntax for activate instructions
• #6997: Windows quickstart should use powershell syntax
• #6996: releng - exempt sendgrid from frozen dep when releasing
• #6994: c7n_mailer: add formatting for service-quota
• #6992: Added ec2:DescribeLaunchTemplateVersions to the permission list for the aws.ebs-snapshot 'unused' filter

Issues Opened

• #7009: check-permissions filter not working on aws.iam-group resource
• #7006: Connect AWS Service Quota Module with Trusted Advisor Data for RDS & Other Service Utilization
• #7003: Scanning EventBridge rules in custom event buses
• #7001: GCP Unencrypted DiskDetection Failure
• #6999: CloudCustodian.io - Docs Search Functionality Not Working
• #6995: AWS: ASG.auto-tag-user adds one unwanted tag
• #6993: c7n_mailer: sendgrid_delivery code is not at the right place, looks like an issue
• #6991: c7n mailer dependency has a high vulnerability

Issues Closed

• #6999: CloudCustodian.io - Docs Search Functionality Not Working
• #6991: c7n mailer dependency has a high vulnerability
• #6952: Exception when copy-volume-tags is used with volumes having tag keys starting with "aws:"

📚 Backlog

• Email invite feature

• Interview users

• Contributor Guide [@liz-acosta]
  - https://cloudcustodian.io/docs/contribute.html
  - Should we make a video for local dev environment?

• Priority backlog for the cloud providers. [@kapilt]

• Enhancements/Feature Process [@kapilt]

• Rename master->main in github [@kapilt]
  - https://github.com/github/renaming#renaming-existing-branches
  - GitHub how supports this, we can try this now.
  - afaict it's low risk, I'll keep investigating.
  - No progress this week, kapil will sanity check it this week if he can.

• Make-gitter-easier [@castrojo]
  - More to report in the future.
  - Todd: drone.io just recently switched from gitter to slack and introduced a proposal github repo for this same problem set: https://github.com/drone/proposal

• Recommend pipx for non-contributor installs? [@ajkerrigan]

  • Do we support brew?
  • Version is old, should we consider updating that?
  • Jorge to file an issue, see if there's a volunteer person who's into this.

• Policy Testing (spec) [@marcoceppi]

  • Soliciting feedback, please check it out and comment on the issue!

• New initiatives and experiments we want to start improving

📕 Action Items

Items roll over into next meeting unless resolved.

• [@castrojo] Foo
• [@marcoceppi] Bar
• [@kapilt] Baz

Notes

00:00:51.023,00:00:54.023
Jorge Castro: https://hackmd.io/o_ztzX1GQB66-YU9s3bv3Q

00:03:19.427,00:03:22.427
Umair Khan: https://stacklet.io/aws-reinvent

00:04:39.178,00:04:42.178
Rohit Khare: +1 to re:Invent