Welcome to episode 256 of the Cloud Pod podcast - where the forecast is always cloudy! This week your hosts, Justin and Matthew are here this week to catch you up on all the news you may have missed while Google Next was going on. We’ve got all the latest news on the custom silicon hot war that’s developing, some secret sync, drama between HashiCorp and OpenTofu, and one more Google Next recap - plus much more in today’s episode. Welcome to the Cloud!
Titles we almost went with this week:
• I have a Google Next sized hangover
• Claude’s Magnificent Opus now on AWS
• US-EAST-1 Gets called Reliable; how insulting
• The cloud pod flies on a g6
A big thanks to this week’s sponsor:
Check out Sonrai Securities’ new Cloud Permission Firewall. Just for our listeners, enjoy a 14 day trial at www.sonrai.co/cloudpod (www.sonrai.co/c...)
General News
Today, we get caught up on the other Clouds from last week, and other news (besides Google, that is.) Buckle up.
04:11 OpenTofu Project Denies HashiCorp’s Allegations of Code Theft (thenewstack.io...)
• After our news cutoff before Google Next, Hashicorp issued a strongly worded Cease and Desist letter (opentofu.githu...) to the OpenTofu project, accusing that the project has “repeatedly taken code Hashi provided under the BSL and used it in a manner that violates those license terms and Hashi’s intellectual properties.”
• It notes that in some instances, OpenTofu has incorrectly re-labeled Hashicorp’s code to make it appear as if it was made available by Hashi, originally under a different license.
• Hashi gave them until April 10th to remove any allegedly copied code from the OpenTofu repo, threatening litigation if the project failed to do so.
• OpenTofu struck back - and they came with receipts!
• They deny that any BSL licensed code was incorporated into the OpenTofu repo, and that any code they copied came from the MPL-Licensed version of terraform.
• “The OpenTofu team vehemently disagrees with any suggestions that it misappropriated, mis-sourced or misused Hashi’s BSL code. All such statements have zero basis in facts” - Open Tofu Team
• OpenTofu showed how the code they accused was lifted from the BSL code, was actually in the MPL version, and then copied into the BSL version from an older version by a Hashi Engineer.
• Anticipating third party contributions might submit BSL terraform code unwittingly or otherwise, OpenTofu instituted a “taint team” to compare Terraform and Open Tofu Pull requests.
• If the PR is found to be in breach of intellectual property rights, the pull request is closed and the contributor is closed from working on that area of the code in the future.
• Matt Asay (thenewstack.io...) , (from Mongo) writing for Infoworld, dropped a hit piece (www.infoworld....) when the C&D was filed, but then issued a retraction on his opinion after reviewing the documents ( / 1778454498664690108 ) from the OpenTofu team.
06:32 Matthew - “It’s gonna be interesting to see, you know, general common ideas of where Terraform should go - are going to be coming on both of these platforms, and when you copy or if this is a good feature that Hashi Corp released and Open Tofu wants that feature - like you can’t just pull the codes. Do you rewrite it from scratch? Right, so then you rewrite it from scratch, but it does the same thing. So you’re kind of in that gray area where they’re going to look the same.”
8:50 Secrets sync now available on Vault Enterprise to manage secrets sprawl (www.hashicorp....)
• When not making false allegations against OpenTofu, Hashi is releasing some interesting updates to Vault Enterprise 1.16.
• Secrets Sync (www.hashicorp....) , now generally available, is a new feature that helps you manage secret sprawl by centralizing the governance and control of secrets that are stored within other secret managers.
• Hashi claims that secret management doesn’t live up to its full potential unless it is centralized and managed on one platform.
• Secret syncs lets users manage multiple external secret managers, which are called destinations in Vault. Supporting AWS Secrets Manager, Google Cloud Secrets Manager, Microsoft Azure Key Vault, Github Actions and Vercel (What n...
Негізгі бет 256: Begun, The Custom Silicon Wars Have
Пікірлер