Community Meeting Minutes for 2023-02-07

[castrojo]

C7n Community Meeting Minutes

February 7th 2023

:::info

• URL: meet.google.com/mii-evqh-esh
• Date: February 7th, 2023 (2:00 PM (ET) / 11:00 AM (PT) / 6PM (UTC))
• Timezone Converter (Click me)
• Agenda

1. Intros 10m
2. Agenda Items 20m
3. PR Party 30m

• Meeting Contact: Jorge: jorge@stacklet.io
• Video Archive and Transcripts: https://mtngs.io/cloud-custodian/community-meetings/
  :::

Agenda Items

• Intros, etc.
• We're testing Slack! Join us:
  • Invite page
• We're moving on from Python 3.7 this year, details TBD, heads up:
  • releng - drop python 3.7 support #8092
• Renaming master branch to main [Kapil]
  • This now done!
• Release Update [Sonny]
  • No updates this week!

Weekly Report

Weekly status report for cloud-custodian/cloud-custodian Week #6 2023

Here's what the team has focused on this week:

Weekly Stats

	Opened this week	Closed this week
Issues	23	14
PR's	21	27

New stars	628
New forks	148

PR's Opened

• 💥#8172: aws - filter to annotate security configuration and filter with security configuration attributes
• 💥#8232: aws - elasticsearch - Added new action to enable audit logs to cloudwatch
• 💥#8246: aws - cloudwatch logs - added attribute to allow passing role arn to put-subscription-filter call
• 💥#7140: aws - quota - fix usage-metric exceeds the limit of 1440 data points (cont.)
• #8243: releng - docker test image needs new oci name field
• #8242: gcp - mu - include boto3 in cloudfunctions requirements
• #8241: Adding new resource for mysql flexibleserver and a new filter
• 💥 #8240: aws - shield - handle elastic ip arn type delta
• #8236: aws - rds - include db instance option values
• #8235: aws readiness-check cross-account filter
• #8234: enabling 'missing' filter for gcp
• #8232: aws - elasticsearch - Added new action to enable audit logs to cloudwatch
• #8230: Adding network watcher resource
• #8229: docs - Update readme to point to slack, add tencent
• #8227: releng - fix poetrypkg test
• #8226: releng - fix docs publishing
• #8219: aws - tags - copy-related-tag load resources during validation
• #8218: aws - values_from support dynamodb
• #8217: fix input typo
• #8208: ecs task definition filter - To filter allow all permissions on attached roles
• #8206: Add Pratyush Mishra as a maintainer
• #8204: releng - directly publish docs instead of merging back to gh-pages branch
• #8201: aws - docs - add example policies for the finding filter
• #8200: awscc - update type schemas
• #8199: core - handle non importable resources

PR's Closed

• #8243: releng - docker test image needs new oci name field
• #8242: gcp - mu - include boto3 in cloudfunctions requirements
• #8236: aws - rds - include db instance option values
• #8227: releng - fix poetrypkg test
• #8226: releng - fix docs publishing
• #8219: aws - tags - copy-related-tag load resources during validation
• #8217: fix input typo
• #8206: Add Pratyush Mishra as a maintainer
• #8204: releng - directly publish docs instead of merging back to gh-pages branch
• #8201: aws - docs - add example policies for the finding filter
• #8199: core - handle non importable resources
• #8197: aws - emr-serverless resource delete, tag, mark actions
• #8196: add example policy to add lifecycle policy on bucket delete to empty bucket
• #8190: c7n-left - allow for policy and resource pre execution filtering on cli
• #8168: aws - secretsmanager - add set-encryption action
• #8159: aws - timestream-table, timestream-database - add resources
• #8155: gcp - add metric alert filter
• #8077: aws - kafka - migrate to list_clusters_v2
• #6019: S3 policy condition add absent/present support
• #5946: return resources no matter limits exceeded or not
• #5176: tools/c7n-mailer - utils format more resources (cloud-custodian Format more resources for c7n_mailer #5175)
• #5057: aws - asg propagate tags extract instance ids if not found
• #4929: azure - tag sql database
• #4907: docs - disable sticky sidebar
• #2524: add bucket-exists handling to cloudtrail create (account.py)
• #1768: when using AssumeRole, the tag should match principal id event
• #1061: Adding Redshift tags to its assosiated snapshots

Issues Opened

• 💥 #8239: GCP: No module named 'botocore'
• #8238: FR: Generic HTTP provider
• #8233: how to tag event rules created by CloudCustodian
• #8231: EFS Mount Target network-location filter
• #8228: c7n-left - default to querying resources when running a policy
• #8225: AWS S3 - CreateBucket event not correctly constructed - event not called
• #8224: Security groups: Port filtering doesn't filter out "ALL-traffic" conditions
• #8223: proposal: iam-access-key resource
• #8222: shift-left - resolve local module references above the root directory
• #8221: shift-left - support multiple source roots
• #8220: ValueError: Invalid endpoint: https://ec2..amazonaws.com
• #8216: shift-left - build into docker images
• #8215: shift-left - documentation
• #8214: shift-left - terraform aws provider should propagate default tags
• #8213: shift-left - run with --verbose should output policy content
• #8212: Add support for custom headers in the value_from filter
• #8211: shift-left - cli validate command
• #8210: shift-left - support passing variables/inputs on run cli
• #8207: aws - route53.recovery-readiness - add cross-account filter
• #8205: dns - Add dns redirect for slack.cloudcustodian.io
• #8203: Azure function initialization fails with boto3 module not found error
• #8202: Be able to delete launch template
• #8198: MFA token transfer with Custodian to AWS

Issues Closed

• #8239: GCP: No module named 'botocore'
• #8205: dns - Add dns redirect for slack.cloudcustodian.io
• #8195: AWS EMR-Serverless support
• #8163: AWS Secrets-manager remove AWS default KMS
• #8156: Support for AWS Timestream
• #8079: aws - route53.recovery-readiness - add resource and tagging support
• #7997: Add AWS MSK (Kafka) V2 Serverless Support
• #7847: Unable to Copy tags from EC2 to Security Groups.
• #6786: Releng - switch off drone to github actions for docs build
• #6301: Allow custom periods to be used with CPU utilization filters
• #5084: ci - azure has broken tests depending on time of day
• #5017: ci - azure provider - mass failure
• #4819: cask - change default behavior of automatic latest image pulling
• #4259: ci - new linter doc8