A bit of caveat, but do many people here still use Vagrant?
HashiCorp Raises $175M at $5.1B Valuation
71–80 of 91 posts
Re: HashiCorp Raises $175M at $5.1B Valuation
#72They could not have more last minute timing. Now everything melts and the time of funny money is over.
Last Thursday, Axios contacted 40 VC firms and every single one said they were still actively investing: https://www.axios.com/venture-capital-open-business-dry-powd...
I'd love to see the results of that call next Thursday
Re: HashiCorp Raises $175M at $5.1B Valuation
#73Earlier quoted context omitted.
Lol, that is why it took HashiCorp 6 months to write a broken Ansible playbook for Vault that takes an hour to deploy (they couldn't even do it with Terraform) when it takes less than 30 seconds to deploy on Kubernetes natively.
Can you please share a link to ansible playbook and Kubernetes manifest for comaprison?
You can find the Kubernetes deploy here:
https://github.com/hashicorp/vault-helm
I can't share the Ansible stuff because it isn't public.
Re: HashiCorp Raises $175M at $5.1B Valuation
#74Earlier quoted context omitted.
What is the purpose of Vault if you’re already on AWS? Even though I prefer CloudFormation, Terraform is quite popular. As far as Consul and Nomad, they are both nice for on prem infrastructure - I’ve used both - but once you’re on either AWS or Azure, the native solutions are a lot less of a hassle and Nomsd (sadly) will never get the mindshare of k8s.
You don't want to pay $1/month to store a single secret. You want a nicer workflow for creating ephemeral users and tokens than AWS themselves have. You want to do on-the-fly encryption of all sorts of things. You want a real PKI without every bit of know-how.
It’s 0.25 cent per month to use the Secrets Manager and you can store multiple key/value pairs per secret. If you’re not using the automatic key rotation, you can store a “SecretString” in parameter store for free for low volume usage or for higher volume It’s close to free.
Besides with vault you now need to set up a cluster for HA. But is your time worth nothing?
As far as users and tokens. That’s what Cognito is for for external users or associating your AD with IAM roles for internal users.
Re: HashiCorp Raises $175M at $5.1B Valuation
#75Earlier quoted context omitted.
What is the purpose of Vault if you’re already on AWS? Even though I prefer CloudFormation, Terraform is quite popular. As far as Consul and Nomad, they are both nice for on prem infrastructure - I’ve used both - but once you’re on either AWS or Azure, the native solutions are a lot less of a hassle and Nomsd (sadly) will never get the mindshare of k8s.
Why do you prefer CloudFormation?
It’s the “native” solution. All of AWS’s examples and getting started guides use CF. Also you can find examples for anything for CF on places like
Github.
You have access to the “easy button”. AWS business support if there is something you just don’t get.
SAM, CodeStar,Elastic Beanstalk, etc all use CF and you can modify the templates.
Re: HashiCorp Raises $175M at $5.1B Valuation
#76Earlier quoted context omitted.
What is the purpose of Vault if you’re already on AWS? Even though I prefer CloudFormation, Terraform is quite popular. As far as Consul and Nomad, they are both nice for on prem infrastructure - I’ve used both - but once you’re on either AWS or Azure, the native solutions are a lot less of a hassle and Nomsd (sadly) will never get the mindshare of k8s.
.. if you're in more than one cloud, and want a singular solution.
This is pretty rare, and it's getting rarer.
Clouds are successfully locking people in volume discounts, proprietary technology (like AWS Aurora), and non-transferrable configuration tasks.
I agree that cloud-agnostic tooling should exist, but as a for-profit company trying to find a large customer base, it's not a big market.
Re: HashiCorp Raises $175M at $5.1B Valuation
#77Earlier quoted context omitted.
Can you please share a link to ansible playbook and Kubernetes manifest for comaprison?
You can find the Kubernetes deploy here: https://github.com/hashicorp/vault-helm I can't share the Ansible stuff because it isn't public.
Thanks. Too bad Ansible playbooks are not public. To be clear I'm not defending Hashicorp, as I have played quite a bit with their tools (only opensource versions) and getting deployments production ready, can be painful, especially setting up security correctly, with so many moving parts.
I know about Helm chart for Vault (btw also created and maintained by Hashicorp). It's quite handy for quick deployments, but getting it to production will require changes, as most security things are disabled. All Helm chart does, it gets Vault up and running, unsealing has to be done either manually or via third party (cool thing, if your use-case allows storing such secret on third party HW). Not to mention, that if you want to use Consul as storage backend, you will have to deal with that using separate chart.
Without knowledge what Ansible playbook does, it's hard to compare the two. If ansible is configuring host OS from scratch (updates/tools installation etc) then yes, it might take much longer, then deploying to fully managed K8s cluster.
Re: HashiCorp Raises $175M at $5.1B Valuation
#78Earlier quoted context omitted.
Databricks is easily the best spent money in my stack. I also love Hashicorp's products, but unfortunately I'm not paying them anything. Before Terraform Cloud their enterprise offerings were quite bad IMO (no SaaS, had to talk with Sales, provision infrastructure yourself, high initial commitment, etc...). I will probably start using Terraform Cloud in a near future thought, just waiting for some key features to be…
I tried Terraform Cloud and went back to open source. I felt like it was a step backwards from Terragrunt. I'm only using it in the context of AWS though. I might try it again for a future project.
Yeah, forgot about that. I also use Terragrunt and also Terratest...
Re: HashiCorp Raises $175M at $5.1B Valuation
#79Earlier quoted context omitted.
You don't want to pay $1/month to store a single secret. You want a nicer workflow for creating ephemeral users and tokens than AWS themselves have. You want to do on-the-fly encryption of all sorts of things. You want a real PKI without every bit of know-how.
1$ per secret a month sounds extremely cheap considered on how much does it host to run vault
You can run vault on a single t3.medium backed by s3 with auto unseal and get pretty decent performance.
Re: HashiCorp Raises $175M at $5.1B Valuation
#80Earlier quoted context omitted.
1$ per secret a month sounds extremely cheap considered on how much does it host to run vault
You can run vault on a single t3.medium backed by s3 with auto unseal and get pretty decent performance.
If you don’t care about silly things like high availability and reliability. Hashicorp even recommends a cluster of three.
https://www.vaultproject.io/docs/concepts/ha/
And what business at scale is optimizing over 0.25 per secret and doesn’t care about HA?