Latest

Time Based Sessions

In this release (v1.11+) we're introducing time based sessions. It allows a user to request access to a connection during certain period. Let's try this out, first create a connection and configure the review plugin hoop admin create plugin review hoop admin create conn bash \ --plugin 'review:admin' \ --agent

Slack plugin management

Hey everyone, I'm Rogerio and I bring news 🧑🏻‍🎨 Sandro implemented the Slack plugin recently and you can see more about it in this release post, and now we can also manage this plugin on our Web App! Take a look at what it looks like: It's very simple, is it?

Slack Integration Plugin

I'm happy to announce that we have native integration with slack for reviewing connections (v1.10+). After enabling and configuring, it's possible to approve a time based connection or an one off execution directly from slack. In practice, when a user tries to execute a task with a review: hoop

The controversy of using Clean Architecture in Golang

Clean Architecture, by Robert C. Martin (Uncle Bob), is a design pattern for software. It focuses on separating concerns, testing, and maintaining code. But, using Clean Architecture in Golang applications has stirred debate. This is because Golang's philosophy differs from some aspects of Clean Architecture. The main controversies include: 1.

Plugin Management UI Rewrite

Hey, I'm Rogerio and I bring news! 🎉 We just rewrite the entire UI of our Plugins Management and we took the opportunity to create a new feature for you! Now we also can search for any connection inside the plugins management 🚀 Straightens up in the chair and see how it

External Secrets Plugin

We've launched a plugin that allows injecting secrets directly into a session, this allow administrators to have a more secure setup when provisioning credentials. This plugin have two options: * Derived secrets from environment variables inside an agent * Derived secrets from AWS secrets manager The pre-requisite is that secrets are encoded

Connect third-party chat apps to hoop.dev

How about getting to know what happens on hoop.dev directly on Slack? Our bridge can send notifications to third-party apps, like Slack (and much more coming soon). You will need to set up it on your self-hosted hoop.dev and below you will find the necessary information to do

API Client

This release (v1.7.5+) brings an experimental client for administrators to interact with api resources. The goal is having an alternative client for more advance uses like automating the creating of connections or agents, configuring credentials, etc. To view the list of connected agents: $ hoop admin get agents NAME

Add New groups

Hey everyone, I'm bringing a little bright news for you! Now we can add new groups to our users 🎉 It's easy and you can confirm it by this gif, take a look and try it by yourself 🚀

MySQL Native Connections

This release (v1.7+) we're introducing mysql native passwordless connections. This new type of connection allows connecting to a database with any mysql client, from IDE's to applications. System administrators have the capability of configuring database credentials without having to expose to end users. To begin it's very easy: # start

A payment platform's triumph: Balancing autonomy, security, and compliance.

EBANX, a leading payment platform in Latin America, supports diverse payment methods such as credit/debit cards, boleto bancário, and local bank transfers. Global businesses like Airbnb, Uber, and Coinbase rely on EBANX for their payment processing and infrastructure needs in Latam. The challenge: Ensuring security and compliance. With millions

EBANX

Challenge EBANX is a payment platform that supports various payment Methods such as credit/debit cards, boleto bancário (Brazil's most popular payment method), and local bank transfers, allowing global businesses to Trade with Latin America. With EBANX, companies like AirBnb, Uber, and Coinbase  benefit from payment processing, recurring payments, and

Immutable consistency of monetary data

A mutable database increases the complexity of a system. Immutable data models increase scale and simplify the system. Database updates delete data. Data is lost if we don't have the infrastructure to track changes. We will never know what was there before the update. But there is a better way:

Indexer plugin page on web UI

We just made it available on our web UI a page to use the Indexer plugin and query whatever you need in your sessions using our query search syntax. You can search in inputs and outputs and much more, the results bring you the session it was found and you

How To Craft An IAM Strategy: 6 Learnings From Hundreds Of DevOps Managers

This article explores how to create an access management strategy that gets your team 5x the results you're currently getting with the same efforts. If you implement this framework, you'll see a few benefits: * 3 high-risk security problems mitigated * 2x more time invested in cloud cost optimization * 7 hours saved

Daily Session Indexing Job

This release (v1.3.8+) automatically index the last 45 days of sessions. The job runs at 23h30 UTC daily and the plugin indexer must be installed and enabled for connections. Check it out our documentation for more information.

Indexer Plugin

Hey everyone! Now we can install the Indexer plugin and gain superpowers to find words in our sessions. 🚀 Indexer is a plugin to index the contents of executions (sessions) made by users in which you could use a powerful query syntax to search. Check it out in our documentation. How

Release: Editor plugin

Hi, I'm Rogerio and I bring news 🚀 This is the new plugin, Editor! Now you can have a connected environment with all your connections and increase your productivity in the execution of quick scripts using our Editor plugin. How does it work? Easy, firstly you need to install it from

Session Indexing

This release (v1.3+) introduces a plugin to index sessions of users and an API to search through it contents. This plugin allows more power in auditing and discover how users are interacting with internal services. Let's say as an administrator that you want to search for the keyword migrate

Release: Runbooks Plugin

Hi, I'm Rogerio and I bring news 🚀 This is the new plugin, Runbooks! Now you can integrate any git repository and use scripts from there to run or rerun any time and how you desire. How does it work? Easy, firstly you need to install it from our plugin store

Release: Hoop Desktop App

We have a Desktop App now! 🎉 This Desktop App allows us to connect in Postgres and TCP connections easily and avoid terminal command uses. What does it do? * List all connections of types: Postgres and TCP; * Allow to connect and disconnect on their connections that there's no plugin installed; How

Releases: 1.2.5 - Search session content

We can search the contents of a session by anything in the event stream or by its date. To filter by the content, you simply type what you need and it should as you type to search for your criteria. The search is case-sensitive. To filter by dates, you can

Releases: Introducing Runbooks

This release (v1.2+) introduces runbooks, which are templates that could be run against a connection runtime. With this release, any client could build input types based on a template obtained from a git source. # fetch-customer.runbook.sql SELECT firstname, lastname FROM customers WHERE customerid = {{ .customer_id | squote }} When this

Releases: User and date filters on Audit Plugin

Sometimes you need to be more specific in your search, that's why we brought more filters to the Audit plugin. You can filter for dates in a range or starting or until some specific date you want. And if you're an admin, you can look for sessions of every user

Release 1.1.0

This release introduces plugin hooks, which are standalone go applications leverage by go-plugin. Plugins Hooks are used to extend the functionalities of hoop, a plugin developer can: * Mutate the connection environment variables of a session dynamically * Mutate the connection client args of a session dynamically * Mutate the connection command of

How to Stop Wasting Time Managing VPN Servers

VPN Servers are a great solution to add a layer of security on accessing private networks. They are often used to expose internal services to collaborators, allowing them to perform administrative tasks like querying a database, connecting to a server via SSH, accessing an internal web application. Most of enterprise

How to Replace Jump Servers & SSH Keys With JWT Tokens

Today we're going to talk about how jump servers work and how hoop can be a great alternative to them. Jump Servers are nodes that will grant access to your underline infra-structure services. Imagine that someone from your company need to access a database or an application inside your internal

Access Control Onion

"Great! Now we can move to audit trails", he said with a smile. "Maybe your team should start building or hiring some engineers", I replied to the sec team lead. "Let's take this matter to the CTO", I continued while leaving the room to grab some water. The meeting goal

Runops is now hoop.dev

Use this link if are still using Runops: https://use.runops.io We are starting a new phase. Runops was born to bring more autonomy to developers. We do that by transparently baking security and compliance into tools devs use to perform sensitive operations. So, instead of revoking access to

4 Obstacles Keeping Fintech Developers From Accessing Production Environments

Why can't they access the database? Why can't they access servers? You are only trying to make my job harder. I accused him. I was tired of fighting with the security team. The security team lead stood, saying he was trying to ensure the company could stay in business. I

The 1 Problem That Keeps 99% of DevOps Teams From Creating a Platform

Your internal platform team has a big problem it has no designer or PM. But you think nothing is wrong because "you aren't building a product, you're building a developer platform". I spent ten years building internal developer platforms. A year into founding a dev tool company, I learned the

$1 million is how much your company wastes on bad developer experience

A 50 engineers company wastes 1 million dollars a year on developer interruption. Every time an engineering context switches, it costs the company 50 bucks. Consider a 100k developer salary: * USD 100,000 / year * USD ~8000 / month * USD ~50 / hour The 100k/year isn't counting hunting, hiring, onboarding, ramping, and

4 steps to fix security issues of SSH access to production environments

Fast access to the right engineers in production is critical for product speed. But you have many problems if you control access to production using SSH. Troubleshooting, bug fixes, and incident resolutions depend on fast data access. Unfortunately, many teams use bad solutions for granting access. And it creates significant

3 Lessons Learned From Benchmarking DevOps Teams Of 200 Fintechs

Today I'm sharing an analysis of the sizes of DevOps teams from 200 of the top fintech companies in the world. The goal is to help size your DevOps team by benchmarking successful companies. For companies in the report, find out how you compare to peers. Do you need more

Rethinking RBAC: Part 1

There are two security features any piece of software implement: authentication and authorization. Authentication systems evolved a lot over past years. OpenID, SSO, MFA, Magic links. But authorization is the forgotten child of security. Today we use the same authorization system created in the 70s. AWS IAM. Kubernetes RBAC. Postgres/

Case study: Dock

Managing developers access to production for a fintech unicorn How a fintech unicorn is using Runops to: * reduce time to resolution of support tickets; * and increase feature delivery speed by removing developers dependency on manual work from the security and DevOps teams. Company Dock is one of the largest fintech

New Dashboard page for admins

We've just released the Dashboard page for admins on our Portal. 🎉 It counts with: * An area where you can see queries running now; * An area with all queries waiting for review; * A list of total queries organised by their status, where you can filter by days; * And above it all,

Releases #26

We moved a lot of furniture from place to place, and we found better locations for lots of stuff in our Portal. So get some water and get ready! Starting with the new templates and reviews page. If you thought, "oh, nice, now they have a review and templates page!

Releases #25

We are improving some visualizations and adding some really cool features to Runops. So ensure you have your seat belt and take that sip of water to stay hydrated while we go through the news! New layout on Connections visualization We added a card visualization, and now it's possible to

No-code Interface for Firestore in Slack: Part 1

Hey everyone! If you are a developer that gets stopped by PMs all the time to do simple Firestore updates, this guide will save you a lot of time. Or, if you are a PM that wants to get less things through the dev team and faster delivery for your

No-code Interface for Firestore in Slack: Part 2

This is Part 2 of the series, check out Part 1 before continuing. All right, let’s do it! For context, in Part 1 we set up a Runops connection to Firebase which helped us to update Firestore adding a new Whitelabel into our Feature Flag system. And the structure

Releases #24

We got some updates on the new task page for y'all! * We did some design updates and added some features to the new task page. So buckle up because it's the first step to improving a lot more stuff in there: * We added a fancy pants Combobox component to the

AWS ECS execute-command vs Kubernetes kubectl

The ability to run commands inside a running ECS task was one of the most requested features of the ECS service. Yet, AWS released a pretty bad implementation if we compare it to alternatives like Kubernetes. Some of the key problems: 1. AWS ECS execute-command requires installing a ssm manager

Releases #23

The new year is here. We want to celebrate with you by sharing exciting new features that will make your life a whole lot easier. Happy 2022 and let's dive in! Run tasks in the Runops Portal Use a large canvas to edit your scripts, logs loading automatically right bellow,

Releases #22

Presenting: The Runops Web App! You can now use Runops in the browser! The web app experience is live for a few weeks and the feedback has been fantastic. Here are some of the things users love in the web app: Tasks Inbox You can view your Tasks' history in

Welcome Groups, farewell Teams and Roles

We simplified the Runops authorization mechanism! Now, instead of controlling access to Connections using roles, and reviews with teams, you use only one property: groups. Plus, we added the capability of controlling access to templates using groups. What are groups? Groups are a simple concept to grasp and will enable

Append keys to existing Secret in AWS Secrets Manager

The AWS update-secret operation for Secrets Manager replaces all keys of a secret with the new value provided in the --secret-string. But sometimes we want to add a few extra keys, without replacing values already present in a secret. In this post we show how to use bash to add

Releases #21

Runops REPL! No more typing the same boilerplate when running Tasks. Connections without reviews return the logs of a Task right the way. We added a new command to the CLI: runops tasks repl  -, where you can start an interactive session with your Connection. In the REPL session, you

Releases #20

We are excited to announce many of the top requested features that we released over the last few weeks. Let's dive in! Runops API is out You can start using the Runops API to build automations and integrate them with your existing tools. The list of endpoints and their specification

Releases #19

We have been working hard the past couple of weeks to get this release out, and it's finally here! The new Runops agent is available, and it brings huge improvements to the Runops experience. We also launched a new version of the web app to get metrics and graphs on

The Costly Mistakes Fintechs Make When Trying To Improve Security

Time to call a DevOps engineer to get permission or have them run the patch. The worst thing that can happen to an engineer is to get paged out-of-hours only to realize they can't fix the problem on their own. They did all the hard work of waking up, debugging

Releases #18

📚 Revamped documentation website We completely revamped the Runops documentation website. It's now easier to navigate and has a better design. We also enabled the chat support widget to the docs. Now you can reach out anywhere in the docs to talk to us. The new website is also hosting our

Releases #17

🎯 Select Task type in Slack You can now override the type of a Task in Slack. We added a new menu option that you can use to change the type from what is set in the Connection when creating a Task in Slack. It's an optional field, so if you

Releases #16

Improved logs experience in Slack, Connections pagination in Slack, improved analytics and security 📀 Logs in Slack We improved the delivery of logs in Slack. The Task logs are now delivered as an attached file to Slack for logs with less than 5MB in size. You can see the results directly

Releases #15

🪛 Enhanced Templates execution We fixed a bug that prevented Templates from running when the number of Templates in the Github repository increased. Templates now run faster and there is no limit to the number of Templates in the repository. We also updated the CLI experience: the Templates list now return

Releases #14

ECS exec Tasks, CLI Sign Up, Compliance enforcement, and major CLI experience improvements. 📇 ECS Exec commands integration You can now use Runops to access running containers in AWS ECS, using the ECS exec feature recently launched by AWS. This means that you can get a shell inside ECS containers without

Releases #13

This week we focused on a big improvement to the logs! 🧽 Gigantic logs improvement We removed all the clutter present in the logs of every Task. Now the logs from your tasks will get just what came back from your command. No additional clutter making it hard to find the

Releases #13

This week we focused on a big improvement to the logs! 🧽 Gigantic logs improvement We removed all the clutter present in the logs of every Task. Now the logs from your tasks will get just what came back from your command. No additional clutter making it hard to find the

Releases #12

Big improvements to logs, Azure and Terraform integrations, create tasks from Slack, and more! Another week packed with big enhancements to Runops! Let's dive in 🤿 🪵 Unlimited task log size We removed the 5MB limit to the size of Task result logs. For large results that don't fit in a Slack

Releases #11

CLI OAuth 2.0 authentication and data security improvements 🔐 CLI OAuth 2.0 authentication Now you can authenticate in the Runops CLI using Google, Github, or a custom username + password of your choice. This is an improvement over the previous key-based authentication. Now we only store Bearer tokens locally. Tokens

Releases #10

Create new users from Slack and synchronous Tasks execution. This week brings two important updates that will make Runops a lot better. 💬 Create new users from Slack Now everyone in your Slack workspace can join Runops, automatically! Anyone can type the /runops register command anywhere. We will ask for a

Releases #7

Big week: non-technical workflow in Slack, CLI 0.2.0, better Task statuses, and more. I'm excited, this was one of our biggest weeks for releases. With today's releases, we enable non-technical workflows. Non-engineers can start leveraging Runops! Making a SQL query or a python script available for Customer Success

Releases #6

This is a special week. We launched on Product Hunt, check it out! Some of the updates: * 🚀 Partial support to running Templates in Slack, let us know if you want early access. * 🐘 🐍 Added 2 new Task types: Postgres with python and MongoDB, check them out * 🐞 Fixed bug of large Tasks

Releases #5

Great week, here are some of the highlights: * 🥨 Added Templates interactions in Slack: list and help (more coming next week!) * 🚨 Improved error messages for Task reviews * 📲 Send notification to the creator of a Task when it's fully approved * ⚙️ Get new self-hosted runner tokens for existing Connections * 🛠 Improvements to our logging

Releases #4

Packed week! Here are some of the things that you can do: * 🏃 Create self-hosted runner tokens in the CLI * 🎯 Configure Slack review channel per Connection * ⚙️ Opt-in to use the Runops-distributed Slack app We also: * 📚 Improved Quick Start guides * 💬 Fixed bugs in the Slack channel name validation As always, we would

Releases #3

A few more updates of the past few weeks: * 👾 Improved the experience of the CLI install script * 🎯 You can now configure Connections to skip reviews! This is great to provide access to read-only resources and leveraging the PII data filter. * 👨‍🎨 We revamped our landing page * 💬 Improvements to our Slack app

Releases #2

More updates! * 🚀 We released the Templates feature. * 👾 Added support to kubectl Tasks * ⚡️ Major stability and performance enhancements * 🗺 Improved docs navigation with indexes and menus * 🎯 Added support to optional reviews for specific Connections * 🚧 Removed annoying message about GET requests from some CLI commands As always, please let us know what you

Releases #1

Sharing a few updates we made in the last few days to make sure you don't miss them: 🎯 Create, list, and update Connections using the CLI 📝 You can read an early version of the docs for Tasks Templates 🔒 We published the docs on how to connect to private Connections using