How to approve and merge a pull request professionally? With two developers and their yubikey as authentication, using the briefcase of launching.
@techwolf12 i so hope this isnt a shitpost because this would be sick to have as a deployment system
@zoe It is fully functional to merge pull requests from our Gitops repository to actually deploy to Kubernetes. Yubikey authenticates which of the developers is the approver, but there is no requirement to use it since we can also approve from Github's PR page. It's just a fun gimmick ;)
@techwolf12 i would 100% use it all the time, simply because its funny ​
@zoe Same yeah! But it is a bit less compatible with the work from home days ;) We try to use it when we can!

@techwolf12 @zoe I've been toying with a solo variation of this two keyswitches mounted either side of my monitors. Turn both within 1s of each other and hold for 2s to tap your yubikey.

Combined with a little bit of webauthn nonsense, you could even make that work for two separate stations over the network!

Utterly pointless of course, but who doesn't want a bit of ceremony in their deploys

@techwolf12 you forgot to place the yubikeys 2m apart so they can't be inserted by one person.

Plus you may want to add dedicaded turnkeys/turn switches and buttons to require two hands to prevent less than two people performing it!

@kkarhan I'll take those notes for the next iteration. But I already like the function here where we can also just approve it on the web interface ;)

@techwolf12 I just thought about something close to this!

https://youtu.be/fmsQOA2zhz4&t=437

- YouTube

Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

@kkarhan @techwolf12 Yeah dual ports too far apart for one person to reach is the way to go if you want it done properly.
@techwolf12 ... I REALLY gotta make me one o' thems.👀✨

@techwolf12

I don't know, it looks like a nuclear football to me.

@techwolf12 Oh let me quickly launch an ICBM UHHH i mean lemme quickly merge this pr 
@blackwolf Just make sure you grab the right case ;)
GitHub - martinwoodward/DasDeployer: Raspberry Pi powered manual release approval gate for Azure Pipelines. Mit viele blinkenlighten

Raspberry Pi powered manual release approval gate for Azure Pipelines. Mit viele blinkenlighten - martinwoodward/DasDeployer

GitHub
@BenCurranDev Self build in our company, but it is fun to see others! Ours approves/merges Github PR's where Actions do the rest of the work
@techwolf12 @film_girl and the team would like this I reckon.

@techwolf12

Okay. This is incredibly cool even if it's "just" a gimmick 

@karb It's a functional gimmick, which are the best kinds ;) I love that our work gives us time to do random stuff like this ;)

@techwolf12
This is super cool! Now, add a display in the top part for reviewing code. 🤣 And make it work offline:

- Use a program to load the PR's git-patch to a USB stick.
- View diffs on device, approve and sign with the Yubikeys.
- Use a program to apply the signed diff to the Git repo.
- Add a git hook to the server for checking that the PR is signed, when pushing to main.

@techwolf12 "Turn your yubikey, sir!"
@techwolf12 Would also work nicely for those pesky DNS and BGP updates 
@m DNS is broken anyway and for BGP you can always announce all the IP's so you are always reachable ;)
@techwolf12 @0xC01DC0FFEE Finally, someone built it. My
Colleagues and I have been thinking about it for twelve years.
@techwolf12 Prod 'push' to push pull to prod.