Triggered
The day started pleasantly enough. Getting the Service Now integration done was looking in reach. And finishing the WAF deployment was looking plausible too.
Then, everything went tits up. Several days previously, I’d noted to the Security team that Service Now image I’d been building suddenly had a “High” issue found on its security scan. This was in the source Docker image from the internet, had no fix, and was only discovered a few days previously. In otherwords, it needed to be reviewed by the Security Team for risk, and if not too risky, whitelisted.
But here’s the rub: the big consultancy bizarrly weren’t aware of this process. And since a company manager had brought the now running image to their attention - they were both triggered and on the defensive. What proceeded in Teams was a nightmare where they almost pretended not to understand a single thing about how Docker images worked, nor what had already been pre-agreed with the Security team. Then us company staff were attacked for “deploying things in an incorrect way”.
Unlike my usual stance, I decided to be annoyingly polite and calm, and proceeded to question what that even mean, and how we could improve whatever the issue was. Of course no answers were forthcoming. The team lead simply stopped replying as he didn’t get the rise he was clearly after.
All well and good you think? No. Word came late in the day that the wanted me to stop work on the two tasks I’ve been at for a few weeks now. The WAF, instead of using a solution that works perfectly right now and deployed with Terraform, will now be setup via Azure Service Objects (ASO) by one of the new guys. Ok, not sure if that’ll work but whatever. But it doesn’t end there. The Service Now integration that the company wanted - someone decided to use Pager Duty instead. My task for the rest of the week - setup a dashboard to show our system status on the office TVs - that turn off at night and won’t redisplay what was showing in their weird basic browsers.
Peachy. So, given the number of day I worked on all of that, they wasted £7000 of the company’s money. And now they want to waste more by getting me to hunt for system metrics to display on a TV for a few hours.
Fine. Whatever.
:-(