Reddit DevOps
277 subscribers
69 photos
32.2K links
Reddit DevOps. #devops
Thanks @reddit2telegram and @r_channels
Download Telegram
CTO says AI makes junior and senior engineers the same

Hi everyone,

I’m a junior DevOps engineer, and recently our CTO said something that honestly made me question my understanding of software engineering.

He has around 30 years of experience, and his statement was basically:



>With AI tools like Claude Code, there is no real difference anymore between a junior and a senior engineer, or between a mobile developer, backend developer, and infrastructure engineer. If you have access to AI, you should be able to do any task assigned to you.

I understand that AI has changed a lot. Claude Code can help you write code, understand unfamiliar technologies, debug problems, and even work on things you have never done before.

But I’m not sure I agree that this removes the difference between experience and specialization.

his statement made me feel unstable about my career and what I should focus on learning.



Has AI actually reduced the gap between junior and senior engineers?
Does AI really make specialization less important?

https://redd.it/1vjxidv
@r_devops
Karpenter Implementation

I want to deploy Karpenter. However, I would like to learn the best practices for using Karpenter on EKS. Currently, we are using app-of-apps in ArgoCD, all within a Managed Node Group.

With Karpenter, our plan is to have it configured like this:
\- Scale down the MNG and run the Karpenter Controller inside the static MNG, alongside cluster system resources (DaemonSets, add-ons, including ArgoCD)
\- Karpenter is managed as an app in ArgoCD (using bootstrap with ArgoCD)

Is this design already suitable, or should we consider changing it? We need advice.

https://redd.it/1vk641k
@r_devops
How do you handle conflicting infrastructure state?

Curious how people handle this in real environments.

Say Terraform says an EC2 instance should have encryption enabled, but the AWS console/API shows it disabled. Your CMDB still says it's compliant.

How do you figure out which one is actually telling the truth?

Do you have a defined source of truth, or do you usually investigate the discrepancy manually?

And how do you tell whether it's actual drift, stale information, or something that failed during deployment?

https://redd.it/1vk7lk2
@r_devops
Weekly Self Promotion Thread

Hey r/devops, welcome to our weekly self-promotion thread!

Feel free to use this thread to promote any projects, ideas, or any repos you're wanting to share. Please keep in mind that we ask you to stay friendly, civil, and adhere to the subreddit rules!

https://redd.it/1vkd20a
@r_devops
Communication with non-technical people

Hi. I have been working in the IT field for about 15 years now and am constantly faced with the problem of communicating with non-technical people such as managers of various levels, etc. I constantly have to fend off all sorts of idiotic ideas that management is trying to impose on me. As a technician, I can make a diagram, a presentation, and write program code, but for non-technical people it all sounds like spells and Harry Potter. I have seen this problem in different companies regardless of the size of the company and in which country it is located.

My question is, are there books or online courses that simply explain how to communicate your message to non-technical officials?

P.S. I'm just tired of doing pointless work just because I can't explain to management that it doesn't work that way and there are better ways to complete the task.

https://redd.it/1vkegda
@r_devops
AI agent shouldn't stop working when you close your laptop.Here's what actually fixed it

We've been running AI coding agents inside Kubernetes instead of on developer laptops, and the first thing that broke was the most obvious one: any long-running process died the moment someone closed their browser tab.

If you've only ever run short-lived jobs, this doesn't come up. But a coding agent doing a large refactor can run for hours, and losing it at hour three because someone's laptop went to sleep is miserable. The goal we ended up with was agents that keep working overnight, several in parallel, on cluster capacity the team is already paying for.

What didn't work:

Running the process as the container's main command. Fine until you want to attach, detach, or run a second thing in the same workspace. You get one process and no way to interact with it.
Streaming a raw terminal over a websocket. The process is still tied to the connection. Network blip, laptop sleep, tab close process gone. Also, scraping terminal output for structured status is painful and breaks constantly on ANSI escapes.
`kubectl exec` for everything. Same problem the process is a child of the exec session and dies with it. It also means every user needs exec permissions on the pod, which we didn't want.

What worked:

Decouple the process lifetime from the connection entirely.

The agent runs inside a tmux session in the pod, started detached. The web layer attaches to tmux rather than owning the process. Disconnect, reconnect, connect from a different device the session keeps running because nothing about it depends on the viewer.
A per-user PVC mounted at the home directory. Pod restarts, chart upgrades, and rollbacks don't lose work. This matters more than expected agents accumulate a lot of state in dotfiles and caches.
A structured session layer instead of terminal scraping. The agent CLI runs headless and emits structured events; the web layer renders those as readable text plus expandable tool-call entries. Much more reliable than parsing a terminal, and it means you can actually see what the agent did rather than a wall of escape codes.
Because sessions are detached and addressable rather than tied to a viewer, a second agent can be started in the same workspace while the first is still running, and you can check on either one later from a different device without disturbing it.

On the multi-tenancy side, since each user gets their own workspace:

Namespace per user, with its own service account and resource limits. Simple and it maps cleanly onto RBAC.
NetworkPolicy restricting ingress to the platform's own ingress layer. Also and this is the one people forget block egress to the cloud metadata endpoint (169.254.169.254). An agent that can reach node metadata can potentially pull cloud credentials. If you're running any kind of agent or untrusted code in-cluster, check this today.
Short-lived tokens issued by a sidecar rather than mounting long-lived signing keys into the workspace container. The agent container never holds the sensitive key material.
Ingress + cert per user, so each workspace has its own URL and its own OAuth binding. Only that user can reach their own workspace.
Workspace config committed to git, so provisioning is reproducible and auditable rather than living in someone's shell history.

The practical upshot of doing it in-cluster is that source, .env files, and model API calls stay inside the same perimeter as everything else you run there's no third-party environment holding the code while the agent works on it.

The whole thing ends up as one Helm chart: shared ingress/OAuth/cert infrastructure, plus a workspace per developer with the editor, terminal and agent CLIs already in the image.

The honest tradeoff: namespace isolation is not microVM isolation. If you're running genuinely untrusted code from strangers, this is not the model you want you want Firecracker or Kata. For a team's own developers and their agents, namespaces
plus network policy plus scoped credentials has been a reasonable place to land.

Happy to go deeper on any of this if useful.

Full disclosure -I work on KubeCoder, the open-source project this comes out of (MIT, one Helm chart).

https://redd.it/1vkkmiu
@r_devops
Adapting to AI tooling in DevOps

My company is making a hard shift towards AI and I'm struggling. I'm tasked with something I have a small amount of knowledge about, but not enough to fully implement. Before AI, my approach to challenges like this would be to iterate on it, work through the problems, and learn what's required. Using Claude has just been a terrible experience for me, and I'm wondering if I'm the problem, my approach is the problem, or if this is just what we're all doing now.

I explained what I wanted (essentially a DB migration pipeline from RDS -> k8s pod) and claude barfed out about 10 shell scripts and a handful of pod templates. Everything had long, meandering comments that made very little sense. Is my job now to just start running this code and feeding pipeline errors back into claude and not worrying about it?

I started to pick apart the comments, ask questions, and update with my own comments, with the goal of being able to understand the process in detail. In doing this, I found a bunch of things that just didn't make sense or weren't optimal. When I ask the AI agent about it, it says I'm right and generates a bunch more stuff that may or may not make sense. Interacting with it is making me feel like a crazy person. I hate the way it presents information back to me. It's not succinct, it pulls in context that is of negligible value and just muddies the waters, and it's been very frustrating and existentially upsetting.

I'm willing to hear that I'm using the wrong model, or that I didn't spend enough time on my .md files and skills, but I'm also wondering if this is a normal experience, or if my approach is just dated, and I need to get over my personal values about understanding what I'm generating and giving to customers? I'm not so-much asking about the specific task at hand, just about adapting and having realistic expectations and reducing friction. I'm also very happy to hear about people's struggles.

https://redd.it/1vklxud
@r_devops
Any devops from Perth here?

Hi there I have been working as a DevOps for past 5 years and I recently moved to Perth so I am finding harder here… moreover I am feeling like people still don’t understand DevOps what really is DevOps we can catch up so Perth DevOps hmu..

https://redd.it/1vl14gc
@r_devops
Sydney DevOps Meetup: AI Agents and Open Source Developer Platforms on Kubernetes

Sydney DevOps folks,

If you're working with DevOps, Kubernetes, SRE, platform engineering, or AI infrastructure, CNCF Cloud Native Sydney is hosting a meetup on August 19 around two open source projects.

The session will cover:

kagent — a Kubernetes-native framework for building, deploying, and managing AI agents, including areas such as MCP integration, observability, security, and agent workflows.

GitHub: https://github.com/kagent-dev/kagent

OpenChoreo — an open source developer platform for Kubernetes that brings together platform abstractions, CI/CD, GitOps, observability, Backstage, and developer self-service.

GitHub: https://github.com/openchoreo/openchoreo

The discussions should be especially relevant if you're interested in how DevOps and platform engineering workflows are evolving around Kubernetes and AI.

Location: Cuscal Limited, Barangaroo, Sydney
Date: Wednesday, August 19
Time: 5:30 PM – 8:30 PM AEST

The event is free and includes technical sessions, networking, food and drinks, and Q&A with the maintainers.

RSVP: https://www.meetup.com/cncf-sydney/events/316052564/

If you're around Sydney and working in DevOps or cloud native, come join us.

See you there!

https://redd.it/1vl8akn
@r_devops
EU cloud provider news roundup, May–Aug 2026: KVM escape patch wave, Redis→Valkey, uneven 1.36 rollout

I run [eucloudcost.com](https://eucloudcost.com/) (EU cloud price comparison, open source data). I also track what providers actually ship each month — blogs, changelogs, RSS, \~30 providers.

Latest edition, May 21 – Aug 6: [https://www.eucloudcost.com/blog/eu-cloud-news-may-aug-2026/](https://www.eucloudcost.com/blog/eu-cloud-news-may-aug-2026/)

Highlights:

* Januscape (CVE-2026-53359) was a KVM escape at the **hypervisor** layer — managed Kubernetes did not absorb it for you. OVHcloud patched tens of thousands of machines in a week.
* Redis is being replaced by Valkey, STACKIT deprecated Redis the same day it launched its Valkey KV store, IONOS took Valkey-backed In-Memory DB v2 to GA.
* K8s 1.36 spread unevenly: AKS shipped it GA *with LTS*, Scaleway Jul 7 - STACKIT SKE is still on 1.34, no EKS announcement at all.
* OVHcloud is contesting criminal charges in Canada over a production order. A European provider fighting a foreign lawful-access order is a live test of the whole sovereignty pitch \^\^
* Also OVHcloud: replacing Ceph with Exten, an in-house NVMe block storage engine.
* No new EU price hikes this quarter; Exoscale cut A40 GPUs 30%.
* IONOS kills Llama 3.1 405B on Sep 15 — HTTP 400, no fallback. Pinned model IDs have expiry dates now.

Covers hyperscalers too, plus a deadline table.

https://redd.it/1vld5jy
@r_devops
The unholy trinity of LLM API errors (and my dirty fix to stop agents from crashing at 2 AM)
https://redd.it/1vlgjgg
@r_devops
Je suis débutant et cherche à réaliser ce projet

Bonjour à tous.

Je cherche a créer un site web ou un logiciel permettant de la saisie de donnees sur un fichier excel (ou google sheet) de manière dynamique (en utilisant BEAUCOUP de questions soumises à conditions) et si possible d'une loop.

Le fichier excel est déjà existant et il a été crée comme un questionnaire de saisie papier, je ne peux pas le modifier.

Mon but final est que les réponses au questionnaire crée alimente le fichier excel et que le répondant puisse récupérer son rapport sous pdf ou excel.

J'ai réalisé un questionnaire Google forms avant de me rendre compte que les actions conditionelles ne me conviennent pas.

En actions conditionelles j'ai besoin:

\- que des réponses se remplissent en fonction de la réponse à une question précédente

de sauter des questions

d'ajouter des questions

Je ne m'y connais pas du tout en code, (rien de rien)

Je souhaiterais utliser en priorité SurveyJS sauf si vous me proposez une solution plus adéquate.

Merci d'avance pour votre aide

Je reste à l'écoute pour répondre à vos questions concernant mon projet.

https://redd.it/1vm9srv
@r_devops
Vendor‑Neutral or Cloud‑Specific for Kubernetes: What’s the Better Path for a New Container Learner?

I have ADHD and I wasn’t taking my medicine like I should have been, so why I started learning containers out of the blue may have something to do with that. However, I started back on my meds and I am still learning and highly interested in building and managing containers. I have only been doing this for two weeks so I’m still very new to it. I still have to look up Git commands and still run into a lot of simplistic issues that I am fixing through troubleshooting. But I have to say, building and managing containers via Docker Desktop on my personal laptop is exciting and fun. I don’t know if I’ll turn this into a career. I am currently in IT, and have been for 10 years but I am 40 years old. I’m sure my age would put a lot of people off no matter how much knowledge I have and skill I can show.

My next step is going to be learning Kubernetes. And this is where I am asking for advice on. Should I continue my learning via the vendor neutral approach or should I move my learning to a cloud platform? There seems to be some advantages to learning a specific cloud platform but if the knowledge I’m building now translates to all of them 1:1, then sticking with vendor neutral learning would be more advantageous in the long run.

Also, if you guys don’t mind answering this question as well, I’d greatly appreciate it. What else should I learn?

https://redd.it/1vmdexs
@r_devops
Cheapest server for a school project

Hello guys, i have a school project to deploy an app on cloud using ansible, the the servers are not given by the school itself.
What is the cheapest available clouds out there? I only need it to validate the project and then I can cancel.

https://redd.it/1vmgrns
@r_devops
AI Agent for CI Failure Diagnosis

I'm trying to build an agent that finds the reason why CI run failed

Like, what are the things going on in your head and

Let's imagine. Your brain has something like a belief system that sort of makes you suspect certain things more.

I want to know how practitioners think, like what doubts they are holding the moment they see a CI file, and how they determine what to look for to find the real cause and if it's a real code failure or some flaky test

And finally, At what point do they determine that they're pretty much sure about the cause?

https://redd.it/1vmg4ew
@r_devops
Deploying docker-compose.yml

Hello all. The circumstance I have working with is the following:
* I have an Apache2 PHP server that gets bundled as a Docker image in a CI process to ECR

* I have an infra repository with a docker-compose.yml that bundles the PHP Docker image to an Nginx image, alongside Nginx config like attaching TLS certs


When the CICD process deploys a release, it deploys a new EC2 with a given user data script to prop up the server. If I only had a Docker image, the user data would generally look like "Pull down ECR image and start image", however in this case I am spinning up a docker-compose.yml file.

How is this typically done? I suppose I *can* add a CI process to zip up the docker-compose.yml and related nginx config, however feels backwards? Is there a consensus with this?

If I am fundamentally misunderstanding something let me know, I'd say my only constraint is I'd like to solve this problem in a relatively cloud agnostic environment (so keeping EC2 as a VM, ECR as a registry, but excluding abstractions like Fargate or ECS)

Thanks!

https://redd.it/1vmjm45
@r_devops
Has anyone looked at RapidFort's curated libraries as a Chainguard alternative?

We've been evaluating Chainguard libraries as a way to reduce the risk of pulling vulnerable or malicious open-source packages into our builds. It seemed like one of the few established options. That was until I saw that RapidFort recently launched curated libraries as well.



Has anyone had a chance to compare the two yet? I'm interested in how they differ in practice rather than on the marketing pages. Things like package coverage, malware scanning and workflow integration. Also developer experience and ongoing maintenance all matter to us.



Has anyone here evaluated both or decided one was a better fit?

https://redd.it/1vmo871
@r_devops
Tired of juggling WindTerm / Termius / FinalShell — so I made one Rust app that aims for all three

https://github.com/vesaaa/vsterm

|Capability|VsTerm|WindTerm|Termius|FinalShell|MobaXterm|SecureCRT|Xshell|Tabby|
|:-|:-|:-|:-|:-|:-|:-|:-|:-|
|Implementation language|Rust|C/C++|Electron|Java|C++|C++|C++|Electron|
|Max terminal scrollback lines|100k / 500k (Pro)|unlimited|\-|\-|360,000|128,000|\~2.1B|25,000|
|Command-block folding / outline in terminal output|||✗|✗|✗|✗|✗|✗|
|Integrated SFTP pane / remote file manager||||||◐|◐|◐|
|SFTP transfer progress / queue visibility||◐|◐||◐|◐|◐|◐|
|ZMODEM (rz / sz) built in|||✗||◐||||
|ZMODEM progress surfaced in the app|||✗|◐|◐|◐|◐|◐|
|Terminal file-pane path sync||✗|◐|◐|✗|✗|✗|✗|
|Elevated SFTP that can follow sudo -i / su||✗|✗|✗|✗|✗|✗|✗|
|Route diagram / policy-routing topology||✗|✗|✗|✗|✗|✗|✗|
|Path trace with geo / ASN enrichment||✗|✗|✗|✗|✗|✗|✗|
|Built-in IP quality / reputation checks||✗|✗|✗|✗|✗|✗|✗|
|CPU / memory / storage graphical monitor||◐|✗||✗|✗|✗|✗|
|Connection / socket monitoring panel||✗|✗|◐|✗|✗|✗|✗|
|Connect effects / motion polish||✗|✗|✗|✗|✗|✗|✗|
|Desk pet||✗|✗|✗|✗|✗|✗|✗|

https://redd.it/1vmbzrv
@r_devops