DevOps best practice cheat sheet?

Is there some DevOps best practice cheat sheets available for Software Engineers? Example, not deploying on a Friday before weekend, Keeping Monday reserved for troubleshooting issues generated over the weekend etc.

https://redd.it/nj7xan
@r_devops

Difference between modern dev-op tools Ansible / Vagrant / Packer ...

I'm a developer with almost no background in modern automated dev-op tools. I've been reading on what these tools are about and would greatly appreciate if someone can elaborate by examples why why and when we may need these separate tools?

From how I understand it, Ansible and Vagrant sound almost the same. They both configure and manage VMs.

For Packer, it's not clear to me why we may need this as well. My question is more alluding to why can't we just use Ansible completely to bring about the changes we need on top of a VM? If we use something like Packer, where do we draw the line as to how much should be included in the VM image vs how much Ansible should do with the VM image afterwards?

https://redd.it/njjr6t
@r_devops

tOOLING TIPS FOR LOG PARSING AND FOLLOW UP ACTIONS

Hello friends, comrades, patriots and fine nerds.

I find myself in a position were I need to grab various logs, ranging from Laravel logs, Linux Syslogs, Windows syslogs, logs from own written python scripts and so on so fourth, and depending on what it is, do X or Y action.


I am sure there are great tools out there for this rather than writing my own python parser for each and every log, Prometheus and so on.

However, this is a field in which I am not very familiar so if _you_ could write down some short ideas on how to build something "slightly" more scalable than making 1 python container per log, I'd be most grateful.


Examples:


>Laravel.log throws an REST-API error that Unit 411 has been locked out from $ERP-APP > Make a slack error or trigger PRTG alarm

>Linux syslog throws an error that $FTP_user is using wrong password > Send an email to [email protected]

>$Proprietary_integration_platform throws a log error that $customerFTP is not answering. > Send a text message to /u/guemi and tell him to bitch at someone

>$CustomMadeApp log shows that an automated job has completed > Update a statistics DB that then get's printed to pretty graphs in Grafana so management can look at pretty numbers and statistics

Etc etc etc


EDIT: Uh, sorry guys. I think my caps lock may have been accidentally turned on when I wrote the title. :D

https://redd.it/njgem1
@r_devops

Would an early job switch pigeonhole me?

Hi.

I've been working for a little over a year as a software developer. I'm unhappy with my current employer, so I've been applying for other jobs. One of those jobs was titled as a devops role, which was offered to me.

My understanding is I would be doing a lot of programming in the form of automation. I really like automating things and making people's lives easier, which is what drew me to the position.

Will an early job switch from developer to devops kill my chances of returning to a developer role if I wanted to? I want to explore and try new things while I am still comfortable doing so. I'm young and don't have much as far as commitments go, so I'm thinking why not, but change is always scary so I'm reaching out to hear the experience of others.

Any insight would be appreciated.

https://redd.it/njewm0
@r_devops

DevOps The Hard Way (AWS)

Hey All :)

My name is Michael Levan. I'm an engineer and educator in the cloud and DevOps space. I've been thinking about a new open-source project that can help people create a real-world scenario so they can get the practice to become a DevOps Engineer.

I see a lot of posts on this forum about getting into DevOps and seeing what a day-to-day will look like and truthfully, it's a pretty hard question. If you line up ten organizations and ask them all what DevOps engineers do, you'll most likely get ten different answers lol.

Because of that, I wanted to put together a little something to help out.

This project is still very much in-progress, but here's the line-up :)

AdminTurnedDevOps/DevOps-The-Hard-Way-AWS: This repository contains free labs for setting up an entire workflow and DevOps environment from a real-world perspective in AWS (github.com)

https://redd.it/nj7bf2
@r_devops

What do you want me to know? DevOps Recruitment

I am a tech recruiter in the UK who is primarily hiring in the DevOps market. As experts, I was wondering what you want me to know about DevOps to get you a job effectively?

I normally have a 15-30 min chat before putting you forward for any job, feel free to suggest some questions/answers you think would be useful :)

Cheers!!

https://redd.it/njepjn
@r_devops

is it worth it to create self hosted open LDAP server?



I am working on many projects, private and for costumers where the main goal is to create streaming/analytical infrastructure. Here are different tools that I am using:

* kafka for streaming
* s3, postgresql for storage and analytics
* Grafana and Prometheus for monitoring
* Hachicorp Consul and Vault for data mesh and secrets management
* Nginx as reverse proxy

Now, I am struggling to find some decent concept for centralized authntication/authrization. I was thinking about creating my own LDAP and Kerberos server but it feels somehow wrong.

any suggestions or recommendations?

https://redd.it/njdqzj
@r_devops

I am Challenging myself to master DevOps in 6 months!

https://blog.devgenius.io/i-am-challenging-myself-to-master-devops-in-6-months-534167db988c?sk=96a8264a2be1cb8c94c571aa5041f861

https://redd.it/njsfws
@r_devops

Docker -> Traefik + Keycloak: how to Claim and Check rolenames?

Hi guys,

first, Iam quiet new to devops and docker and i really Like it so far. My questionen which i cant get an simple answer is: how do i claim the roles from the token from keycloak and check it for a specific rolename?
I was not able to find something in Traefik Docs under https://doc.traefik.io/traefik/middlewares/forwardauth/ and https://github.com/thomseddon/traefik-forward-auth seems also not correct. I dont have traefik Enterprise so this https://doc.traefik.io/traefik-enterprise/middlewares/oidc/ is also not reachable for me :(.

I dont want to use Apache2 with its oidc mod since i move all my things to docker this issue is the only thing i could not managed to solve with Google.
Please Help me maybe with an easy docker-compose ? So i could learn?
Thank you very much :)

https://redd.it/njba3q
@r_devops

Anyone with experience with DevOps job assessments? (Graduate)

Hi all. I'm currently going through the application process for a DevOps graduate scheme at a big company in the UK, so competition will be tough. I've completed the first generic assessment, but the next one coming up will be a coding assessment involving shell scripting and YAML.

I'm a JavaScript graduate developer myself moving into DevOps (hopefully). I'm confident in my coding abilities, and can brush up on any algorithmic stuff from my studies.

I've started practicing shell scripting and looking at YAML as I've not had any experience with them before (it recommended learning the basics for this). Does anyone have experience going through a process like this? What kind of coding test can I expect? Any advice for a developer moving to DevOps?

Cheers all

https://redd.it/njb4gl
@r_devops

Shall we allow projects that don't want to do CI/CD?

We are operating an awesome CI/CD pipeline, and now a project that insists on using Gitflow (because they don't trust their external developers *cough*) has asked us to run their stuff through the pipeline. To be honest, my personal answer is a clear N.O., but my team members are more lenient. What do you think?

https://redd.it/nj2mck
@r_devops

How to pass Vercel's SSL certificate to Nginx backend?

I have a domain mydomain.com managed by Vercel serving a React frontend in **frontend.mydomain.com**, for both of which Vercel generates SSL certificates (including a wildcard *.mydomain.com). The only thing that Vercel shares with me is the certificate id, in the shape of cert_HasdfH234aDSFhasdfGAS1k5G

I have also set a DNS A record for the subdomain **backend.mydomain.com** pointing at the IP address of a DigitalOcean droplet which is running a server behind an Nginx Docker container. I had the same setup working with http in Namecheap, but since I've let Vercel manage my DNS I can't ping my server using http, and it seems that only https would work.

​

My question is:


How do I configure nginx.conf for the nginx container in my backend to accept that SSL certificate? Right now I have something like:

​

> events { worker_connections 1024; }
  http {
    server {
      listen 80;
      server_name backend.mydomain.com
      location / {
        proxy_pass https://backend:4000; #backend is the service name of the backend container.
      }
    }
    server {
      listen 443 ssl;
      server_name backend.mydomain.com
      location / {
        proxy_pass https://backend:4000;
      }
    }
  }


...which being incomplete, naturally throws the error:

>nginx: [emerg\] no "ssl_certificate" is defined for the "listen ... ssl" directive in /etc/nginx/nginx.conf:22

​

I have checked several guides for setting up HTTPS in nginx, but none seems to include adding certification through an ID such as the one provided by Vercel.

https://redd.it/njw4l5
@r_devops

Migrating multiple Jenkins VM's to Docker Swarm \ K8's. Can it be done safely?

Problem: We've got multiple Silo jenkins masters dotted around the network, requiring different plugins and currently have different levels of security, depending on which muppet dev team decided to spin it up without talking to us. Our official standard (for now) is Bamboo, though we're going to be changing that soon as devs kept bypassing it and spinning up Jenkins or using AWS as they hated Bamboo.

We've been tasked with brining them under our control, securing them and getting some level of sanity involved.

Short \\ Middle term Solution: Containerise all the things! What I'd like to do is basically create a Jenkins Swarm of masters, taking X amount of VM's down to 3 or 4 VM's.

While I've found a single guide on migrating a jenkins server to docker on the same server, I've yet to find anything for migrating it to a container cluster. The issue for me is the persistent storage.

https://redd.it/njyss1
@r_devops

The CNCF Kubernetes API best practices needed an update

This is a good start: https://www.portshift.io/blog/kubernetes-api-security-the-challenges-best-practices/

BUT anything else I should tell our K8s newbies

https://redd.it/njvkz0
@r_devops

Disable TLS 1.0 and TLS 1.1 in Kubernetes cluster on GCP

I want to disable TLS 1.0 and TLS 1.1 from my website.

The website is hosted on the google cloud platform Kubernetes engine.

I used this Nginx ingress [https://cloud.google.com/community/tutorials/nginx-ingress-gke](https://cloud.google.com/community/tutorials/nginx-ingress-gke)

And for the SSL certificate, I used cert-manager from this tutorial [https://youtu.be/hoLUigg4V18](https://youtu.be/hoLUigg4V18)

I don't get where I should do the change. Should it be done from:

​

* ingress YAML file
* cert-manager
* load balancer on GCP

I tried to create an SSL policy on GCP but I wasn't able to add a target because it should be a GCE ingress, not Nginx (I have to use Nginx due to lack of required metadata in GCE) I also tried creating a config map file but still, they are enabled.

https://redd.it/njszf8
@r_devops

Best CICD solution for building and publishing Dockerfiles? Just build/use something in GitHub Actions or something specific?

So Kubernetes has ArgoCD with manifests, Terraform has GitHub Actions with Atlantis, is there a unique solution out there to building Dockerfiles in infrastructure as code fashion? Let's say you have like 300 Dockerfiles you want to build at a time, what's the best way to do so at scale?

https://redd.it/nk221u
@r_devops

DevOps experience and coding tips

Hope everyone is staying healthy and well. I had the wonderful experience of being able to do a DevOps role even if it was a minor one. It's funny how this all came to be because going down this road wasn't easy and a bit odd. I don't have much extensive coding experience like a full time software engineer/developer does and my experience is very mixed. I have a background as a Test Technician, Tech Writer, IT technician, Research Engineering Intern, and then finally DevOps (woohoo!). However, as of recent, I actually was laid off due to COVID so now I'm currently in the market. In terms of programming, I'm actually very very rusty. I have this tendency where I practice a lot of coding and then at some points in time, I don't practice enough which I then forget after some time has passed. Are there any specific questions that I should be looking at in terms of coding or should I just chug and plug away at programming questions from Hacker Rank, Leet Code, etc to improve my coding. I find that trying to answer as many coding questions as possible seems a bit exhaustive considering that DevOps don't code as much as Software Developers and Engineers. What are your guy's experience like? Any additional tips are always welcome.

Cheers!

https://redd.it/njnbh4
@r_devops

what is the difference between directory/folder name and shared folder's name?

what is the difference between directory/folder name and shared folder's name?

https://redd.it/njmuy9
@r_devops

2 years of DevOps experience with no education or certificates. How do I take my career to the next level?

No degree. 1 internship doing CSS work, 2 years contracting doing test automation (selenium) and 2 years doing DevOps (Jenkins/docker/K8s/AWS/Python).

I quit my job to take some time off and whatnot. I’d like to now spend 1-2 months sharpening my skills and increasing my chance of landing a killer job.

Should I get my AWS certificate?

Should I get my Kubernetes certificate?

Should I take Linux academy courses to learn more about networking?

Should I build and launch a side project to show my abilities?

Should I do leet code?

Should I take some basic CS courses?

Should I try my hand at freelance work to diversify my experience?

Should I try to launch a DevOps consulting agency?

https://redd.it/nk6sw1
@r_devops

The role of a modern QE

Spending almost two years in software testing industry, I have found that people specially fresh graduates have no clue of the great responsibility & career opportunities they have in this amazing field. They think testing is about manual effort, and still many organizations lack to understand the importance and advancement in the field of testing. With advancements in automation tools, devOps; testing tools has become very mature to decrease the manual effort to minimum.

The following learning series is my effort to acquaint people of the role that a QE plays in an agile organization and how organizations can adopt to best QE practices. Let me know what you think.

​

1. Introduction to testing - https://shivamgohel.medium.com/the-role-of-a-modern-qe-1-4-9a3e75075728
2. Introduction to agile - https://shivamgohel.medium.com/the-role-of-a-modern-qe-2-4-d52e8fe84c6e
3. Quality Engineer Roles & Responsibilities - https://shivamgohel.medium.com/the-role-of-a-modern-qe-3-4-dfaadc9fb849
4. Modern QE Learning Path - https://shivamgohel.medium.com/the-role-of-a-modern-qe-4-4-d81b6f1712d8

Let me know what you think.

https://redd.it/nk11pn
@r_devops

Certification for a DevOps engineer

Hi,

AWS Certified SysOps Administrator – Associate or AWS Certified Solutions Architect – Associate

for a role of DevOps engineer,

thanks

https://redd.it/nk212q
@r_devops