One ops team doing all releases is bad, right?

I work in production operations for a large public company. The culture here demands that the prod ops team be the team that moves releases from preprod to prod, and we don't allow product teams to manage their own production secrets, both seemingly out of fear of developers breaking things.

As we move from a lot of manual deployments to hopefully a future of actually automated CI/CD, there still seems to be a goal of my team pulling the levers to allow releases to move from preprod to prod.

I run into this attitude so regularly that I'm starting to doubt myself, despite my last job laying what I think was a great foundation for devops (each team owns everything from code to infra to pipelines). Is this sort of a thing I'm fighting with in my current role as much of an anti-pattern as I think it is? Or are there real reasons (perhaps regulatory compliance) why a monolithic production operations team would need to be the barrier between software developers and production?

Looking for both advice and a place to vent. Hopefully I'm not the only not-crazy person here!

https://redd.it/nkzosx
@r_devops

Free intro to Linux commandline/server course starting 7 June 2021


This free month-long course is re-starting again on the first Monday of next month.

This course has been running successfully now every month since February 2020 - more detail at: https://LinuxUpskillChallenge.org - daily lessons appear in the sub-reddit r/linuxupskillchallenge - which is also used for support/discussion.

Suitable whatever your background, and aims to provide that "base layer" of traditional Linux skills in a fun interactive way.

Any feedback very welcome.

https://redd.it/nkzdec
@r_devops

Check out a practical approach to Dev Ops

When we talk about ecommerce success, we’re ultimately talking about software success. Software isn’t just a key part of your business; it has become the main differentiator between you and your competition. How quickly can you build your software? How quickly can you deliver it to your customers?

https://redd.it/nkxuok
@r_devops

kubernetes - my fingers are tired

How can I execute CLI commands like get, describe on pods, view logs, etc. without having to retype the same commands over and over? Also, for others who are using Kubenetes how many people are managing your cluster(s)? What are some useful integrations?

https://redd.it/nkvl5c
@r_devops

Questions to ask a company on how they perform devops

I know that devops isn't supposed to be a role or a team but it should be a culture. However, we live in reality where lots of companies perform devops differently.

What are your go to questions in filtering for red flags when asking a potential employer how they do devops. What are some good and bad answers? When you see the red flags, is it a show stopper for you?

I assume that FAANG type companies do devops better than most, although not perfect. I am not I am focusing on these companies but small to medium sized companies

https://redd.it/nkuyce
@r_devops

Metrics from logs. Why?

I know a number of teams that seem stuck on the idea that they need metrics from logs. Not having enough context for why that would be necessary and given the cost of doing so (i.e. - efficiency of metrics over logs, latency incurred from transforming logs into metrics, etc.), can anyone here give me some insight into how a distributed system would benefit by using metrics from logs (like a business use case)? I totally curious why I keep running into this. I feel like I'm really missing something here (or maybe I'm not).

https://redd.it/nnsugd
@r_devops

DevOps Engineer Performance Goals

Hi DevOps Enthusiasts,

Could you share what you have kept as your goal as a DevOps / SRE for this year to achieve personally and for the organization you work for?

Planning to set some goals and looking out for some ideas and inspiration.

https://redd.it/nntzq4
@r_devops

Terraform or Ansible or both for cloud deployment ?

I have test Terraform and Ansible to deploy some virtual machines in Azure because I would like to automate the creation and deployment of resources in the Azure cloud and soon probably in AWS, but I don't know with which one of those two pick to use in my daily work.

I have read that DevOps Engineers recommend use both but I would like to know what are the key difference between Terraform and Ansible and if it would be better to use both or only one

https://redd.it/nnvg3c
@r_devops

Questions for those who work in DevOps

* What's the best thing about DevOps, and also what's the biggest challenge? What does DevOps mean to you?
* For how long have you been working in DevOps? How come you got into it?
* What did you do before? What experiences, previous jobs, knowledge, etc would you say is needed/good to have before pursuing a DevOps career?
* What are the top skills needed to become a good DevOps engineer? Does one have to "eat and breath technology"?
* Have any of you left DevOps, and how come?
* Would you say a DevOps role is a good first job for someone who just graduated, why/why not? Would your workplace employ less experienced people or is it just for seniors/specialists?
* Any tips for someone who just started working in DevOps (coming directly from uni)? No previous experience and feel like a fraud lol. For how long would you say an inexperienced is new at a job?

https://redd.it/nntsxc
@r_devops

What is the best DevOps Conference?

Looking to go to a DevOps-focused conference in the next month or so.

​

Which do you recommend and why?

https://redd.it/nnp4wg
@r_devops

How to Measure ‘ROI’ From ‘DevOps’

Measuring the ROI of DevOps helps in tracking the progress that comes from the new collaborative efforts. It helps the business entrepreneurs in accelerating their DevOps plans across the organization, whether they’re just beginning with DevOps or well along in the transformation. Read More

https://redd.it/nnk66x
@r_devops

ECS vs EKS?

Or rather, Fargate vs Kubernetes. Maybe I never worked on a project complex enough, or maybe I try to build my infrastructure in a simplistic way, or maybe I simply don't know enough about Kubernetes, but I don't know of any scenarios where Kubernetes would be a better fit. I think it's basically a cloud within a cloud, and unnecessarily complex. It was useful while we were orchestrating over on-prem servers, but now that we have cloud providers where we can describe infrastructure with auto-scaling rules, Kubernetes seems outdated. Am I missing something? Price aside, when, if ever, would u pick Kubernetes over Fargate?

https://redd.it/nnk425
@r_devops

How to connect remotely to mysql running inside a digitalocean droplet

I have a mysql instance running inside a digitalocean droplet. Originally, we also had a laravel application running inside that droplet with the mysql instance but now we want to move our application to kubernetes.

The application has been deployed to kubernetes and we are trying to connect the laravel application to the MySQL instance inside that droplet for the purpose of testing but we keep getting the error:

Host '46.101.81.14' is not allowed to connect to this MySQL server

That is not IP address I specified as the host, and it is not the IP address of my kubernetes loadbalancer either.

These are the steps I took to enable remote access to the database:

set bind address for MySQL to 0.0.0.0
CREATE USER ‘someuser’@'localhost’ IDENTIFIED BY 'password’;
GRANT ALL ON databasename.* TO remoteuser@'ipaddressofk8s\_lb’ IDENTIFIED BY 'password’;
sudo ufw allow from ipaddressofk8slb to any port 3306

Please what could I be missing?

https://redd.it/no0chr
@r_devops

Devops at an MSP?

Hey everyone.

Has anyone worked for a cloud MSP as a devops engineer? Id love to hear about your experience.

I have a potential offer that's a nice base salary but concerned that the type of work might stint my growth as an engineer.

https://redd.it/nnzjw9
@r_devops

How do you deploy a docker app?

I have a yml file and everything, and I can run the yml file locally. Do you just need to do docker-compose up if you have the yml file? Where in the yml file can you get the url the website will be accessible from?

https://redd.it/nnzadj
@r_devops

Best practices for external containers

Working on a couple of projects where we may be getting containers from vendors/partners or pulling them from places like Nvidia. Some to use directly, some to build into home grown apps.

Anyone have best practices to share on managing them?

Should we use them from provider registries? How do we make sure they are available and that we are all using the same versions?

Should we setup our own registry and manage the lifecycle ourselves? What should we setup? How do we keep them in sync with external registries?

Has anyone dealt with licensing? Should we expect license files or license managers for closed source software? We haven't asked so looking to be prepared.

Thanks for the help.

https://redd.it/nng1al
@r_devops

Will Continuous Design / Continuous Integration be a thing?

Hello everyone,

Over the past few months, I've been really digging into many of the common trends we've seen over the years relating to developer operations. I had observed that so many different processes were being automated in the developer lifecycle, but the design to development process has not, or at least not really. I had some hunches, specifically with UI/UX design to development that there are startups trying to fix this. But after digging into other types of design, I became interested in the idea that we could see many other toolsets that could aid other types of design (Architecture, Database, etc). As a play on words, I called this, "Continuous Design / Continuous Integration". I'd really like to hear the feedback of this community. I may be completely wrong but I love the idea of integrating all types of designers into the developer workflow. I share a good chunk of my research and thinking here: https://parabeac.github.io/CD-CI/

https://redd.it/nkubnv
@r_devops

Frontend programming question regarding featurebranching (DevOps way of working)

Hi guys, Im extremely new to Frontend programming and I have a question regarding DevOps best practice. Im creating a website using html css and js. This frontend does have to query out some information from backend APIs. We have dev, sta and prod, all deployed from the main branch, and people do pull featurebranches from the main branch, which usually results in deployments on the dev AWS account but with a featurebranch package. These featurebranch packages do not have that many dependencies, and if they have, they consume the main branch deployments on their respective environments.

​

The question I have is about featurebranching in the Frontend.

I notice a lot of people use environment.ts files in Angular like frameworks but that all is buildtime information, not runtime, and it feels incredibly static to me. In DevOps, shouldnt we try and look up this information more dynamically? Are there services that could help here, like AWS Cloud Map or Consul? Or do you just have to change my environment.ts file like stuff, repackage and redeploy on a featurebranch if you would like to access a different API Gateway endpoint for development purposes?

Any insight might be helpful. I have the feeling that backend frameworks have a lot more support build in for modern way of working than current frontend frameworks have. Also, it is not an option to just drop featurebranch support and claim the entire dev environment for myself since we have a ton of guys working on functionality.

Thank you in advance for some guidance. I can learn a lot from it.

https://redd.it/no90he
@r_devops

Exposing VPC/API gateway to a slack specific DNS

I have a slack bot which is running on a EC2 in a VPC.

The VPC/ API gateway is supposed to only be exposed to slack (for slack event listening), Its not supposed to be publicly accessible.
How would I filter based on slack's DNS? https://api.slack.com/robots

I saw that API gateway has resource policies however they are only IP\ AWS account\ VPC based.

Any other AWS services that can help?

https://redd.it/noak3s
@r_devops

Golang or Python for kickstart ?

I am from network security implementation background and thinking to shift my career to devops. Which programming language i should choose from between Golang and python ? Please advice

https://redd.it/no812q
@r_devops

Setting up a server with Linux/bitnami/docker/jenkins

Hi!

I develop Django apps and want to set up my own VPC but want to understand some things first.

I've used bitnami on AWS previously to host a Django app which worked good. So I think that maybe I can install bitnami on the Linux server i want to rent first.

Then I guess I want to use Docker to contain the environment I develop in.

Then I want to use Jenkins to manage testing and CI/CD.

Does this above make sense? Am I misunderstanding some of the parts or am I missing something?

https://redd.it/no6npm
@r_devops