Non-video learning resources?

I'm a Linux sysadmin who needs to get up on modern DevOps best practices, especially running K8S. This sub is very helpful but one thing I've noticed is that most of the recommended tutorials and other resources are in video format, which doesn't work very well for me. Is there a good learning site or app that sticks to traditional formatting?

I don't want to get into the larger issue of comparing the utility of video vs print for conveying complex information – for me that's not a question, a page of text & images is always going to be better for me so I'm just interested in hearing about good resources in that format. TIA for any tips.

https://redd.it/nqrwze
@r_devops

Working for a consultancy..

Does anybody have any insights or thoughts on working for a large consultancy in the DevOps/Cloud space? It seems (at least in the UK) that consultancies are always hiring and offering decent packages. I'm wondering if there's a catch..

https://redd.it/nqnm3c
@r_devops

Update to our serverless workflow engine Direktiv

G'day DevOps,

We've previously posted on our serverless workflow / automation engine called Direktiv and wanted to share a couple of updates:

**We've released an update v0.2.5 with the following additions:**

* Workflows can be set to run only one instance at a time, allows administrators to throttle usage
* DB performance improvements (substantial workflow throughput increase)
* API updates to support workflow completion
* Individual fields from workflow results can be delivered via http, e.g. images
* Access to workflow variables as files in containers
* Added namespace logs to the dashboard

**Released the GitHub Marketplace integrations for Direktiv:**

* Sync Direktiv workflows
* Execute Direktiv workflow
* Variables management from GitHub

We're also working on a VSCode integration at the moment (amongst other things). 2 new articles on our blog explains the GitHub actions and the variable management:

[https://blog.direktiv.io/direktiv-github-actions-available-in-marketplace-595dd51e1f72](https://blog.direktiv.io/direktiv-github-actions-available-in-marketplace-595dd51e1f72)

[https://blog.direktiv.io/direktiv-building-stateful-workflows-a-bitcoin-example-ab445527bed9](https://blog.direktiv.io/direktiv-building-stateful-workflows-a-bitcoin-example-ab445527bed9)

The second article pokes a bit of fun at Bitcoin - sorry in advance!

As always - feedback is welcomed!!!

https://redd.it/nr2cpx
@r_devops

Any good course on developing a complex infrastructure for a Wordpress application?

Any good course on developing a complex infrastructure for a Wordpress application? It's for AWS specifically, and also is there a way to not spend any money on AWS while following the course, because I don't want to spend 100$ on AWS. Also, is it possible to set it up through code instead of going to the AWS console?

https://redd.it/nr1tjq
@r_devops

How do you deploy a dockerized application that's accessible on localhost:8080 on Ubuntu?

1) Install docker-ce

2) change hostname to staging01.something.com

3) Route 53 DNS config

4) Git clone

5) run docker-compose up (runs on localhost:8080)

6) go to staging01.something.com:8080

​

Is this all? Or am I missing some steps?

Without DNS config, if the server is accessible on 43.12.11.11, I can access the website on 43.12.11.11:8080 correct? I am trying to understand how to deploy a staging environment by running docker.

https://redd.it/nr1q2q
@r_devops

Jenkins as a jobrunner

Anyone have any experience with using Jenkins as a job runner? I have a requirement where we want developers to restart services but not SSH into Linux boxes themselves. I'm thinking Jenkins build jobs using Jenkins agents could work.

Does Jenkins support restricting x user to perform x job/build within Jenkins? Is this feasible?

https://redd.it/nqzj55
@r_devops

What are you doing when waiting for your pipelines to finish ?

As a DevOps, I realize that I am spending a lot of my time.... waiting. Waiting for pipelines to finish to continue troubleshooting, waiting for a service to be deployed and up, waiting for the cloud resources to be deleted,...

What are you currently doing with all this time?

https://redd.it/nr71xz
@r_devops

self signed certificates to secure ip of tomcat

how to create a self signed certificate and secure the ip of tomcat server?

i have tried to create a keystore file, csr file and a certificate and when i try to change the server.xml file in order to include the keystore and certificate. And when i try to run the tomcat it doesn't run.

i am trying to do these without the domain

https://redd.it/nr4sss
@r_devops

Its still not RIP Ruby on Rails fellas

This is why Ruby on Rails is my go-to backend technology!

https://medium.com/devtechtoday/this-is-why-ruby-on-rails-is-my-go-to-app-development-platform-391770bce70

https://redd.it/nr5n9u
@r_devops

Creating Keycloak integration

Hi folks!

I’m in the process of evaluating Keycloak.

Is there anyone here who recommend an open source web app that’s easy to integrate with Keycloak?

I’m thinking something like Wordpress, Mediawiki, phpMyFAQ or similar.

My plan is to try it out using Docker on my laptop, to get a feeling for it before starting to roll it out on a larger scale.

Would love any recommendations on this topic.

https://redd.it/nqklzk
@r_devops

Ansible Package Configuration Security - new and old hacks

Hi folks, my team wrote up a Hack Series blog post that we're hoping would be valuable to those using Ansible for DevOps. You can read the whole post below, but here's a TL;DR if somebody doesn't have the time to read the whole post. Hope this helps!

Our top 10 Ansible security checks to remember when reviewing a configuration:

1. Is an old version of Ansible being used which is vulnerable to known CVEs?

2. Are hardcoded secrets checked into YAML files?

3. Are managed nodes in different environments (production, development, staging) not appropriately separated into inventories?

4. Are the control nodes which Ansible is running from not completely locked down?

5. Are unsafe lookups which facilitate template injection enabled?

6. Are SSHD config files using unrecommended settings like permitting root login or enabling remote port forwarding?

7. Are alternative connection methods being used (such as ansible-pull) and are they being appropriately secured?

8. Is the output of playbook runs not being logged or audited by default?

9. Is the confidential output of privileged tasks being logged?

10. Are high-impact roles/tasks (e.g. those that are managing authentication, or installing packages) actually doing what they appear to be?

https://blog.includesecurity.com/2021/06/hack-series-is-your-ansible-package-configuration-secure/

https://redd.it/nqr0ew
@r_devops

Linuxacademy to whatever guru to pluralsight

Is there another linuxacademy out there? This is sad.

https://redd.it/nqpgra
@r_devops

Reverse proxy for Active directory

Hi all, i hope you are doing well.
I have a problem at work where the windows pods on my cluster cannot communicate with internal services (on premise servers, like SAP, IBM db2, SQL servers ...) (probably a hyper-v config of the vmswitch that wasn't done, didn't have to investigate or fix the issue). to work around that i've deployed reverse proxies that would route the traffic to the various internal services (SAP, databases etc ..), since the windows pods can reach out to only other pods on the cluster (headache ? hang on..)


Now the windows pods need to auth via AD to a web app. I thought i'd install an AD reverse proxy that routes the traffic on port 636 of the original AD server (i checked the port). But apparently and since i have no experience with AD, it seems like i need to install a Domain controller server that would point the pod to the AD. Now the idea i have is that i need to install a Pod/service Domain Controller that would serve the AD reverse proxy on my cluster. What do you all think ? any suggestions ?

https://redd.it/nqu2em
@r_devops

Integration pattern question: SNS / SQS

Hey guys

Imagine the following setup: there is an on prem application that needs to send a message to another application that runs in public cloud (AWS).

How would you go about this in best practice?

1. The on prem application sends using the api a message to an SQS queue owned by the cloud application
2. The on prem application publishes a message on a topic owned by the on prem application, and the SQS queue subscribes on this topic.

Why would one be better than the other?

Thanks for your insight...

https://redd.it/nql0id
@r_devops

Trying to set-up a VPN in github actions for continues deployment

Hi everyone,
I'm currently trying to set-up a VPN in my CICD pipeline to a private VM in an organization.
Please correct me if I'm wrong but so far as i know I've to first set-up a VPN to the organization to be able to push/deploy code on the VM.
The problem is that I've no clue how to set up this VPN in my CICD pipeline.
Any ideas or alternative solutions are welcome and will be appreciated.
Thanks

https://redd.it/nqgx18
@r_devops

DOUBT regarding Grafana Dashboard - (Prometheus-Grafana)

Hey guys!

TL: DR - I need to know 2 things,

1- Where to place the JSON files I have taken from here.
2- If I start changing a few things using the Grafana UI, ie edit/delete boards. Will the JSON get updated in my VM as well? (stored in /usr/share/grafana/public/dashboards/ ) ?

What I have done?
So I have been working on setting up the Aerospike-Monitoring-Stack, I have set up,

1- Aerospike Cluster with Aerospike-Prometheus-Exporter on it,
2- Prometheus Server (Standalone)
3- Grafana Server (Standalone)

\- Coming to Grafana, I have copied the JSON files provided here into /usr/share/grafana/public/dashboards/<json - files>


AND THEN

\- I have manually pasted the JSONs in (Create > Import via panel JSON > Load). Web UI of Grafana. Doing this is getting my service up and running. I CAN SEE MY METRICS/NODES/CLUSTER etc, everything!

What are my 2 doubts?

1 - If this is how I got my dashboard up and. running, what is the use of
/etc/grafana/provisioning/datasources/all.yaml and
/etc/grafana/provisioning/dashboards/all.yaml ?

&#x200B;

2- If I drag around the metrics, make some changes, remove a few, etc, this changes the JSON, hence Grafana asks me to save them, WHERE IS IT SAVING THEM? Are the JSON files in my /usr/share/grafana/public/dashboards/<json - files -here> path being overwritten?

&#x200B;

Please let me know, I am very confused here,

Again,

Setup \- Aerospike-Monitoring-Stack,
JSONs \- https://github.com/aerospike/aerospike-monitoring/tree/master/config/grafana/dashboards
Method of Provisioning Dashboards \- Manually Pasting the JSON Content into Import via Panel JSON
Current location of JSON files saved in VM - /usr/share/grafana/public/dashboards/<json - files>

&#x200B;

Thank you.

https://redd.it/nqk8qz
@r_devops

How to perform CI/CD in mobile development (andorid/apple)

Hello,

I am quite familiar with DevOps pipeline ad CI/CD for backend systems... but I am getting quite confused on how will that work on a mobile development...

here is my setting:

backend of the Mobile app has three environments (Terraform and Ansible powered)
Development (in one machine) where the developer "deploy locally" the backend (containerized) and performed changes and unit tests
Staging (in AWS), where the mobile developers connect the APIs and perform mobile testing
Production (in AWS), where the "live mobile app" is connected

At the moment the mobile app (frontend) is developed in a silos and there is not really anything in place in terms of pipeline, CI/CD etc...

Initially I thought to use the built in feature of the stores (Apple and Google):

Apple TestFlight
Google Alfa/Beta Channels

But the challenge is that once I publish the app (either in Apple or Google) in the "beta test mode" (TestFlight and/or Alfa/Beta Channels) I cannot point the app to a "staging/Test" environment, but it will be in production...

Is there something am I missing? how do you have beta testers on mobile front end? (in test environment and not production....

maybe what is not clear to me is the overall Pipeline Ci/CD for the mobile front end... (the part that will be ultimately uploaded into the store)...

Than you all!

https://redd.it/nqjbse
@r_devops

Whole picture vs split by environments

In most cases I prefer complete separation of environments. DBs, apis, Kafka streams should all be the same across environments which afford the benefits of proper CI, CD.

When you start to look at the whole picture sometimes its helpful to have consolidates views. One good example is consolidated dashboards with git lab https://dashboards.gitlab.com/

This can be true for other cases like logs, tracing, saml Auth, and third party integration.


What is a good mental model and splitting point for where you see something and think it needs replicas for different environments vs a consolidated view?

https://redd.it/nqj41f
@r_devops

Practical kubernetes projects

Does anyone know or have a practical kubernetes project
I would like learn stuffs by doing it
Is there any guide/book/course which can help me
Good with kubernetes basics

https://redd.it/nqiybo
@r_devops

Seeking advice on which cloud services to use with my project (SPA w/ AWS potentially)

Hi all,

Forgive me if this post is inappropriate for this sub - I am looking for some guidance. I am currently developing a Single page application that will be based on an AWS multi-tenant model (i.e single primary database for PII/Users table , separate RDS instance generated for each client's data set - no PII, but important)

The application requires users to answer a series of questions, where the answers will be reported on in an admin panel within the app. All clients will access the same EC2 instance through a subdomain (www.mycomapny.[client-name\].com/app) and ideally will pair to their allocated RDS instance on arrival. The EC2 instance contains my app (Nuxt w/ Laravel API), and for now my primary DB with user names, tenant ID's etc

Additonally, each client will have their own homepage (I would image tis repository would sit on S3 - (www.mycomapny.[client-name\].com)) which could be updated through a 'config' page within the application admin panel, triggering some sort of continuous deployment process and update to the home page.

Soooo...I was hoping you guys could kindly offer some advice:

\- Is what I am describing achievable within AWS? Are there better/more achievable ways of doing this? Open to suggestions outside of AWS

\- Could you guys recommend a way to dynamically set the correct tenant DB when they arrive on the page from a specific URL?

\- Security and meeting privacy standards are crucial. Is there anything in particular I should be doing or keep in mind?

\- Expenses may become and issue. Might this set up be expensive? Can you recommend a good way of calculating costs, ballpark?

Really hope this is clear, apologies if this is too vague - a lot of this is new to me. Please don't eat me reddit!

Any guidance (even just resources/other subs/etc) would be very much appreciated.

Thanks

https://redd.it/nqgi0i
@r_devops

Send VM's system information to a Webhook

Hello, I have created a bionic Ubuntu virtual machine using KVM and virt-install. How can I send its information to a webhook when it boots for the first time? How can I create a webhook? I'd appreciate it if anyone could explain it to me.

https://redd.it/nqfnic
@r_devops