What's the typical markup rate by Randstad for a devops engineer position.

Hi,

I'm trying to figure out a typical markup rate by Randstad for a devops engineer position with 10 years of experience going through them to the client.

I know there are many unknown variables to consider but I'm generally trying to understand from their recruiting stand point on what's the lowest they can do.

Knowing that might give me a little perspective on quoting the contract rate while working Corp to Corp engagement.

Regards.

https://redd.it/o6lbns
@r_devops

OAM for Non-Containerized Apps

Has anyone tried Open Application Model (OAM) to simplify , abstract infrastructure for Non-Containerized Applications ?

OAM Spec

I could see only reference implementation for Kubernetes, Containerized Apps.

https://redd.it/o6h46g
@r_devops

What do you all think of cloudbees ci?

Team is considering whether to refactor our Jenkins systems for Kubernetes or use Cloudbees solution.

https://redd.it/o6orwh
@r_devops

Terraform UI for non technical CLI users

I currently have a server build process that uses Terraform and deploys a server all from code.

I'm looking for a web UI with forms that I could either populate specific fields and or do API get commands against a VCenter or wherever the server is being built to populate the specific fields. The fields that get populated would be stored as the variables.tf file and when someone hits submit, it would run the actual Terraform command terraform apply to build the server based on the variables. My guess is the terraform binaries would have to live on there so it could run in the background.

It doesn't have to be some super fancy web page, just something that I could potentially make look cool for Director level folks.

Also, I don't want to use TF enterprise, yet. I've looked into a couple of open source projects (atlantis and terrahub) but none seem to be what I'm looking for.

I'm far from a web developer so any help would be awesome.

https://redd.it/o692gk
@r_devops

What do you think would be a modern vision on integration?

What do you think would be a modern vision on integration? I'm noticing more and more a trend to event-driven architectures, with possibly lots of consumers, sometimes with a centralized event bridge or stream.

This does eat away some from the more synchr natured systems, altho I feel they too have their place in the ecosystem.

Would one be preferable over the other with ideas about scaling out, future work and ops? Is a vision, event-driven, unless there is a specific need for sync ? Or the other way around?

And talking about event bridges: Contracts for message structure are now possible not only at the endpoints, but also at the middle layer and I wonder if that is a good thing to do?

I'm pretty interested in you guys' opinion and experience.

https://redd.it/o6e04a
@r_devops

How do you prefer to learn a new platform that your company purchased?

Hello engineers! I work in customer education and we are building an academy for the product we build (cloud native security platform). I'm curious to know:


how do you like to learn about a new tool? In-product education? eLearning in the form of a course? Short video tutorials?
Do you go straight to the docs?
Do you jump right in to the tool and try things out?
Do you register for webinars or in-person training?

What academies are out there that you think are great examples of product education? What about ones that are kind of terrible?

I want to make sure we are building the right type of training for our audience, and not just doing a 'product feature dump' in the form of self-directed courses which are really just 'prettified' versions of our docs.

Thank you!

https://redd.it/o6dzlk
@r_devops

Create CD with ansible

In our git repo, there's an important python file which defines all our production servers.

Each server is an object that has values and these can be queried against. For example: I can query a request to get all servers where region=US and it would return an array of these servers.

Right now, there are big changes in the company and a lot of attributes are being changed. Each time someone pushes such a change, I have to run an Ansible playbook on that server and it automatically does the rest. (In the Ansible playbook, I just have to change the value of -hosts: to the changed server and run the playbook. The playbook automatically knows what changes to make by querying the python file).

Is there a way to create a continuous deployment sort of thing where if someone changes certain attributes for a specific server, it would automatically run the ansible playbook against that specific server?

Please excuse the question if it's dumb, I'm not very familiar with devops culture.

Thanks ahead!

https://redd.it/o6dmhl
@r_devops

Redis Sentinel HA Setup Configuration and how it works?

I don't know is this the right place to ask this. But because Redis usually used in devops environment, I will ask here.

So, I just learn about Redis and want to bootstrap an HA Redis using Sentinel. I read a lot of articles, one from here: https://medium.com/@amila922/redis-sentinel-high-availability-everything-you-need-to-know-from-dev-to-prod-complete-guide-deb198e70ea6


As far as my understanding, there is only one MASTER (read+write) and some slaves (read only). Then, from client perspective how to connect to this cluster? If I add LB as reverse proxy, and my LB redirect to slave node but my client wanna do write operation what will happened? Or on my client should list all 3 nodes? Or using pacemaker-->create VRRP and bond master to VRRP?

https://redd.it/o6c536
@r_devops

puppet installation and configuration

i am trying to configure puppet master and agent on 2 vm's on ubuntu 20.0.4. i keep getting errors wrt certificates. i keep getting errors no matter what i try to fix.

maybe can anyone help me out with a step by step installation by giving a source or something.

thanks

https://redd.it/o6uzn1
@r_devops

Different git branches creating different pods

I have to build a pipeline at work where we have 3 different branches(ua,Dev,prod). Commit to each branch would trigger a Jenkinspipeline that runs tests, code analysis etc and then builds a docker image and commits it to our private quay repo. Finally that image is deployed from quay to the open shift cluster.


* what would be the best way to tag my images so I can easily distinguish between them
* How would I use a different deployment configuration for open shift depending on which branch the code is committed to
* what would be the best way to rollback changes

https://redd.it/o6upxm
@r_devops

Writing from prometheus to Kafka

The thing I want to do is to insert data into kafka topic from prometheus remote write.
What are the things required to change in the Prometheus.yml file for such a thing to work.

https://redd.it/o6atkt
@r_devops

How can I migrate a postgresql database in a droplet to a managed database?

I am using DO now. Is there any easy way to migrate a psql db in a droplet to a managed database on DO? Did anyone try it before?

https://redd.it/o6x28f
@r_devops

What is DevOps?

Lets once and for all end this discussion. According to you as a DevOps engineer, what does a DevOps engineer do or in short what is his/her role?

​

PS: Take the definitions from here and slap it in the face of your bosses or future interviewers! :)

https://redd.it/o6gqwi
@r_devops

need help with debugging yaml - game of pods

when i start the k8 terminal, it's starting not at the "master" directory, rather the "controlplane". That said, the controlplane has the role of master

steps:

ssh node01

mkdir /drupal-data

exit

cat > drupal-pv.yaml

---
apiVersion: v1
kind: PersistentVolume
metadata:
name: drupal-pv
spec:
accessModes:
- ReadWriteOnce
capacity:
storage: 5Gi
hostPath:
path: "/drupal-data"


kubectl apply -f drupal-pv.yaml.

this gives an error:


"drupal-pv.yaml": error validating data: ValidationError(PersistentVolume.spec): unknown field "storage" in io.k8s.api.core.v1.PersistentVolumeSpec; if you choose to ignore these errors, turn validation off with --validate=false

i fixed it by adding. under spec:

volumeMode: FileSystem

now the error is:

ValidationError(PersistentVolume): unknown field "capacity" in io.k8s.api.core.v1.PersistentVolume;

in the API [docs](https://docs.openshift.com/container-platform/3.9/rest_api/api/v1.PersistentVolume.html) for v1, i see there is a capacity section and this game is also built on it, so what do I do?

----

trying to apply it by setting --validate=false:

controlplane $ k apply -f drupal-pv.yaml --validate=false
The PersistentVolume "drupal-pv" is invalid:
spec.capacity: Required value
spec.capacity: Unsupported value: core.ResourceList(nil): supported values: "storage"
spec: Required value: must specify a volume type


i'm confused

https://redd.it/o65umj
@r_devops

This is a great piece explaining the TARA Report

It's the first time I've heard it explained clearly: https://www.portshift.io/blog/what-is-the-tara-report-and-why-should-devops-pay-attention-to-it/

That together with the Mitre pdf:https://www.mitre.org/sites/default/files/pdf/11\_4982.pdf on it and you should be set.

https://redd.it/o6zaae
@r_devops

Which course was most helpful on your way to DevOps?

Hello, everyone, I hope you are well.

Recently I transitions to DevOps from a traditional sysadmin background.

My line manager recently told me that there would be some budgeting for trainings/certifications available.

Can any of you recommend a good course that is fairly up to date and covers AWS solutions architect associate? Of course I'm only interested in courses I can pay for only (no monthly/yearly subscribtion stuff). I'm also interested in k8s, so feel free to recommend about this also.

It might take some time before I actually find if they will cover the whole fee or just co-sponsor me, but in any case the first step would be to pick a course and let them know :)

​

Thanks for your time and suggestions!

https://redd.it/o70eew
@r_devops

Billing shouldn't be a nightmare for your customers

Hey r/devops! how are you?

We wrote a blog post about how to protect customers from excessive billing using billing limits that I think you will find interesting.

https://mediamachine.io/blog/protect-your-customers-with-billing-limits/

How are you implementing this? do you think our solution is a good one? or is there something we can do to improve it?

https://redd.it/o6pu5i
@r_devops

How to stream GUI from k8s to a website?

Hello all,
So I have this idea of having a computationally intensive software be spawned by a user on a website and at the backend a pod with good resources is created for the user.
The container runs ubuntu. Now, I want to open the gui of that software only and stream it to the website in an interactive way so that the user can control it something like vnc but in the browser (with focus on that the only shown thing is the software gui only not whole ubuntu)


Also If you can help guiding me on how to save the state of the pod for that user in case he want to close the session and continue later?

How to establish one to one connection with that specific user?

https://redd.it/o722zx
@r_devops

Sysadmin needing advice

I don't really know where to begin here, but I need help.

I have been a professional Linux admin for the past 15 years. I come from a background of managing large fleets of various *nixes, and in my last gig I am the principal architect for the on-prem Linux environment of the company that I work for. We deliver services to in-house customers in the form of applications that are mostly COTS, but we also do a bit of development internally. I have adopted Ansible, Git, and Docker (mainly Compose stacks) for most of those services, though some continue to run natively on VMs. I have implemented monitoring, alerting, logging, near zero-touch provisioning, etc. So I know my way Linux, and I know my way around development fundamentals.

But I have not had the chance to play with K8S yet, though I read on the primitives (Pods, ReplicaSets, PVs and PVCs, Ingress, etc) and understand containerization in general. I also have no formal cloud experience. I understand the abstraction layer that it provides for datacentre infrastructure, and I understand that most of the services that I have to babysit today are managed for me out of the box. I also explored Terraform a little bit, and understand the idea behind immutable infrastructure. I tried to implement some of the same principles on-prem, but datacentre automation is still years behind what you get in the cloud, despite the efforts of HP, Dell, Red Hat, VMware, and alike (we need to manage several bare metal hosts as well as VMs).

I feel like I am missing a big part of the "modern IT" experience. Things like CI/CD pipelines, Serverless computing, cloud-native applications. I can grasp the concepts behind them, and given time I could certainly pick any of it up. But there is no hope to introduce any of that where I work, and I mostly learn when I have to use something in real life (I can follow tutorials but most are very artificial, and having a toddler at home makes it hard to dedicate time to train myself outside of work). There is also a lot of risk in jumping ship and likely take a pay-cut to start off as a junior DevOps Eng (I know, not a job title, but that's what's advertised) or RSE somewhere else. And the market for DevOps is so global that you could get anyone to work remotely for less than what would have to be the minimum salary I can accept without having to sell our house and cancel our mortgage (not something my family are in a position to do).

I am not even sure if [Dev\]Ops is something I want either, nor think it has a lot of life left. I enjoy programming but I don't really want to retrain as a professional programmer. And I do believe declarative infrastructure is a bit limiting, so I wouldn't be surprised if something like Pulumi eventually takes over. Yes, there will still be plenty of jobs in Ops, and plenty of jobs for Linux SysAdmins. But they might be seen the same as COBOL developers are seen today: a relic of the past, still well paid because there are so few of them left and legacy never dies.

In a way, I feel trapped in a silo of legacy technology with no way out. I could easily wing it for the next several years without ever having to do nothing but the minimum to keep up, and my company would still be happy. But I wouldn't. None of my colleagues seems to be bothered by the fact that they will cease to be relevant in the next 10-15 years. I have no other friends in this space. I literally have no one to talk to that understands how things are moving and where they're going.

Please help. What can I do?

https://redd.it/o5jbhp
@r_devops

Differences between Azure site Recovery (AZR) & Zerto Virtual Replication (ZVR)

Cloud consumers generally ask “What are the differences between Azure site Recovery (AZR) and Zerto Virtual Replication (ZVR)?’” The very first reason consumer ask this potential question is because they are familiar with one of the technologies and not the other and on the surface, they sound similar.

Here’s our step by step guide, why ASR and ZVR are very different from each other and meet different levels of performance and usability. 

Azure Site Recovery (ASR) and Zerto Virtual Replication (ZVR) are both great products that can help any IT organization to improve the success rate of their disaster recovery plan. The purpose of this document is not to be a kill sheet for one or another product, but rather to highlight the pros and cons of each product in relation to VMware virtual machine replication in the public cloud of Microsoft Azure.

Both products are very capable of fulfilling the above-mentioned task at a high level, but as this article will show, each product has advantages over the other depending on the workload that needs to be protected.

For example, while it takes a little more time to initially configure Zerto Virtual Replication, it includes more time – saving workflows not only for disaster recovery but also for migration and testing. Failback is also another area where Zerto shines above ASR as the required networking is already configured and a single check mark can be used to enable reverse replication.

One of ASR’s major advantages is that it can protect Azure’s physical workloads. Zerto has no support for physical workload and is limited in terms of supported workloads from the source. Today only the source is supported by VMware vSphere and Microsoft Hyper – V. In theory, if the operating system is supported in Azure, any physical or virtual machine can be replicated with ASR. This is because both physical workloads and workloads based on VMware are based on ASR. 

The installation requirements for each product are unique and ASR is a clear winner in terms of ease of installation and speed for customers who only need to protect some VMs on a single Hyper – V host. But as the number of protected workload increases, the necessary ASR infrastructure can become overwhelming and the scalability ease of ZVR becomes much more evident.

When compared to a monthly subscription bases, ASR and ZVR are very similar in terms of costs. ASR’s list price is $ 25/month per protected VM and ZVR is approximately $ 21/month per protected VM. Both solutions also require you to pay for the storage that your replicated workload consumes, but for Zerto there are a few additional costs that ASR does not need. One such cost is the compute instance running the Zerto Cloud Appliance, and the other is the cost of connecting to a VPN or ExpressRoute. So, remember that ZVR may be richer in features, but it may also cost a little more than ASR as well.

Azure Site Recovery

Four major components are needed to replicate the Azure Public Cloud from Azure Site Recovery on – site. These components are downloaded and installed on a Windows machine in your on-site datacenter from the Azure Vault configuration wizard.

A Config Server is the first server you install. A Config Server is a central administration server that communicates with the Azure Vault and performs on-site jobs. Two other components, a Process Server and a Master Target Server, will also be installed on your main Config Server by default.

The component of the Process Server is what processes and transports the protected data to the Azure Vault. Depending on the size of the workload to be protected, process servers have CPU, memory and disk requirements. If a single Process Server is unable to scale up large enough to protect your workload, it is possible to take a scale-out approach and deploy additional process servers.

Master Target Servers are required only during operations of failback. It should be noted that a Master Target Server can only fail servers of the same type of

operating system so that a Windows Master Target Server cannot fail Linux servers. A Linux Master Target server also needs to be installed for Linux servers.

A Mobility Services Agent is the last component of the ASR topology. This agent is installed on each virtual machine that is protected and is responsible for sending changed data to the Process Server so it can be shipped to the Azure Vault. In summary, ASR installs multiple premise components that differ depending on what workloads you are planning to protect. The amount of planning and the number of components may be acceptable for small to medium-sized deployments. A customer may have to invest large amounts in planning for larger deployments as it will require more than one process server and more than one master target server. This can make deployment more complex and means you have to maintain multiple machines.

Zerto Virtual Replication

Zerto has two main components, Zerto Virtual Manager (ZVM) and Zerto Virtual Replication Appliances (VRA). Each physical host in your environment receives a VRA if it contains protected VMs or receives data for protected VMs. This usually means that all hosts in a cluster will receive VRAs.

For multi-site deployments, each site receives a ZVM and for each of the physical hypervisor hosts, clusters with protected data receive one VRA.

Zerto leverages a combined ZVM / VRA architecture called a ZCA or Zerto Cloud Appliance for public cloud sites such as Azure and AWS. For Azure, the ZCA can be deployed from the Azure Marketplace or you can build a MyZerto installation package from scratch with a Windows VM and Zerto for Azure. Since the ZCA uses an embedded VRA, the only way to scale Azure’s replication capacity is in a fashionable scale. So an additional ZCA will have to be deployed once a ZCA has reached its maximum (about 100MB / s throughput).

In summary, the architecture of Zerto contains the same number of components regardless of how many on-site VMs you protect. Planning is also straightforward because it scales along with your environment, which means that if you add an ESXi host or a Hyper – V host, you also add a VRA.

Read More : https://www.taliun.com/differences-between-azure-site-recovery-azr-zerto-virtual-replication-zvr

https://redd.it/o5jby6
@r_devops