If someone hacked sonarqube instance

Hi! I'm new in this World. I want to know if someone can help me and tell me what kind of things can be obtain a hacker if the sonarqube instance is hacked.
What Kind of sensitive data store sonarqube? Only the code? Or more information like pass and users ???....

https://redd.it/odisp9
@r_devops

How much of your work is project based?

Currently I'm in app support so a lot of SQL with exposure to AWS.

However I really am starting to dislike the nature of work where you're always being pinged by people, getting sent urgent tickets that aren't always urgent and resolving customer issues.

Is DevOps much different? Do you get to do more project based work?

https://redd.it/odvyux
@r_devops

Help me graduate by filling in my DevOps survey

I am currently writing my master's thesis on the topic of DevOps. I still require respondents before I can say anything meaningful. Please help me by filling in the survey. Many thanks!

Survey link

https://redd.it/oe3a5s
@r_devops

Needing some support... Is it okay to be bad?

As the title says. Been at this job for a few years now, moved from app development to working infra, tooling, cicd etc. Lots of new skills learned, and I'm grateful for the company letting me grow in this space.

But I feel like I've reached the point where I can't improve. I've tried various ways of doing more - larger projects, trying to manage people on a project, doing harder things. None of it is really working out, and I'm getting really close to breaking down from my own (perceived, maybe?) incompetence.

I want to take a step back and find my footing, but at the same time it feels like giving up, and I'm worried about being complacent and completely losing the drive to keep pushing

Has anybody else here been in this situation? Is it just a case of keep trying to improve, or taking smaller steps, or what?

https://redd.it/oe3q7y
@r_devops

A way to output all AWS resources IDs that are missing a certain tag?

What I need is to add a tag to all existing EC2 resources on my AWS account.

I've seen this:

https://github.com/kpei/AWS-Tag-Auditor \- outputs the resource IDs of all resources with a missing specified tag to a file.

Then I can use any of either of these tools to tag the resources:

https://github.com/kpei/AWS-Tagger

https://github.com/washingtonpost/aws-tagger

​

The thing is - AWS-Tag-Auditor is old and un-maintained (7 years..). I'm wondering if you know of anything with the same functionality but fresh..

https://redd.it/oe4x22
@r_devops

I made a webapp for software devs that generates a customizable Docker Compose template project with just a few clicks

Check it out if you want: https://scaffoldy.io

I'm also analyzing user feedback for my bachelor thesis, so please consider telling me if this tool is useful for you and how I could improve it :)

https://redd.it/oe67w2
@r_devops

Gitops for non developer?

Hi,

I'm working in Management position right now but have worked in Operations before, but not Development.

Do you have some advice where i can learn the Gitops basics?

We want to role out a new project in this way and i don't like the idea to tell somebody to do x if i don't get what it means.... So i will finde some freetime to learn the basics.

I know Ansible and I'm able to read and write simple playbooks, also familiar with Python.

I use git and github for personal use but i struggle to finde a condensed tutorial on what are key parts of gitops, what's a ci/cd Pipeline stuff like that.

Any suggestions for good tutorials?

https://redd.it/oe5bf9
@r_devops

Hikaru 0.6b released, now supporting both the 1.16 and 1.17 K8s Python clients.

https://github.com/haxsaw/hikaru

https://redd.it/oe7ffd
@r_devops

That one question again: an alternative to Jenkins?

I'm looking for a simpler, more modern, and more reliable alternative to Jenkins for use in a C++ and Python CI/CD infra.

What I would like to have:

- Running jobs, that is: scripts in containers, like GitHub or GitLab pipelines
- Trigger periodically, or through external trigger (HTTP endpoint for Bitbucket, Github, etc)
- An API to query state
- Secrets, ideally integrated with HashiCorp Vault
- Artifacts are nice-to-have

Ideally, it integrates with HashiCorp Nomad.

https://redd.it/oe4lsk
@r_devops

[Upcoming webinar] Using observability to build Well-Architected serverless apps

Join Dashbird and AWS for a live webinar on **Thursday, 15 July, 8am PDT** **|11am EDT** **|** **4pm BST** **| 5pm CEST.**

Topics covered:

* Observability and debugging for Severless using **X-Ray**
* **Hands-on walk-through** of a simple app from an X-Ray perspective
* **Tips and tricks for observability** for reliable serverless architectures and **AWS Well-Architected Framework compliance**
* Dashbird's new Well-Architected insights for **Serverless and SaaS**
* **Serverless logging and error handling** best practices

RSVP here: [https://sls.dashbird.io/observability-reliable-well-architected-apps](https://sls.dashbird.io/observability-reliable-well-architected-apps)

https://redd.it/oe7183
@r_devops

AWS CloudWatch Alarms in Slack

https://towardsaws.com/aws-cloudwatch-alarms-in-slack-f2691176d1cf

https://redd.it/oeb821
@r_devops

Best Image Resizing SAAS

What is the best image resizing SAAS Solution according to you?

https://redd.it/oe4s12
@r_devops

Should i as devops replace Dell XPS for Macbook Pro with Intel?

I have Dell precision 5510 which basically is xps 9550 but with quadro
15" 4k touch screen
i7 6820 hq
32gb ram
M2 ssd + sata ssd
quadro m1000m

With Kubuntu on board it does well whathever i throw on it. Linux support is really good, sotware updates contain even bios/uefi! Kubuntu is able to scale 1.25 which is perfect for me.
However i have complaints:
- works with full speed only with cable (serious throttling without it)
- batterry life is pure garbage - > ~40-60min of work
- external 4k screen has low fps (definetly not 60hz)
- i have to restart it when i change scalling (switch to other monitors)
- i have to connect monitors AFTER os is loaded, otherwise some weird things happenin

My company buys new laptops for workers which become their own after some time. Most of coworkers take M1 macbooks. I see it as oppotunity to switch my current gear for something better. Im looking at macbooks now because of their 4k handling, great battery life and no throttling even without power cord. M1 is out of the question for now - still some problems with some tools and no possibility to virtualize windows which i sometimes do. So the only option is MBP 16 2020 with intel cpu and scissor keyboard.

I still consider some dell/thinkpad with linux. But im afraid that i woul gain very little ro none comparing to my current laptop. Mybe systems76 would be better at some points if they would sell them in europe. But they dont.

So what is your experience and reccomendation? My stack is bash, python, docker, docker compose, virtual machines and soon terraform and kubernetes.

https://redd.it/oeh52y
@r_devops

What languages are you typically using use in your devops professional work?

Here let's avoid things like yaml of only configuration files.

View Poll

https://redd.it/oekiq8
@r_devops

Project and/or grind leetcode or certs for DevOps

Had DevOps experience though mostly was a sysadmin position with lots of IaC. I'm currently job searching and was wondering, with less than a year's experience, would it be good for me to just continue grinding leetcode and/or creating meaningful projects (Planning on creating 3 - 4 just for a portfolio) to show case to an employer or just getting a cert in something like AWS Certified Solutions Architect, tack it on the resume/portfolio and then apply?

Would love to hear what your guys thoughts and open to any questions.

https://redd.it/oejnrc
@r_devops

Question about downtime of blue-green deployment

I have read some articles about blue-green and most of those are mentioned it as a "zero downtime" deployment strategy.

But I'm confused on the switch traffic part. It should have downtime when we switch the whole route from version 1 to version 2, right?

I'm using k8s to do my deployment. I face downtime(about 1s to 2s) when I change the selector in service.yaml

Here are my deployment steps:

1. currently running version 1.0.0
2. apply version 2.0.0 deployment.yaml
3. wait the pod running normally and passed health check
4. edit service.yaml, change selector from version 1.0.0 to version 2.0.0

* but here I want to mention that I'm using Lens IDE to edit the service.yaml, I watched some tutorial that teach us use patch command, something like `kubectl patch service my-app -p '{"spec":{"selector":{"version":"v2.0.0"}}}'` to do it. I don't know if it is different behind the Lens IDE.

So finally I want to ask is blue-green really a zero downtime deployment strategy? I know I can use Canary deployment to achieve "real zero downtime". But how can I achieve zero downtime in blue-green only?

Thank you very much~

https://redd.it/oeib4l
@r_devops

Terraform EKS Ubuntu AMI

I'm new to DevOps, and I have been trying to use the Ubuntu image as a node in the AWS EKS cluster in Terraform. But the terraform doesn't allow me to create any other AMI except Amazon Linux AMI.So here is the code that I am using to create an EKS, and one more thing is that I cannot get public IPs of the ec2 to connect via ssh. Thank you.

https://redd.it/oe3ul7
@r_devops

Are you in Devops? Can you share your opinions on challenges you are facing currently?

Hi all,

I am working on creating a software in the Devops Sphere. I have my own assumptions based on the problems I see in the industry but I want to avoid creating a software that nobody wants, therefore I would love to have your opinions and feedback on the current problems you are facing and also have the opportunity to validate my own assumptions.

Here are the main questions:
- What are the main challenges you are facing to implement a full CI/CD pipeline?
- What are the main challenges you see when deploying IaC?
- What are the main challenges to implement security in your SDLC?
- Where do you want to see a change in the Devops/Devsecops industry?
- What are the problems you wish to see fixed asap?
- Are they any other questions I should have asked?


Thank you for your time!

https://redd.it/odvx96
@r_devops

Languages used for SRE or DevOps daily professional work.

Languages commonly used for automating build piplelines, and ensuring services are kept running (up) in your work place.

View Poll

https://redd.it/oep9lv
@r_devops

Anyone has a easy to remember shortcut for 12Factors?

Hello Community,

Just wanted to check if anyone has already devised a super easy way to remember the 12 factors of as suggested in 12factor.net.

Those seems a handful to recall without a good acronym or phrase.

Cheers

https://redd.it/oeq0a8
@r_devops

Tara Report - do you use it?

What are your thoughts on it. This is what I have so far:

1) https://www.portshift.io/blog/what-is-the-tara-report-and-why-should-devops-pay-attention-to-it/

2) https://www.mitre.org/sites/default/files/pdf/11\_4982.pdf

3) https://www.ciscotechblog.com/blog/what-is-the-tara-report/what-is-the-tara-report-1\_hu4d3eee6b3a92e7a5966b23adb743e7fa\_71006\_960x0\_resize\_box\_2.png

Anything else to add? Have you used it?

https://redd.it/oerl15
@r_devops