Introduction to Terraform and Infrastructure as Code / Terraform Infrastructure as Code Basics

Hey all-

We wrote this series introducing Terraform and Infrastructure as code a while ago and I thought I'd share it here. Let us know what you think. Hopefully it'll help some people in getting started out.
Introduction to Terraform and Infrastructure as Code
Terraform Infrastructure as Code Basics

https://redd.it/ofx5hc
@r_devops

Noob Question Should we ensure that the code works as expected based on the Acceptance Criteria during a Code Review Session?

Hi Everyone!

I am currently working with a team of developers. So far, we have established a standardized agreement that before merging our latest commits, we are to conduct a Peer Review to verify if our code complies with our coding standards that we had set on.

However, what I want to clarify regarding this is do we also have to ensure that the code project we have is complying to the Acceptance Criteria provided by our product owners during the Peer Review or does this have to be inspected on a different process (process like QA Testing for example) ?

Thanks and have a great day ahead!

https://redd.it/ofwbkp
@r_devops

Send file from OneDrive to GitLab automatically

How can I send files from OneDrive to GitLab automatically when files are updated in OneDrive?

https://redd.it/ofwehj
@r_devops

Asking for a Raise

I know this is not necessarily a DevOps question, but I believe every industry is different and I'd rather ask this question to people that are most likely to understand my situation.

So as the title points out, I'm thinking about asking for a raise. I'm still in college for my Computer Science degree, taking an online program from a state college. But I already started working as a DevOps Engineer for a remote only company. I took courses in college on cloud computing and even took a training course that was taught by my now employer. I have the Solutions Architect Associate and Developer Associate certifications from AWS.

The only problem is that I really only have six months of actual on the job experience. And I very much still feel in the beginnings of my career. I don't feel autonomous at work. I feel like I still need a lot of help from my senior engineer almost daily. I know I am advancing because it wasn't that long ago I couldn't do even less. But still its hard not to feel like I don't contribute a whole lot to the team.

At the same time, they don't pay me a lot. I knew they were gonna be training me in so when they asked me how much I wanted to get paid, I said I small amount and then they gave me even less. Most of the engineers they hire live in low-cost of living countries where they probably don't pay them a lot, and I live in a pretty high-cost of living area in America. So I know they aren't paying the other engineers the going rate for someone in my area.

Because of some personal things going on in my life, I could really use the extra income. So I definitely am going to ask for more money, the question is really how much I should ask for.

I guess this post turned into a stream of consciousness, but my question really is if anyone has even been in my place and what advice would you give to someone in this position. Should I just ask for a raise for the going rate of someone in my area, or still lowball until I build up my skills?

I know people are gonna say that the worst that could happen is they'll say no, but I also want to be realistic about what I am worth and not rock the boat too much at work.

https://redd.it/og081f
@r_devops

DevOps courses

Hi guys, I want to enter the DevOps (SRE) field but I don't have any money (I can't afford the prices). someone here knows some free courses or discount coupons?

https://redd.it/oftfpi
@r_devops

apache in puppet

I have to create a .pp file in manifest folder in master node and make configuration in such a way that Apache server gets installed directly in agent node. like push config changes to agent.

​

I have joined a company as a trainee and i was assigned this puppet thing. I have been looking at google and youtube for the sources and process.

Would be helpful if someone suggest me with sources regarding learning puppet.

https://redd.it/og2a97
@r_devops

DevSecOps maturity assessment

Hi. My management has requested me to perform a devsecops maturity assessment. THis is to help them prioritise investments for next year. Is there some sort of framework i should look at to do this? I have looked at SAMM and it seems a bit high level. Is there anything else i should consider or look at to perform this assessment of our current environment?

https://redd.it/og1t2i
@r_devops

What's your dream stack? Use your imagination.

Don't limit your response to what's already out there.


You could say stuff like:

A mix of terraform + ansible with Typescript instead of yaml
Terraform for provisioning
Ansible for config
<fav language> because ...
Jenkins but with a much more streamlined workflow
Painpoint 1
Painpoint 2
Something that you wish existed

https://redd.it/ofsk0d
@r_devops

How do you manage your legacy assets?

At my org, we are currently going through our 'digital transformation'. We are at a crossroads with new applications being creating in a microservices architecture, containerised, observable etc.

We still have an older workflow, that consists of .NET Framework web apps in IIS across servers. We also have some really old Native Windows apps.

Over the years there has been no governance on the creation of applications, so we find ourselves in a difficult spot where apps may not be used anymore, multiple versions floating around.

To make it more difficult, the language that people use to describe these applications are different dependent on who you ask. Ask the end user and they will call it one thing, ask a developer and they will refer to it differently.

We want to get to a point where we have complete observability of our legacy applications and a universal language that everyone in the organisation uses when communicating about our old apps.

Some ideas we already have:

\- Define what we mean by an application or service/api.

\- Adopt standard names for each application or service we have.

\- We probably want some asset management tools that track our infrastructure and what is installed on them, but don't want the overhead of manually maintaining this over time (cake and eat it?)

\- Maintenance of our source control (currently spread across SVN for older stuff and GitLab for newer), start restricting changes to the older stuff so we can gain a better understanding of what gets changed and how etc.

\- Restrict access to older servers so that we can understand why people are logging onto them.

\- Monitor traffic to old servers to establish whether older apps can be removed if they are no longer used.

\- Establish ownership of older applications so that we have someone responsible for its maintenance.

Would be really good to hear your thoughts and ideas, and what your orgs do for this!

https://redd.it/og40su
@r_devops

SREs/Infra engineers -- any advice on prepping for troubleshooting interview rounds?

Usually the candidate will be presented with a scenario, e.g. 'application server is responding w/ 5xx status code', and the candidate is expected to walk interviewer through their troubleshooting process.

&#x200B;

It seems like these rounds test, at a high-level, one's networking and OS knowledge. Any tips on prepping/acing these rounds? Much thanks in advance.

https://redd.it/og4kcm
@r_devops

What are your DevOps lessons learned during COVID times?

For me, the biggest lesson was around serverless, multi-cloud, observability, and security.

Found that,

Multi-cloud has many advantages than disadvantages.
Serverless is actually more than just using lambda
Observability is what we usually miss and has to be given more importance
Security can never be neglected, if you do this then you are dead.

What are your learnings?

https://redd.it/og55r6
@r_devops

What board column combination have you found most useful. Here's a selection from Microsoft Samples

1 |ToDo |develop |peer-review |Test&QA|deploy|done

2 |Approved|Committed| Development | QA | Done
Doing | Done | Doing | Done |

3 | new | Design | Develop & Test | Done
| Doing | Done | Doing | Done |

4 | New | In Progress | Done |

5 | New | Approved | Build & Test | Deploy
| Doing | Done |

Also a question. Can someone tell the the difference between New and Approved and what does Committed mean

https://redd.it/og55uk
@r_devops

Using Chef test kitchen with k8s

Hi everyone. I'm planning to test Chef cookbooks on Jenkins that runs inside k8s and I wonder, if it's possible to run Chef test kitchen inside k8s. I've found a project that looks abandoned, so it feels like it might be a dead end. Could anyone share their experience with that? Thanks in advance.

Abandoned project for running Chef cookbook tests in k8s: https://github.com/coderanger/kitchen-kubernetes

https://redd.it/og7wtx
@r_devops

GoCD Agent Authentication??

Hi all, having some weird behaviour and need some advice. I have a GoCD server with Google OAuth user authentication. I'm trying to set up agents, but I'm getting 403 errors in the agent logs, unless I have an active OAuth session for my user on the server? This does not seem normal..

https://redd.it/og9feu
@r_devops

I am aware of sites like weworkremotely or Upwork, but what would be the best place to find remote part-time contract gigs specifically (preferably in north america, but open to others) ?

I currently work for a large firm doing devops consulting/engineering - AWS and Azure and everything in between. Loving it, but looking to get some side hustle going for some extra income, if anyone can recommend me to a site or anything.

Thank you!

https://redd.it/og90hi
@r_devops

How much devops do your feature developers know

I thought that this might be a interesting question. Yes, DevOps is a culture, not a team. But in reality, how much of devops does your feature developers know. Do they know how to modify pipelines, configure infrastructure/configuration as code. Do they know how to write a dockerfile and configure/deploy to a kubernetes cluster? Do they know how to maintain a cluster and keep it running. Do they know how to configure/view your logging and monitoring?

https://redd.it/ogbw7i
@r_devops

Kibana - segregating logs based on a specific field

I am wondering if it is possible to filter/segregate data inside Kibana based on specific field.

For example, we have a multi-tenancy production environment and sometimes we have to work with external partners. Sometimes they request access to logs which we cannot give, since they would see a logs/sensitive data which does not belong to their project.

Obviously, one solution would have one kibana instance per tenant/client but at the moment this is not so easy for us to achieve since our entire backend running on EKS is tenant agnostic; meaning all services process events/data for all tenants.

I wonder if there is a way of segregating data inside kibana based on a specific field; so show only the logs of tenant A and give it to external developer. Our kibana is running on managed elasticsearch provided by AWS.

https://redd.it/ogct81
@r_devops

devops from interview to hired. What are your guys story when it came to getting your first devops gig?

Currently practicing devops by studying for certs, creating projects, and studying LeetCode. Got my first devops gig last year which was supposed to be a regular position but got thrown into more of a senior role even though the title itself didn't reflect it. Learned a lot though there wasn't much coding (at least for me). I did get to do a whole lot of sysadmin which was nice and I helped in shaving down time for OS install automation, IaC, etc. Now, here I am, laid off because of COVID (for a while now actually). How did you guys get your first and/or second gigs? Curious to know what all of your experiences are like. Open to any questions that you may have as well!

https://redd.it/ogdchl
@r_devops

External retrieved data integrity?

Hello /r/devops

Not sure if this is the right place to ask, but since DevOps might involve with some cryptography I decided to ask my question here.

For a new system we're building, we are systematically retrieving data from an external system (Basically via a cron job pulling new information from a REST API). One of the technical requirements is that we should be able to proof that the data we locally store, is indeed coming from the external data source after X amount of time. My first thought was to store some kind of reference to the SSL certificate used in the request and/or the certificate chain and do something cryptographically with the data to verify it's integrity (Not sure how yet, it's my first gut feeling on how to approach this since the SSL certificate is identifying the server the data came from).

Anyone has experience with this kind of subject? Or is able to point me in the right direction?

Cheers!

https://redd.it/oge39q
@r_devops

Live now Tim Kadlec testing WebPerf Optimizations with Cloudflare Workers & WebPageTest

Join the stream >> https://twitch.tv/webpagetest

https://redd.it/ogc46g
@r_devops

Service Connections on Azure Dev Ops

Hey Guys, someone know if its possible to create a Sonarqube service connection on Azure DevOps, calling a internal webserver or its mandatory that the webserver must have a public ip?


https://imgur.com/XTUjDSm

https://redd.it/ogf2ab
@r_devops