Anyone host kubernetes in digitalOcean? What are the limitations? Would anyone be interested in kubespray support for terraform?

I'm thinking about using DigitalOcean due to its relatively cheaper infrastructure costs and wondering if anyone here has noticed any limitations? Is there a reason why Kubespray doesn't have Terraform contrib added for it added yet that anyone can think of offhand? FYI no affiliation with them besides not wanting to pay $200+ per month for a Kubernetes Cluster in AWS/GCP (actually not sure if it's cheaper in GCP just know it's expensive af in AWS for a personal site).

https://redd.it/p4ffpw
@r_devops

Is it profitable to start your own Cloud or Software Consulting Agency ?

Anyone here at this sub owns cloud/software agency? Hows it going ? How did you start ?
Is it scalable ? What's the profit margin like ? How do you get client?

Currently work as Cloud engineer in the UK, thinking of going contracting but the idea starting your own agency and outreaching to client provide service seem also good. Wonders what everyone thoughts in this. Is it worth it ?

TLDR; Profit margin and scalability of starting cloud agency ? Is it even worth it. Better to stick contracting ?

https://redd.it/p4iizw
@r_devops

The Deployment Spectrum

As most others I've had the idea of a "deployment spectrum" floating around my head for a while, along with the history.

Often when describing the plethora of options on how to deploy a certain application or piece of infra/workload I find it useful to think of this spectrum (and where the client is along it), so I thought I would get it out there so I can refer to it from time to time.

There's lots missing (you'll notice I don't mention many cloud-specific options like Elastic Beanstalk, ECS, Cloud Run, etc), but I think its' a good 10k foot view of the landscape.

https://vadosware.io/post/the-deployment-spectrum/

https://redd.it/p4k3ma
@r_devops

Automatically Set/Unset Environment Variables when Changing Directories

This is a common pattern I see when auditing environments. I have done a few engagements where secrets exported automatically via .zshrc or .bash_profile can lead to exploitation of things like Jfrog/artifactory and AWS environments. This approach will set and unset ENV variables when entering and leaving a directory.

[Link to Article](https://mikemackintosh.com/automatically-setting-environment-variables-when-changing-directories-70757e7332fb?sk=90cbd3d19e60a61e28549b6f45a1fc08)

https://redd.it/p4k205
@r_devops

Advice for a New DevOps Intern

I've recently started a 12 month Software Engineering internship at a large bank in the DevOps team. I am a few weeks in and thus far I have just been learning as much as I can about the processes and tools, as this role is completely different to what I learned in my degree. I feel incredibly fortunate to have landed here the more I learn about this career path.

​

What advice would you give to someone who has just started and wants to get the most out of this career?

https://redd.it/p4mblv
@r_devops

Ideas for personal project with Python, Docker / Kubernetes.

Hi everyone,

So recently I have gotten into teaching myself Python and some docker, kubernetes / containers.

I was thinking that a good way to get more experience is using the knowledge I've gained to do a project where I combine everything. So basically build a app in python and then containerise the application and deploy it with kubernetes to integrate scaling, high availability etc.

Firstly does this sound like a good plan ? And secondly what would be a good app to build for a project like this. Something that is not super complicated would be good I assume.

https://redd.it/p4qd54
@r_devops

how do I learn to write script like this?

Hi,

After completing my foundation course in Cloud native course, I felt that I am like not even understand how this Docker file is written as appear in

https://github.com/exercism/website/blob/main/docker/dev/init.dev.sh

I would like to know how do I learn to create a docker file like that.

Is there any resources I can refer to for me to practise things.

​

Tks.

https://redd.it/p4r6u4
@r_devops

Helm Question -> How to inject values from DB for helm template usage?

Hi there,

Question for the community\~ Per the title, I have a set of values that I'd like to loop over when creating charts from a template.

However, these values are stored and updated in a SQL DB. Is there a way I can dynamically pull these values each time I deploy the chart? Was wondering if helm can do API calls, queries, or maybe I can write a custom function somewhere?

If not, any ideas for an alternative? Ideally, I'd like to avoid hard coding these values. Thank you!

uyt2190

https://redd.it/p4yrbi
@r_devops

What you called a company that doesn't have a good documentation

I'm working with a company that provides real-time payment solutions, I have been with the company for seven months as a DevOps and support engineer, the company lack of documentation about things like deployment, even the pipeline does not have a readme file, I feel that the knowledge is limited for a certain people. how do you deal with this?

https://redd.it/p4zwuo
@r_devops

Storing sensitive data in RDS

I'm new to aws and I'm trying to figure out how to encrypt data and here is a scenario.

I'm creating an app which requires a public and a secret key from users to access a third party service how can I store those keys in RDS? And once they are encrypted in the database how can I retrieve the unencrypted keys to access the third party? I searched youtube but all I saw was KMS how can I utilize that service and if there are other services for this purpose what are they?

https://redd.it/p4zsoi
@r_devops

How to land your first job as a DevOps Engineer

https://bradmccoydev.medium.com/how-to-get-your-first-job-as-a-devops-engineer-a0bffbbdc6b8

https://redd.it/p5441o
@r_devops

Is Oracle Cloud really a bad idea?

Hello everybody,

​

I am making a *very* egress-heavy webapp (lots of HD video) and am trying to decide between Oracle Cloud and DigitalOcean for infrastructure. It's worth mentioning at this point that I am the only guy working on this project and it is a completely self-funded venture. I also have to pay my lawyer and stuff to help make sure I'm doing compliance right, as the industry I'm in is one where you *do not* want to run afoul of the law.

​

Oracle Cloud's free tier seems pretty awesome, 10TB (terabytes) of free egress, and after that it's still cheaper per GB relative to AWS/Azure/GCP. DigitalOcean also has pretty cheap bandwidth, but building stuff on there will probably be a bit more work since I'd need to use Kubernetes to cheapen up things (I have many services I need to run instead of ready-to-use cloud services).

​

But... Oracle.

​

Think it's worth the risk if I use their cloud services and don't buy any licenses to anything? Or should I get over it and go with DigitalOcean?

https://redd.it/p53k25
@r_devops

Elastic APM (Java) experiences?

Is it any good? Does applications take notable performance hit when APM is used?

https://redd.it/p58g1d
@r_devops

Enforcing limit on pod disk usage

Is there any way to eforce limit on disk usage of pod, So that user can't write data beyond that limit in any of the path on pod's filesystem?

https://redd.it/p59hqm
@r_devops

Interview coding challenges, my ass

What is your opinion on companies demanding time-consuming coding challenges from interviewers? I am actively looking for a job and it seems that one out of two companies demands you to solve a X hour coding challenge as a part of the process, with X being a fairly high number most of the times

Man, I find this utterly disrespectful and a red flag. If they don't respect your time now, why would they do it later? I understand that they need to assess the skills of the candidates in someway and I would be ok with a lets say 2 hour hackerrank challenge or live mob coding.

But spending a whole day (or more), for a job you will possibly won't even get in the end, is a joke. Personally, I reject by default such companies.

https://redd.it/p5a185
@r_devops

Will a developer replace a devops/cloud infra role in next 10-20 years.

I work as a cloud infrastructure and devops engineer but I am really worried about whether a developer would replace my job in near future As developer related tools like Pulumi which more developer focused tools coming to market.
Please let me know your thoughts on this.

https://redd.it/p4vt0i
@r_devops

When to take the leap into contracting? (UK)

So i've been in DevOps for bout 3 Years now and since hitting the 3yr mark i've noticed that the amount of recruiters messaging me about contracting opportunities has near enough doubled compared to perm roles and the day rates seem pretty attractive, so i wanted to raise the question here to those that have made the move to contracting in the UK - how many years experience did you build up before you felt comfortable enough to switch over?

https://redd.it/p4wpc0
@r_devops

AWS Why is deployment pricing and licencing so vague. Even After countless google search I (developer) am confused about licencing, pricing and deployment.

For instance, guess
I have a java springboot backend on port 8080 which uses Redis and mongodb. Both of this tech claims to be opensourced and free


Now We must bear in mind that mongodb has mongodb atlas and redis has redis enterprise edition

Coming to deployment, my idea of cloud is if I would purchase amazon EC2 I am getting a blank server with a terminal in which I have the freedom to install what I want.
But
Why would I have to buy so many other services if I have EC2 like

Amazon elasticache for redis
Mongodb atlas or amazon s3 for storage
And many other paid services which I am forgetting while reading on deployment tutorial

All I want is to host my backend frontend(in angular) database and redis on a server

I am really confused why would I have to pay for seemingly open sourced technology for deployment

https://redd.it/p4rz1m
@r_devops

How do you backup? What tools, methods are you using?

I come from a Commvault world, agents and tapes. With IAC, kubernetes and cloud, what is the new pattern? Bonus points if it can all be open source or close to it

https://redd.it/p5ct5q
@r_devops

Podcast recommendations?

I'd love to know what podcasts people are listening to -- I've found a few that are of varying quality (subjectively):

- https://www.softwaredefinedtalk.com
- https://sysadministrivia.com/
- https://drunkandretired.com/ (now known as The Hallway Track, a bit more general and not so DevOps focused)
- https://kubernetespodcast.com
- https://www.inteltechniques.com/podcast.html (a bit more security/privacy focused)

Would love to learn of some new things to listen to that people rate highly.

https://redd.it/p4kdl4
@r_devops

Sigstore: A Solution to Software Supply Chain Security

Hi /r/DevOps,

Recently, I've been digging through security tools and playing with Project Sigstore and it took me a while to get a hang of how it works, so I made a quick write-up of what I learned, so in case any of you are interested in supply chain security or want to learn about sigstore, then this might be a good starting point.

Here's link to the article: https://itnext.io/sigstore-a-solution-to-software-supply-chain-security-35bc96bddad5

Feedback is very much appreciated!

https://redd.it/p5ezjq
@r_devops