Anyone who moved away from Bitbucket pipelines? Why did you do it?

I committed to CodePipeline/Codebuild a few months ago and built the CICD around it. My reasoning was common governance since we are all in with AWS already.

I recently started taking a better look at Bitbucket pipelines and it seems pretty good from the looks of it. Buyer's remorse hitting hard!

Anyway, I still hear about people moving away from bitbucket pipelines. I'd love to know why you moved away from Bitbucket pipelines?

https://redd.it/qlfodz
@r_devops

projects/labs to put in a resume?

I am a sysadmin and want to switch to DevOps, got aws developer certificate as well. I have been doing a lot of aws tutorials/labs. The way I do the tutorials is I would do the tutorial on console first and then provision everything with Terraform or Cloudformation, maybe use ansible if applicable or bash scripts. I kind of enjoy doing this cuz sometimes I would take a couple of days to finish a tutorial as it would reference other services that I wouldn't necessarily know about, so I would learn about them n read docs.

I was wondering can I add that work to my resume and start applying for jobs? I really don't enjoy my workplace anymore.

I know it is kind of hard to get an interview without experience, maybe I need to get creative with my resume? Any tips you guys could share?

https://redd.it/qlqb00
@r_devops

AITA Team Lead does whatever he wants

Throw away because of obvious reasons.

I am getting completely unmotivated in my current work. My team lead is a great dude except for one thing, he is very biased. Usually there's the illusion of team collab where we all suggest and decide stuff, but at the end of the day the way we always end up doing whatever he thinks is right based on his previous experience.

From the tools we use, to the scripting we do. He prefers to create a 1000 lines of cryptic bash syntax, parsing nightmare strings instead of using Python for making life easier. No offense with bash but it was never designed as a programming language.

I advocate for using Python or Go, reusable code, using data structures, efficient coding, adding a more "dev" approach to scripting. He advocates for "If it gets the job done leave it be".

Same for how we design the pipelines, the infra, everything goes the way he says it should be and at the end of the day this is making me more and more unmotivated because I think our opinions are really not valuable.

https://redd.it/qlug65
@r_devops

Is there a way to strike balance between Software Development / DevOps ?

Currently employed and will be soon planning to search for a job in the market but I am a bit confused as to what is a general balance between Software Development Engineering roles and DevOps roles?

As a background I am not a Software Engineer by profession, but am an active software developer (R&D)

I tried finding potential positions in the Market and lo, and behold:

> Everyone wants everything!

> Great experience with modern programming languages C/C++, Java, Go, Python etc.

> Of Course: Agile Duh!

> DevOps: Kubernetes, Docker, AWS, Microsoft Azure, GCP, Jenkins


As a beginning I am sticking to: C/C++/Python/Go at the moment and will do all OOP and Data Structure Algorithms. As I am progressing, I feel like I am leaving out things related to DevOps like getting better at Docker / Buildx, better grip at Kubernetes / Getting some certs for Cloud Providers.

People in DevOps, is there a ROADMAP that you would suggest a fellow DevOps aspirant should follow in order to be covered from all sides?

https://redd.it/qlyce9
@r_devops

Terraform and Ansible

Hello,

I'm learning Terraform, and I already know Ansible.

I'm wondering what the best practice do you recommend if you want to do provisioning with Terraform and configuration with Ansible ?


Launching Terraform with Ansible or lauching Ansible with Terraform ?

And why !

https://redd.it/qm2osf
@r_devops

What is the best way to learn as much Puppet as possible within a week?

Hi all,

I'm just about to start a new job at a company heavily utilizing Puppet. So I can try and hit the ground running I've set myself the task to try and learn as much Puppet as I can in the next week. I've got several years of experence with Ansible but I'm very much aware Puppet is a different and in some ways more complex tool.

Could someone please point me to the best resources for getting competent with it quickly?

I figured out Ansible by setting myself automation tasks and figuring it out as I went along over a number of months but I don't have time for that now. I'm hoping for more of a video/written course with tutorials so I can get alot done in a short space of time. I was looking at CBT nuggets and a few other options but the courses were several years out of date.

Any advice would be very much appreciated. Thank you!

https://redd.it/qm6bz4
@r_devops

Abusing SAST in a Malicious Code Analysis Attack

Just saw this post on twitter. https://twitter.com/rotembar/status/1455933655021412353?s=20

Apparently SAST tools can be abused in a malicious code analysis attack. The original article is here.

https://medium.com/cider-sec/malicious-code-analysis-abusing-sast-mis-configurations-to-hack-ci-systems-13d5c1b37ffe

https://redd.it/qlzcqk
@r_devops

Canadian Intermediate or Senior “Cloud Engineers” (aka building and automating infrar on azure/aws /gcp). What is your base salary?


Google is saying avg is about 120k/yr. Hoping to get some real examples to compare.

https://redd.it/qlkyj2
@r_devops

Using https from a docker in docker container running alongside a docker daemon sidecar container on a pod in kubernetes



I'm running a deployment with an application that requires a bootstrap launcher script be run that runs docker commands (Discourse). The discourse container connects to the docker daemon fine unencrypted @ localhost:2375, but the launcher script runs a docker container that subsequently runs a git pull command via https, which fails since the traffic from the docker in docker daemon sidecar isn't encrypted with TLS.

I set out to encrypt with TLS, but quickly realized I can't simply provide the openssl commands to the containers command entrypoint since they require passwords to generate the CA, server, and client certificate keys.

That being the case, is there any way to encrypt traffic in this manner?

https://redd.it/qlwzp5
@r_devops

Moving an EC2 instance to another region

I tried creating a snapshot and then using that snapshot on a different machine, but I realized I can't create a volume out of a snapshot if the snapshot was made in a different region. Is there a way around this?

https://redd.it/qlwrgt
@r_devops

Is it possible to run cronjobs in a dockerized environment without using docker-compose?

I have just watched a video where a DevOps engineer stated that he hasn't used docker-compose in a long time.

In fact our DevOps team isn't good at using docker-compose either, every time I ask them to run a docker-compose task, I'll have to explain to them why they need to do it like that and what's the usefulness of docker-compose.

We outsource our DevOps tasks to a company specialized in DevOps, I thought that our DevOps team isn't good at docker, but when I heard that DevOps engineer speak, I'm starting to think that maybe docker-compose is a thing of the past and I'm getting old and rusty.

We dockerized the PHP application and we want to run it on AWS Fargate. I dockerized the PHP cronjobs using docker-compose. One container runs Php and another runs crontab.

Without using docker-compose, how one can docker-compose? do the DevOps copy-paste the same dockerfile into two fargate tasks? and how would they do that on a local machine?

https://redd.it/qmkqfw
@r_devops

Splitting up Ops team - Is this typical?

Hello all,
My team was upgraded (?) from a traditional Operations team supporting networking, storage, and server hardware, deploying our apps in a docker environment and managing state of roughly 100 servers before we had some outside help in moving everything to AWS. This was roughly 2 years ago, and it's been a great adventure learning cloud technologies and how to maintain them with Terraform. We (my team) are a mix of traditional sysadmins-turn-cloud-ops, DBAs, and we have some development experience, but not a lot. Speaking for myself, my abilities begin with BASH and end with Powershell. We all have our areas of specialty, but are fairly interchangeable on the core infra stuff.

We now have a return-to-work plan set for January and we're being told that our team will be physically split with each of us joining a separate development team. The stated goal is that we will increase collaboration and improve our products, but it is also true that they don't have anywhere to put our team if they don't split us up. This makes me question the motivation behind this decision.

I would like to know if this sounds like a sound strategy from those of you who work in similar ways. Devs, have you ever had a member of Ops on your team full-time? Ops folks, have you ever been made to work full-time with a dev team? Is there even still a dividing line between Dev and Ops? Do most Devs now also maintain their own infrastructure?

This is all new to me, so I am very interested in your feedback. Thanks in advance.

https://redd.it/qmnein
@r_devops

Pretty bored in a job that is great on paper

I'm not sure my reasoning behind creating this post, but maybe someone has advice or perspective.

In the last 3 years, I went from making about 100k to >250k (total comp).

That involved moving from a tiny company (5 yrs), to a startup (1.5 yrs), to a very huge company (you could probably guess it in 3 guesses).

​

I'm not a great programmer (though I'd love to be given the chance), and I don't have a college degree. I'm 37 and have been working in tech for a long time, worked my way up from my first tech support job that paid $6/hr 20 years ago. I'm a strong devops/cloud guy who likes to hack and troubleshoot problems.

I'm married and have a kid. The benefits and 401k match and all that at my company are amazing. But I work with technology I don't really like, that is not really relevant to the greater market and I fear I'm falling behind because of it.

I've done a few interviews lately and it seems like most smaller companies that allow fully remote work and use "cool" stuff like kubernetes aren't interesting in hiring me at the $250k total comp level.

Talking to recruiters and interviewing is so exhausting, between work and having a family I really don't have time for it.

​

Do I suck it up and try to make my job interesting somehow or just go balls out looking? Ever been in my boat?

​

I get 5+ recruiter emails a day.

​

Thanks

https://redd.it/qmtiqh
@r_devops

Too many things to learn.

As a DevOps guy I find it difficult to keep updated and keep learning - most of the time I feel I have the imposters syndrome.

Does anybody feel the same?

https://redd.it/qn3ht9
@r_devops

How do I choose tools? There are so many now...

For too many years, I worked for an enormous company and helped implement a devops model using Tanzu (was Pivotal) Cloud Foundry and Kubernetes with Concourse as an automation/scripting/gitops/iac glue layer.

I recently left, and went to work for a medium SaaS company that is trying to make the switch to Kubernetes and micro services for their workloads. Our infrastructure is on AWS, and they've spun up a Kubernetes environment and are trying to figure out infrastructure as code, but they are having trouble managing it because it was largely manually installed. They have a working in-house CI system they like, and they're familiar with Terraform, but any other tools seem more piecemeal instead of a part of an integrated strategy. It makes scaling impractical at best.

I've been asked to help with containerization, automation, and observability. ie. make this Kubernetes thing work like we need it to. I think they need a PaaS, and more orchestration/automation (probably with git as the source of truth), but the sheer number of options available for this space has exploded over the last 5 years and it is overwhelming. Most of the popular products seem to be more focused on dev and less on ops, but I think there's probably something better than just what I've done before (Tanzu/Concourse). I need infrastructure automation.

Can I get some "boots on the ground" feedback on tools that would work together to stand up and manage an AWS kubernetes infrastructure for a growing company, instead of just the marketing/sales stuff I'm being fed?

https://redd.it/qn1gng
@r_devops

DevOps Master Class just passed 100,000 views across the content

Just wanted to say thanks and make sure people were aware of the DevOps Master Class which is free and has zero adverts.

https://www.youtube.com/playlist?list=PLlVtbbG169nFr8RzQ4GIxUEznpNR53ERq

GitHub repo for all associated code, boards etc. at https://github.com/johnthebrit/DevOpsMC.

https://redd.it/qna9hq
@r_devops

Lesson plan ideas for a 1h Devops intro for teens/tweens

Hi all!

I've been asked/invited to represent my company in a STEM learning project that introduces under-resourced Jr. High and high school kids to STEM careers in the area. I have about an hour to work on a project with them, and have been wracking my brains trying to figure out a good, engaging, but quick introduction to DevOps that can be done in a remote-learni g type environment.

Right now, I was sort of just thinking of setting up a github (or Azure) project, creating a basic web page on a repo, and directing the students to copy the folder, create their own folder with the same contents, modify it a bit to make their own page, and go through the push/pipeline/code review process. Showing ci/cd, and let them go see the products when deployment is done by going to the web page on their browser. I'm currently in the percolating stage of planning, haven't put pen to paper anywhere or investigated things like how to get a bunch of random kids access to a project.

I have about 2 weeks to set everything up. If anyone has good/better ideas, or advice to flesh out what I have here, it would be greatly appreciated.

https://redd.it/qnejy3
@r_devops

Is DevOps the new SysAdmin? If not, why not?

Yeah - 'ok, boomer' - get it out of the way (I am actually Gen-X).

Have been working in IT for 20 years now,, started while I was still in Uni (Mathematics and Computing, they didn't have IT back then). For me it seems like DevOps is basically knowing what buttons to click onto get something done - API (that's for developers, but we wont give them the access token needed to call it).

The company I work at has a 'DevOps Team' - the fact that you have a team for DevOps means you don't actually do DevOps.

https://redd.it/qngnfv
@r_devops

I'm lost and overwhelmed with new concepts

Originally and currently I'm a system administrator, I got asked by an acquaintance to do some work for a development company mainly java stuff (not a fan of Java) the stuffs were basic tasks backup, ssl... Etc all good so far I got to work with new concepts like docker, compose, reverse proxies, cloud servers and storage. I'm not an expert but I can get things done with a little googling and documentation reading the problem is now I'm introduced to the CI/CD world and I'm overwhelmed with git, jenkins, maven, Ansible, gradle, branching... Etc and here is where I crashed I'm not sure where to start and how to use the full potential of each of them, even docker isn't making sense to me now, maybe this is happening because I started directly without any full understanding of the concepts and tools and actually its making me depressed and frustrated I like the cloud concept and what else but I can't make my next move cause I don't even know what my next move is, Any advice??!

https://redd.it/qnlfca
@r_devops

Keeping track of software versions?

How does your team track software package versions to ensure they are up-to-date and protected against vulnerabilities?

https://redd.it/qnn9jo
@r_devops

Deny docker container run without valid license file/key

Hi

I am creating the software product based on Docker containers (docker-compose).
It should be delivered as a single package to the client and allow to install it even without access to the internet.

The question is - how to deny to run the docker-compose (docker containers) if client doesn’t have correct license file or license was expired?

https://redd.it/qnl6kv
@r_devops