Create a JKS keystore with Private Cert Entry

My use case is to enforce HTTPS traffic from our custom API Gateway.


So, I created a Private CA (root) in AWS.

After that I created a Private Certificate with my load balancer's URL.

Now when I try to export that certificate, it shows me three files.

Certificate Body, Certificate Chain and Private Key.

and I have a Certificate Body from my CA.

Now, I need to import them in keystore in JKS format with entry as Private Cert Entry.

I tries many things but it didn't work, quite honestly I don't really know what to do all these files and which one should I import in the keystore.

Any sort of help is appreciates, thanks!

https://redd.it/qpcztg
@r_devops

What do you recommend?

I need to set up a cloud project in Azure for a video platform. The videos should be loaded quickly, so would we need a fast database like ElasticSearch or are there better alternatives? I am wondering in general how should we store the videos that will be uploaded. In simple files systems or database with path?
Happy for every help and if you are open for a zoom call where you can help me out I would highly appreciate that!

https://redd.it/qpa0n4
@r_devops

Terraform pipeline to apply changes

Hi there,

People that are starting in DevOps and automation with Terraform might find a post that I wrote a while back about how to set up a pipeline in AWS CodeBuild to apply your TF changes in a GitHub repo.

Here's the link

Cheers!

https://redd.it/qpkvi1
@r_devops

Make GitHub Actions faster

Hey,

We recently launched BuildJet for GitHub Actions, and we saw a lot of DevOps users sign up for the service. Thought that it might be interesting for this community.

We make your GitHub Actions finish much faster, for lower cost. It's surprisingly easy to install. You simply replace the `runs-on: ubuntu-latest` with `runs-on: buildjet-8vcpu-ubuntu-latest` and your Ci workflow will get access too much better and faster hardware.

For a technical rundown you guys could check out: https://buildjet.com/for-github-actions/blog/a-performance-review-of-github-actions-the-cost-of-slow-hardware or checkout our website: https://buildjet.com/for-github-actions

https://redd.it/qpm88s
@r_devops

Using python script to execute multiple commands inside a docker container?

I'm trying to access a container on another server and execute commands inside it programmatically. Can someone guide me on this please?

https://redd.it/qpo0mi
@r_devops

Self-hosted CI/CD options?

I am running k3s on bare metal, and I was looking at drone CI however it requires me to open ports on my network. I prefer not to since Im not ready to deal with the security burdens just yet.

some options I had in mind:

1.) Open port 443 -> Nginx with GitHub IP's whitelisted for drone CI

2.) self-host GitLab and pull mirror Github (Costs $20/month), then point drone to GitLab. My issues with this option are:

I prefer not to spend the $20/month at this point.
It also looks like drone adds info back into the repo that would be useful for devs to look at that would not be present in GitHub.

3.) GitHub actions self-host runner

My ask is, what would be the most elegant solution? I am open to other suggestions. Thanks

https://redd.it/qpok5q
@r_devops

Does anyone know how many Microsoft Developers work on GitHub vs Azure DevOps?

How about the future, do you see a time when all the Azure DevOps capabilities will be rolled into GitHub.

https://redd.it/qpk6z9
@r_devops

Docker Swarm getting going - Quintessential Questions

Hey Folks,

Coming into Docker Swarm from an absolute basics (singular, compose files) perspective, there are a few things I worry about and I want to know more. Any help that can be lent is great.

​

* 1) **STORAGE** \- In Docker Swarm, I see that you can define a volume driver
* A) where is this data bound to by default in a swarm?
* B) Should I be using shared storage like netapp or glusterFS with a Swarm?
* C) in a non stateless service deployment, where would I expect to see each containers data being stored among a deployment? (question similar to A but more particular)
* D) Are there plugins I should be using for storage? What is a best practice for stateful services/services which need volumes
* 2) **NETWORKING -** In Docker Swarm, I am going to have multiple hosts that will be hosting these services since that is what Swarm is all about
* A) What IP address should I expect my services to be available at?
* B) Should I expect Swarm, from an external network perspective, to behave instead as if I had a cluster of servers available and essentially load balance between a few of these? The difference being that I could have multiple different services running on the swarm as long as they don't use the same port?
* C) Can two stacks with the same port be deployed onto swarm or will that throw an error?
* 3) **ORCHESTRATION -** Are there common tools that are used with Swarm? If so, what are the most common ones that are recommended?
* A) [Portainer.io](https://Portainer.io) for any future onlookers is one I know personally

​

Thanks any and all!

https://redd.it/qpt0bn
@r_devops

Just putting this out there for now.. (asking for help)

Would any soul be willing to help me get a python app deployed to a kube cluster? I have a potential job offer and if I can get this app deployed, I think I would get the job. They are looking for a junior hire they can mold to the position.

I've been working on this since last Wednesday. I containerized my app and got the cluster up and running by Thursday night. Deploying it to the internet has been tough. I've tried a few different ways to deploy and I am trying out one more. It may take an hour to do so and if it does not work, I really need to call in some help. I feel it has something to do with my choice of CNI provider. I may have picked an old version... I'll report back and in the meantime, please let me know what you would need to lend a hand.

Mods, please delete if this is not allowed.

https://redd.it/qpsfj1
@r_devops

Best redirect solution without provisioning a software load balancer?

I need redirects (and sub url redirects) to a page, for example:

old.example.com -> new.example.com
old.example.com/test -> new.example.com/docs
another.example.com/testing -> new.example.com/docs

Trying to avoid using something like nginx for management overhead, considering using cloudfront+s3 bucket but this seems overkill and will result in a lot of buckets.

​

Any suggestions are appreciated :)

https://redd.it/qpjxvg
@r_devops

INTERVIEW QUESTIONS - tough questions to ask interviewer

Hey Guys,

I've got an interview tomorrow and I've been encouraged to ask the 'tough' questions to the interviewer. Things that come to mind are:

-What does success look like in this role?

-What are the biggest gaps you guys have today?

-etc.

Does anyone have any other good questions they like to ask during interviews?

Any suggestions and feedback would be greatly appreciated. Thanks!

https://redd.it/qpy6un
@r_devops

Is there still a place for traditional cloud servers in the world of containers?

I’m fairly early into my DevOps career in (3 years). All of the applications I’ve worked on so far have run on containers, whether it’s ECS Fargate, Openshift or K8s. I don’t really see a lot of drawbacks to them, but I’ve also not got much to compare them against. The general trend in the company I work for also seems to be moving towards using containers for our projects. They just seem to be regarded as ‘better’.

Is this fair to say? Or are there still reasons to choose say, EC2 for running apps on over containers?

https://redd.it/qpyqcp
@r_devops

How many hours a day do you actually work?

Yes, it's been asked a million times but here we are. I cannot help but to feel bad sometimes for not being as productive as I'd like, to the point it kinda ruins my life a little.

From my side, I think I actually put 3 hours of work at most a day (in a 9 to 4 schedule). 1 hour spent on meetings, 1.5 hours actually doing work (whether that's writing documentation, proposals, automating something in Ansible, doing research, etc), 0.5 hours responding to emails and shit, and that's pretty much it.

I'd like to consider myself a decent DevOps consultant/engineer but I always feel like everyone is doing more than me.

Anyways, how many hours do you really work? Don't be shy, your manager won't read you :-)

https://redd.it/qq0nf4
@r_devops

Learn Minikube and Kubectl | Getting started with Kubernetes

Hey everyone,

I wanted to share this video I created demonstrating kubectl using minikube on your local laptop or machine. The goal of this video was to be "digestible" for those starting in DevOps, Kubernetes, Linux, etc.

I go into some detail besides some general commands and a deployment. I'll do a "deeper dive" video or blog post at a later time.

Here's the video; let me know what you think!

https://www.youtube.com/watch?v=5fDGNyviXEI

https://redd.it/qq2a6l
@r_devops

Observability and monitoring stack

Hey guys,

We are transitioning to a microservice architecture in my company and I have been testing some stacks out but still because I don’t have experience on it not sure what will work better in a more production environment. We work mainly in Azure, we also have AWS and GCP infra but this project it’s mostly with Azure Cloud.

Some of the technologies I have been gathering info on:

- ELK
- ELG (with Grafana)
- Prometheus (for the infra metrics)
- Log collectors - Fluentd/Fluentbit, Logstash
- Log aggregators - ElasticSearch, Loki

Between Grafana and Kibana, I found the second one slower but maybe it was my testing that it wasn’t great.

Also I’m basically trying to decide with the team if it’s better a cloud hosted solutions or BIY (build it yourself).
Like Grafana Labs or Logz.io, that would reduce the implication and issues with scaling out and maintenance I think in the long run, so I’m also keeping that in mind.

Sorry for the long post, basically I want to read opinions from people that have been working or worked with some of these and why they still do it or if they changed.

Thanks!

https://redd.it/qq5wm8
@r_devops

How can people even use Azure?

After just sitting with Azure for a couple of days I'm immersly frustrated with it.

It gives me a notification that the server has restarted, when it's in fact only restarting.

Most settings are hidden and unituitive.

Things work one time, then don't and then work again.

Manuals seldom work as instructed.

Seriously. When having the option to choose AWS instead at just a little higher price, how can people still buy this shit? It's a joke in comparison. AWS may be a bit complicated but it's always logical and the feedback you get from the system is relevant and updated.

https://redd.it/qq9ayp
@r_devops

Long term strategy for production deployment for a solo dev

I'm currently in a process of planning on going live with some of my projects. Till this moment I would test everything on Amazon Lightsail but for production I want to find something with more value.

I use self hosted Gitlab as my CI/CD pipeline together with Terraform for provisioning VPS's as well Ansible to setup fresh VPS where I finally deploy containers to the docker swarm.

I like Terraform but support for different VPS providers is pretty limited so I will have to consider that.

Is there a better process I should consider? The reason I came up with the above strategy was mainly finances and simplicity, it seem like this is the cheapest way to host and deploy on bare VPS. I'm just not sure if the long term this is the best decision from maintenance perspective when I'll have 5-6 projects running in production.

Plus constant rumors about Docker swarm not being supported for long also made me thinking if I should not look into things like Rancher or Nomad.

I'm in the spot where I could still make some drastic changes as long they're worth it in a long run

My biggest consideration was if I should maybe invest more money into some managed service as my deployment platform like GAE or other that would handled most of the things for me like self scaling, updates etc. to have more time for actual development.

I would appreciate some feedback! Thanks.

https://redd.it/qqbibu
@r_devops

Computer Science to Devops

Current a CS student , planning my path to devops . No prior tech background .

-Would RHCSA be a must? Or basic Linux + suffice?

- Programming language in my school curriculum C++ , Java , python for machine learning ( would that be enough to apply for a devops position when I graduate or I need to attend a bootcamp).Is JavaScript or GO used often ?

- got my AWS SA

-working on Terraform Associate Cert.

-then CKAD .

Anything else I should add or take off this list please?


How much Linux do I actually need? Also already learning how to build a whole pipeline with devops tools on weekends.

https://redd.it/qqc11m
@r_devops

Best free APM for beginners?

Looking to move into the DevOps space, but I'm curious about monitoring. What have been the free tools that you've had experience with (mainly infra monitoring, tracing, and code-level visibility) that you thought were worth learning? Here is my current shortlist I'm considering (open to more and curious of thoughts on open-source vs commercial products):

​

\-OpenTelemetry

\-AppOptics DevEdition

\-Elastic

​

I also want a free option, not just a trial. Thanks!

https://redd.it/qqd6ap
@r_devops

How do you use redis-benchmark util to fill up a redis cluster memory?

So basically I have a redis cluster deployed in AWS (Elasticache cluster mode) and I'm trying to run a util/test to have it's available memory utilization to fill up past a threshold to test my auto scaling. I've heard that the built in redis-benchmark util can be used to achieve this task but I'm struggling to get any success with it. Anyone have experience with this?

Goal: Use either redis-benchmark or similar util to write random keys/values to redis to fill up roughly 6gb of memory storage.

https://redd.it/qqozr0
@r_devops

How to switch to devops?

I am an automation tester of 7 years experience. I want to switch to devops as I am pretty bored with testing and want to learn something new. I am half way through learning all the necessary stuff like docker, kubernetes, Jenkins, git, nagios, linux and scripting with python. Basically doing all the starter devops learnings.

I cannot switch in my company to a junior devops position as I can't be released from my project.

I want to get hands-on experience before I try outside.

Also, if I am to try outside my company, what experience do I put.? Do I join as a fresher?

Please suggest. Thankyou

https://redd.it/qqvkzt
@r_devops