At what point do you bring up "comp" when talking to recruiters / hiring managers?

​

I've been trying to be really candid and send all recruiters a google document about myself that also happens to mention my current comp and comp expectations before we even have a phone conversation, and this has helped me avoid awkward phone calls and time wasting.

​

But I've had a few instances where the recruiter doesn't have solid details on comp bands or says its flexible or "conversational" once you go through the interview process etc.

​

I was asked to do a virtual onsite for a company I'm really interested in, but we hadn't really had the comp conversation. I obviously don't want to spend 5 hours interviewing for a job that doesn't pay enough, so I emailed and asked to clarify before we set up the full interview. The recruiter responded saying in somewhat abstract terms that we are in the right range, but I felt tacky even asking like that.

What's the right approach?

https://redd.it/rdlj0f
@r_devops

Capacity of blue/green environments

For folks using blue/green deployment for the production environments: Do each of these environments have enough capacity to independently support all your users?

https://redd.it/rdmjx3
@r_devops

Best Build and Deploy Tools for Enterprise ios and android mobile apps?

Apologies in advance for this newbie-ish question. As a project manager, I have been tasked with getting my team to build and deploy mobile apps (ios and android versions of the app). What is the best enterprise tool out there for this? We use BitBucket instead of Github. Something that is all inclusive and really makes it simple, with workflows, and even hooks into the app stores. Thx in advance and apologies again for this newbie-ish question.

https://redd.it/rdm6hl
@r_devops

Viewing the Test or Fact creator on a build pipeline

Hi

Is there a way to view the first creator of a test or fact on an azure build pipeline, when using the test report tab?

Example.

A person creates a unit test using an IDE like Visual Studio 2019. The name is displayed above the test, but gets updated to a different person when the test or solution is updated.

The tests get merged into master and the build tests run and pass. On the test tab of the build execution, all the executed tests are filtered and displayed for further analysis.

Is there a way to include the test creator, and not the editors since it’s creation on Azure repo or build test?

Thanks.

https://redd.it/rdlgt3
@r_devops

How to run dependabot locally on your projects

Hey r/devops \- I thought I'd share an article I just finished this morning.

https://mikebifulco.com/posts/run-dependabot-locally

This is a follow-up to a primer on Dependabot which I wrote in 2019 - for whatever reason, that article still gets loads of traffic from people setting up Dependabot on their projects. I've also gotten quite a few DMs on twitter and reddit from folks asking how and if they can run dependabot locally. I finally got off my butt to write a quick article to share with dev teams interested in self-hosted-dependabot configurations. If this sounds interesting to you, give it a look!

https://redd.it/rdg0ds
@r_devops

Best learning path for SRE/DevOps?

For someone who has been in the software testing space for over a decade and wanting to move into the SRE/DevOps space… what would be the recommended order to learn the following subjects:

- Google cloud
- Kubernetes
- Terraform
- Docker

https://redd.it/rdrc92
@r_devops

Help: First time deploying

I've just finished a Django web app and I'm trying to deploy it to AWS.

Here's what I've done so far:

1. Dockerized using docker-compose to create 4 services: app, database, celery and redis.
2. Pushed app to amazon ECR using docker push

What I'm trying to do:

1. Get all the services working using AWS Lambdas (ideally using zappa)

I've looked all over but can't seem to find a way to get this working, can anyone help?

https://redd.it/rdakp7
@r_devops

Who else is still up right now working on log4j - CVE-2021-44228

It's the all nighter life for me.

https://redd.it/rdvhs0
@r_devops

Env vars and Docker differences between dev, staging, and prod

Hi r/devops,

Although my specific example involves Django, Docker, and Heroku, I believe these are pretty general testing/QA questions.

I have a dockerized Django app tested in dev with Selenium confirming that my static files are being served correctly from my local folder (EXPECTED_ROOT = '/staticfiles/'). This app is deployed to Heroku and I can see (visually and in the dev tools) that the static files are being pulled in from CloudFront correctly as well. I want to formalize this with the same test I'm using in dev. My first question is related to if/how environment variables are used for tests:

Do I add for example `EXPECTED_ROOT = 'https://<somehash>.cloudfront.net/'` as an env var to Heroku and use it in the Selenium test?

Also, to run this test in staging I would need to install Firefox in my Docker image like I do in dev. Perhaps this is ok in staging, but in prod I believe I should be aiming for the the smallest image possible. So the question is about differences between staging and prod:

Do I keep Firefox in my staging image, run the tests, and then send to production a replica of that Dockerfile, but now without firefox?

Any help is appreciated.

https://redd.it/rdzu7k
@r_devops

Trying to decide between KodeKloud to Cloud Guru.

I have 15 years of IT experience is software dev cycle and QA but I decided to change path and go devops.

Out of the two I mentioned above, who can please recommend from experience which one is better?

I'm looking for courses with hands-on lab and good up to date content.

https://redd.it/re6p2b
@r_devops

Scan your jars - log4j is everywhere

Trust me, you have more copies of it than you realize. You will find bundled into other jars. You will find it in that application you didn’t even realize includes its own jre.

And because of the nature of this vulnerability, many of them can actually be exploitable.

So scan all jars for JndiLookup.class. And when you find it, just remove it with zip -d or the jar utility.

In many cases upgrading is not a realistic mitigation strategy. Remove this class from jars.

If you want a suspenders-and-belt approach, also add LOG4JFORMATMSGNOLOOKUPS=1 to the environment. Put it in /etc/environment and also add DefaultEnv=LOG4JFORMATMSGNOLOOKUPS=1 to /etc/systemd/system.conf.d/log4j.conf

https://redd.it/re7nc2
@r_devops

Automated Deployments using GitHub Actions, AWS ECR, and Webhooks

I'm trying to spread a little bit of love in the form of knowledge. I thought this could be interesting to you folks. I wrote it a couple of months ago but I recently published it.

https://www.overflowedminds.net/writings/continuous-deployment-with-github-actions-and-webhook

https://redd.it/rdzij3
@r_devops

Survey about configuration management.

Hello guys, right now I'm studying for my bachelors degree in IT and my current assignment is about configuration tools. I am doing a survey about the popularity of configuration tools that are on the market right now. So I was wondering which tools you guys use primarily at your current jobs/companies. I already did some research as to which tools are popular which will be listed in this poll. If you use any other tools it would be appreciated if you mentioned them in the comments! Also whether the open-source or enterprise version is used isn't relevant for my research at the moment. If you could take a moment to fill in the poll it would be greatly appreciated :)

View Poll

https://redd.it/rdy3l5
@r_devops

Short Q & A

Hi,

I'm looking to get into devops by following the roadmap on well...roadmap.sh (Do you guys have any other suggestions? I was a Business Analyst for 2 years and now I just started as a System Integration Analyst so I don't really have any devops guy to ask for guidance for now)

One of the questions that I'm fighting with is what hardware/software combination do I need? Should I go for a Macbook or should I just get a ThinkPad and drop Linux (LTS?) on it?

If you learn GCP, can you transition afterwards to AWS for example or are they just super different niche options?

Should I go for Python? GO? Is there another good option and how long of a beard (read this as experienced with the language) do I need to grow in order to land a junior position?

Are there any specific certifications I should look into that you also help me learn?

https://redd.it/ream4h
@r_devops

Recommendations for sast, sca, static analysis services (SAAS only)

I've been fiddling with Snyk for a bit and it is clunky as all get out. Also, there's a big price jump if you want to user the SAST product.

I do not want to manage/host my own tool, I would prefer to use a SaaS product. Any and all recommendations are appreciated.

https://redd.it/redyp0
@r_devops

Azure 900

Any advice for azure 900 i have tbh 0 knowledge about clouds and my paper is on 26 dec still aroumd 14 days left for azure 900 certification im new to this. Any advice will be really helpful

https://redd.it/refm5a
@r_devops

OneDev 6.0 - self-hosted git service with CI/CD and issue board

OneDev is an open source self-hosted git service with built-in CI/CD and issue board.

The 6.0 release comes with some major improvements:

### Hierarchically organized projects

Projects can now be organized hierarchically to facilitate permission and setting inheritance, as well as cross-project issue list and board

### Issue burndown chart

For milestones with start date and due date specified, OneDev will display burndown chart for associated issues

### In-place edit of issue states and fields

Issue states and fields can now be edited in place in issue list and board, which makes issue editing much more convenient

### Issue link

Issue link to set up relationships between issues, such as parent-child, blocking/blocked by etc. Issue state transition can also leverage the link information to make the workflow smoother, for instance, to auto-close an issue if all its sub tasks are finished, or prevent an issue from being closed if any issue blocking it is still open. For details, please check this tutorial

### Helm chart to deploy into Kubernetes cluster

Helm chart now available in case you want to deploy OneDev into Kubernetes cluster

### Ingress and LetsEncrypt integration

When deployed into Kubernetes cluster, now it is trivial to set up ingress rules to expose OneDev web service, protected with LetsEncrypt certificate. For details, please check this tutorial

For details, please check https://github.com/theonedev/onedev/wiki/6.0

https://redd.it/renwzk
@r_devops

GCP execute api call based on alert

Hi, I want to configure some automation when memory usage on my GCE instance is above some threshold, basically I want the alert to trigger some Cloud Function to call an API or maybe there's a better way to do it....please share if you have previous experience.


Thanks!

https://redd.it/reoxt4
@r_devops

Why Linux is needed for DevOps in 2021?

This question come of course from a total noob. Please, do not be harsh on me. I just could not find detailed answer and some people that I know, don't use linux at all and while they are not 100% time DevOps, they never needed a linux on their PC. Maybe this is true only if you are doing only some basic stuff and you are not full DevOps guy?


As far as I know, most stuff just works on Windows right now (docker, kubernetes, ansible etc). Do they works much better on Linux tho? Is there anything that just does not work on Windows and just require Linux?


I know that most of the cloud run on Linux but if you are working with AWS or Azure, you still work with everything by using either AWS or Azure portal or this looks different and for example you need to use console a lot and thus ssh to the server etc?

https://redd.it/repdyd
@r_devops

Networking Training

Where can i find online instructor led training for networking protocols like bgp,dhcp, tcp/ip and major networking protocols. I can find books and courses but i learn better with an instructor. Thanks.

https://redd.it/rersgp
@r_devops

Log4J file extensions

Does anyone know if the vulnerability is affecting all file extensions or only .jar?

Thanks in advance!

https://redd.it/rezy81
@r_devops