What pay should I expect

Hey guys and gals,

A position recently opened up for my company in the DevOps position, and I am lucky enough to be getting considered for the role. I am currently a systems engineer, but comfortable with code and scripting. I have worked as part of the deployment team for the last 2 years, but would now be moving to the DevOps engineer role. My question is what kind of salary I should expect. I work in the Northeastern US, and I expect to be payed slightly less than average as my background is mostly with Infrastructure and not software development, but I don't want to accept a salary that's too low. I love my company, and my current job so I would hate to accept something too low and end up having to move to another company to get a proper salary.

​

Thanks in advance for your advice.

https://redd.it/rhqo1t
@r_devops

Resources/courses to learn more about security in GCP

Hi! We use GCP (currently migrating from App Engine to GKE, Cloud SQL, Memory Store, and various other services) and just did a workshop with a security consultant which resulted in several recommendations including using custom service accounts for compute instances, custom managed encryption keys, custom VPC and other things instead of GCP defaults. Well there's more.

Anyway I was wondering whether you could recommend some course or something to learn more about setting up these things? Thanks!

https://redd.it/rhu6jd
@r_devops

Managing SSH sessions on Ubuntu

I have a lot of different servers that I have to SSH into, as I'm sure a lot of you do, and while I can usually remember the username+domain name, I often have to look up the IP address of servers that I need to access.

I am currently using the standard openSSH client via the terminal on Ubuntu, but I feel like there must be a better way to manage all of these servers. I know there are some tools out there, but I was wondering what you all use.

Thanks!

https://redd.it/rht6os
@r_devops

How to mask ip with Amazon CloudFront?

I want to mask IPs of my dns records on Amazon CloudFront as we do with CloudFlare orange cloud to proxify (don't know the exact term) our addresses to routing traffic through Cloudflare’s network. How to do that? If CloudFront is not right option, how to do that within AWS? I have some credit left so I am using it practice multiple options.

https://redd.it/rhmuxt
@r_devops

Is everyone deploying via kubernetes and containers?

Reading this subreddit gives me the impression that everyone uses kubernetes or similar solutions. I've setup some lab environments with kubernetes multiple times and I like it, but for many use cases it seems a bit overkill. For example smaller hosting setups like a CMS or a small shop. But maybe I'm wrong with that thought.

At my workplace we run multiple hundred rails applications and elixir applications and all developers deploy via capistrano (or similar tooling) to puppet managed servers. Most parts are automated via puppet (monitoring, storage, databases) and can be scaled by just firing up more VMs and I thought this setup is quite capable. But reading this subreddit gives me the impression that it's a shitty setup and everything needs to move into containers. Should I question the whole hosting setup or is it just a matter of scale?

https://redd.it/rhuum9
@r_devops

List of DevOps skills/tech by job popularity

Hey y’all, I’m working on upskilling right now, hoping to make the move from cloud ops to DevOps in 2022. Does anyone know of a list of DevOps skills and technologies, sortable by its popularity in job listing or job use right now?

Just looking to learn some of the more popular skills this next year.
Thanks!

https://redd.it/rhyblk
@r_devops

Anyone build diagrams with Gliffy?

I've found it pretty useful and simplistic- which I think is nice. Curious if I should continue or use a different tool. Thoughts?

https://redd.it/ri0hj9
@r_devops

What are the top 3 problems you face technically when working as a DevOps engineer? 🤔

List some problems that you run into or things that can be done better to make your job easier.

https://redd.it/ri13en
@r_devops

Looking for cloud-native solution to provide multiple sandbox environments to developers

Hey there,

My boss asked me to provide a better solution for creating environments for devs, something that can replace your groovy scripts and Jenkins. We use it with aws cli to create environments and deploy the app. I've been thinking about this for a few hours now. I don't see anything to help me with this except scripts in lambda and Cloudformation templates. It cannot be terraform (because we have almost 100 or more envs, some created to be destroyed immediately after that). Do you know how I could improve this process? Is there a tool that would allow me to manage it better?

https://redd.it/ri2qd6
@r_devops

Deploying and managing software running in containers at the edge of the network comes with a set of unique problems. If you're interested in solving them, read on.

The prevalence of smart devices at the Edge is projected to quadruple by 2025. Deploying and managing software running in containers at the edge of the network comes with a set of unique problems. Catch this live webinar to learn how Portainer has solved them.
https://www.portainer.io/discover-how-to-manage-the-software-running-on-my-edge-devices

https://redd.it/ri28qg
@r_devops

docker: not found in Jenkins pipeline

Hi /r/devops

I'm doing end-to-end CI/CD pipeline practice but I am running into some issues while trying to build docker images in Jenkins.

1. I set up a docker container with jenkins/jenkins
2. Set up and install plugins in the Jenkins instance, including Docker and Docker Pipeline
3. Set up Jenkinsfile copy and pasted from the Jenkins docs :
https://www.jenkins.io/doc/book/pipeline/docker/
4. It gives me docker: not found

I've been stuck on this issue for a good 2 days, I am not sure why I cannot get docker to install automatically from the plugin selection list. I think going into the container to install docker with curl is kind of counter intuitive in the CI/CD / automating resource provisioning sense.

Does anyone know what I can do to get past this road block?

Thanks a bunch

https://redd.it/ri1utn
@r_devops

A Programming Language Preference Survey

Hello everyone. I am part of a dev project that would like some input on programming language popularity. Below you will find a link to a 12 question survey. Any and all input would be greatly appreciated. The survey is annonymous and the results will only be shared amongst our small dev team and no where else. We hope your input will help us build and deliver software tailored to the most popular programming languages so that collective development efforts can be made to make computing better for all of us now and into the future. Your input is very valuable to us and much appreciated. Thank you and keep on developing the future.

Survey Link - https://forms.gle/6wHCVFju526umv1t5

https://redd.it/ri6luq
@r_devops

Nested map in Terraform for azurermstoragedatalakegen2filesystem and looping?

Hello,

I can make multiple containers, and I can assign the same ACLs to those containers.

I can't seem to wrap my head around creating a container and assigning specific ACE/ACLs to the specific container... if that makes sense? I am using the provider below.

[azurerm\storage_data_lake_gen2_filesystem | Resources | hashicorp/azurerm | Terraform Registry](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storagedatalakegen2filesystem)

If you look at the second section below, I have datalakes and ace in locals. Basically, I create two folders, and then assign ace permissions to both. But how can I construct something like this?

I have a block where I have two folders, and each folder gets specific ACE configs....

\---------------------------------------------------

datalakes = {
001 = {
name = "test1"
ace = {
"perm1" = {
scope       = "default"
type        = "user"
id          = "373d54d3-9011-490e-91be-2a70fddd9617"
permissions = "rwx"
        },
"perm2" = {
scope       = "default"
type        = "user"
id          = "3a0d091a-250c-43bf-a286-b704fa443c2d"
permissions = "rwx"
        }
    }
  }
002 = {
name = "test2"
ace = {
"perm3" = {
scope       = "default"
type        = "user"
id          = "yyyy-----"
permissions = "rwx"
        },
"perm4" = {
scope       = "default"
type        = "user"
id          = "xxxx-...."
permissions = "rwx"
        }
    }
  }
}

\------------------------------------------------------------------------

terraform {
required_providers {
azurerm = {
source  = "hashicorp/azurerm"
version = "=2.88.0"
    }
  }
}
# Configure the Microsoft Azure Provider
provider "azurerm" {
# The "feature" block is required for AzureRM provider 2.x.
# If you're using version 1.x, the "features" block is not allowed.
features {}
}
locals {
resource_group_name = "RG-SA2"
resource_location = "Central US"
# Blob Storage
storage_account_name = "sa123xyzjjjkkkk"
account_tier = "Standard"
account_replication_type = "LRS"
account_kind = "StorageV2"
is_hns_enabled = "true"
#Datalake
datalake = "datalaketest"
datalakes = {
001 = {
name = "test1"
  }
002 = {
name = "test2"
  }
}
ace = {
"perm1" = {
scope       = "default"
type        = "user"
id          = "373d54d3-9011-490e-91be-2a70fddd9617"
permissions = "rwx"
        },
"perm2" = {
scope       = "default"
type        = "user"
id          = "3a0d091a-250c-43bf-a286-b704fa443c2d"
permissions = "rwx"
        }
      }
}
module "resource_group" {
source = "../../../modules/resource-group"
name = local.resource_group_name
location = local.resource_location
}
module "storage_account" {
source = "../../../modules/storage-account"
name = local.storage_account_name
resource_group_name = module.resource_group.name
location = module.resource_group.location
account_tier = local.account_tier
account_replication_type = local.account_replication_type
account_kind = local.account_kind
is_hns_enabled = true
}
module "storage_account_datalake" {
for_each = local.datalakes
source = "../../../modules/storage-account-datalake"
name = each.value.name
storage_account_id = module.storage_account.id
ace = local.ace
}

https://redd.it/ri75a0
@r_devops

How To Scale Your Web Applications With Heroku - Guide

This article will show you how to scale your web apps with Heroku: How To Scale Your Web Applications With Heroku

The two ways to scale with Heroku manually is compared. You can either use the Heroku Dashboard or Heroku Command Line Interface (CLI) to allocate additional resources to your app.

Generally, you’ll need to scale the app’s resources before hitting the maximum limit. With that said, it is helpful to learn the exact condition before you need to start scaling.

The article also shows how you have access to auto-scaling capability when you are using the performance tiers of Heroku or have dynos running on private spaces. If you run apps on tiers that doesn’t support autoscaling, you can turn to the Heroku marketplace for alternatives implemented via add-ons.

https://redd.it/rhzy9u
@r_devops

AWS DEPLOYMENT GROUP DOUBT

while creating DEPLOYMENT GROUP in aws I encountered this option..what should i put here

Enter a service role with CodeDeploy permissions that grants AWS CodeDeploy access to your target instances.

(enter a service role ARN)

https://redd.it/rhy1d9
@r_devops

How to Deploy Full Stack Application (PERN) on AWS ( Im a noob)

Hello All,

I have a PERN stack application ( Postgres, express, node, react) that I would like to deploy on AWS. However, I have never used AWS before.

Should I do this with nginx or containerizing everything with ECS? is nginx "outdated"?

Can anyone recommend any courses on youtube or udemy on how to do this? I would also like to learn more about cloud architecture What materials do you guys suggest? Is this the right sub to ask?

thanks in advance.

https://redd.it/rhn3t7
@r_devops

Staying up-to-date: articles and resources...

What DevOps-related podcasts/audiobooks/product webinar content/etc. have you been listening to lately?

https://redd.it/rhd6od
@r_devops

In retrospect what you've spent most of your time in the past 30 days (except meetings)?

I'll be upfront, I'm a startup guy, trying to figure out what to work on in the DevOps space. My personal experience is quite narrow since I worked mostly at startups where I had privilege to work on the most advanced state-of-the-art technologies.


So my question is quite simple. If you look at how did you spent most of your time in the past 30 days and you wish you wouldn't?

https://redd.it/rh63vr
@r_devops

What are your thoughts about IAST/RASP, does it work as it claims?

I am currently working on a POC with Hdiv for security embedded on applications, have you worked with Hdiv or any other related for this matter, specially IAST?, Is it worth it or SAST/DAST can perform just as good?.....any experience or opinions will be greatly appreciated...

https://redd.it/rg8owq
@r_devops

How to monitor Crowdstrike falcon-sensor kernel threads/processes and resources on linux platform?

Hi all,

Is there a good way to monitor falcon-sensor kernel threads/processes and their resource usage? We had issues with it fighting with redis and some other databases and we would like to setup some monitoring on those resources, in particular when it takes a lot of system cpu time and slab.

I was thinking about going systemtap route and combine it with prometheus so I am currently investigating such options, however if someone has already done something in that area I would be quite interested to see possible options.

I have tried asking in Crowdstrike reddit but apparently my account doesn't have enough age and/or carma so my post was removed.

https://redd.it/rg6sxl
@r_devops

Help me save childhood photos

Hey I have flash drive from ~10 years ago and I plugged it into a PC and noticed that many of the pics (.jpg and .png) and vids (.mov) are unable to open (not sure if corrupted is the correct term). One .mobile specifically opened and I watched the video and then I unplugged the flash drive and plugged it back in a few minutes later and that file no longer opens.

I would like to save all the pics and vids but am having trouble figuring out how.

If anyone here can help me save these I'll pay $$$ for your time/help and be forever grateful bc some of these pics and vids have extreme sentimental value

https://redd.it/rgjbih
@r_devops