Production level AKS cluster using Terraform

Hello people,

I've been exploring Terraform script to create an AKS Cluster with multiple subnets, Ingress and Egress rules.
And other extra features as what will be required for production usage. And won't seem to find anything great.

Can anyone please help on this.

Thanks.

https://redd.it/s9htbu
@r_devops

Jenkins vs Circle CI vs Atlassian Bamboo vs Others

Hey everyone, thanks for taking some time to read this, as this might be a bit of a long one.

So currently we have one older instance of Jenkins we have running, and myself coming in and introducing a number of DevOps concepts and having some say with web, we got another instance of Jenkins running to start off "clean". I had experience (all be it several years ago) with jenkins, and I was comfortable working with it. Getting use to the new declarative pipelines took a bit, as much needed to be done with script blocks, conditionals and so on.

Well I've been reading up about how Jenkins feels antiquated, and recently had an experience of a few plugin upgrades (much of it the core aspects of Jenkins, with a few additional plugins (like notification to bitbucket for example), where it just totally broke pipelines. Talking with a few others this seems to be a regular occurrence.

For examples in our repos that are git based, they often use sub-modules, well found out during the checkSCM this doesnt pull in submodules, so I wrote a script to ensure that they are initialized during pulls and we check out the right branch in those submodules. Well that totally broke randomly after doing updates, where script blocks no longer worked as expected. It took me about a day and a half to fix things, and even then they are still not quiet working.

So this is all boiling down into....should we keep using Jenkins when we need to be able to reliably update things, and know in doing updates our scripts dont break while giving us the functionality we need?

I've been looking into CircleCI and Bamboo because I know both of those can be deployed locally, which is very important for us. But I was wondering what are others experiences with these, or would you recommend something different? Like things you like or dont like about it, quirks that are just aggravating?

Some things we are looking for (which should be standard):

\- Smooth integration with git
\- Logging and reporting of errors
\- Custom pipelines that allow scripting
\- Some ease of integrating systems together
\- Being able to use 3rd party programs (ansible, terraform, etc)

Would appreciate any opinions or share of your own experiences.

https://redd.it/s9mh05
@r_devops

HIRING Senior DevOps Engineer REMOTE

I’m \#hiring. Know anyone who might be interested?


We are experiencing rapid growth and looking to bolster our talented team by adding skilled engineers.


Apply now and start a journey to your next professional experience.


Apply here: https://www.linkedin.com/jobs/view/2888940357

https://redd.it/s9nx6d
@r_devops

How should I deploy an app that is dependent on third party services like Meilisearch?

Hello, my first post in this subreddit.

I'm more of a developer but this time I need to know the most efficient way to deploy a Laravel app that has docker-compose inside with 2 services defined: meilisearch and redis. If it was only for Laravel app itself, then it would be straightforward: one web service. I'm using Digital Ocean for deployment. More specifically App Platform feature because it is a PaaS. I don't have to focus on server infrastructure so much. You can compare this feature to Heroku.

However, a service like Meilisearch has it's own url and port in development environment like https://localhost:7700. So I guess besides one web service for Laravel app itself, I need to create another one for Meilisearch and connect the app to this? That would be two times more expensive. Is there a better way to handle these things without being more expensive? is it better to use Droplets instead? Then it's more towards IaaS I suppose? Or what kind of deployment is considered as 'industry standard' or in your opinion 'most efficient' when you use docker-compose with third party services that connect with your app in development environment?

https://redd.it/s9ooi8
@r_devops

Production level AKS cluster using Terraform

Hello people,

I've been exploring Terraform script to create an AKS Cluster with multiple subnets, Ingress and Egress rules.
And other extra features as what will be required for production usage. And won't seem to find anything great.

Can anyone please help on this.

Thanks.

https://redd.it/s9htbu
@r_devops

Question for you smart people about Jenkins and Blue Ocean.

I want my users to only use blue ocean because that’s what I’ve been told to do. That said, I want to remove the top right link that puts the gui back to classic view. Is that possible? Anyone ever do that? Thank you in advance.

https://redd.it/s9rs0u
@r_devops

Will I fall behind in my career if a company does not use Kubernetes?

If I join a big data company that primarily uses serverless and various AWS managed services for data engineering like Redshift, Elastic MapReduce, Lambda, etc, will I be less marketable than an engineer who has Kubernetes and container experience?

https://redd.it/s9o199
@r_devops

How do I interview as a DevOps candidate?

I feel pretty confident about my ability to present myself as an employable candidate, but I would ask, what are common questions you have for companies when you interview to size them up?

* Tooling?
* Compensation?
* On call expectations?
* Work/life balance?
* WFH availability?
* Scope of responsibility?
* Competing companies?


What did I miss?

https://redd.it/s9toik
@r_devops

Interviewed at potential dream job

Seriously, wowzers. Job has it all, Culture, pay, time off, retirement... you name it!


They had 280 applicants and the first interview was a culture fit interview and I nailed it.
They said that it could take weeks to finish the process, since they had a large volume of applicants.
I also have a great interview on Monday that they've already explained I will probably get.



Should I wait if offered? how long should I wait? Both jobs seem great, but the one I mentioned above is clearly much better.


I'm nervous.

https://redd.it/s9iw0z
@r_devops

Appreciate some feedback

Would appreciate some feedback on the article I have written folks. Thank you for spending time.

​

https://www.linkedin.com/posts/idushyantmishra\_devtools-gtm-buildfromindia-activity-6890270010779021312-q5yA

https://redd.it/s9fyjj
@r_devops

Secure AND unsupervised Developer Machine

Hi there,

How can we have a unsupervised/ locked macbook for the developers so they can install what they feel like using to be as happy and productive as they want and AT THE SAME TIME make the network, Dev, Stg, and PRD environments as secure as possible?

I work for a financial institution and I am friendly challenging the way they limit what can be done and installed into the laptops. So I am looking for a better way to suggest them.

Any help would be appreciated.

Thanks

https://redd.it/s98v6t
@r_devops

Centralized interface for managing supervisor processes

Hi, i currently manage several bodies that run services through supervisor. To restart processes through supervisorctl I do it through ssh within the instance.

I’m looking for a centralized interface to manage all supervisory processes in different instances.

I’ve tried tools like CeSi but I get a lot of Python errors and so I see the interface is no longer supported.


Any suggestions? Regards

https://redd.it/s99sxc
@r_devops

Guided DevOps meditation

Hope this provides some much needed stress relief

https://youtu.be/epcbx5HkCbM

https://redd.it/s9drtn
@r_devops

Free CMDB tools integrated with Jira

Hello everyone,
I'm looking for free and open source CMDB solutions that we can integrate with jira ?
Insight-asset management, is an atlassian CMDB solution, integrated with jira but just on premium and enterprise version.
If someone has an idea about those free solutions and how to integrate them with jira on both ways, please write me here.
Thank you.

https://redd.it/s8ubiq
@r_devops

Dumb question

I want to create a group on roblox called "DevOps" would we get in trouble for using it?

https://redd.it/s711pb
@r_devops

Thoughts on using git-crypt

Hi all,

I am wondering about git-cypt. It seems to be a nice way to be able to maintain secrets in the repo and have them accessible and shared in a team.

An obvious downside is that it is a bit hard to manage who has access, so if the project grows and you have multiple teams, and need a more centralized way of managing these that would be difficult.

Are there any others points I am missing besides scalability? Does anyone have experience with it ?

https://redd.it/sa2qbo
@r_devops

Shifting to DevOps from IT - Need your Help and Feedback

Hey everyone. I have been considering to make a shift from IT ( System Admin & Helpdesk) to DevOps.

This post is going to be a long one, sorry in advance. But I really need some feedback from people who have already went through a similar transition.

​

TL-DR: If you feel its too much, you can just read Background Info and Questions directly.

​

Background Info:

30 years old
CCNA Certificate ( the most recent one.)
Intermediate Python knowledge ( soon to be advanced.)
System Admin & Network & Helpdesk background ( 8 years)
Bachelors degree in Management Information Systems.

​

How I came to conclusion that DevOps is the career for me :

I was considering to go into Networking , so I attained a CCNA certificate 6 months ago. During CCNA, I kind of liked automation part and I saw that networking was headed more towards automation and the good old days of CLI was coming to an end. So after CCNA I started to learn Python so I can be well equipped for it.

I have been taking Angela Yu's Udemy course on Python, 100 Days Of Python. I'm at day 40 at the moment and I'm confused, because I actually fell in love with Python. And I realized I like automating things more than the Networking itself, so I started to look in to what I can do with Network & System Admin background and Python on top of that, and I came across DevOps. After researching about it I'm convinced that it is the career path for me.

​

My Plan :

I'm planning to do my Master's degree in Fall 2022 in US. (I'm not a US Citizen). Depending on the admit decisions It may be a Computer Science / Management Information Systems / Computer Networks degree.

I have about 5 good months to study and learn necessary skills, but I'm planning to finish the Python training,( 60 days left.) so that leaves me with 3 months before I have to go for my degree. After my research on DevOps, I think in that 3 months the most helpful thing would be to get an AWS certification. After AWS, I'm planning to learn about Linux before I finish my degree, and if my schedule allows during the master's, I may get some knowledge on Kubernetes, Terraform, all that other stuff. I'm also OK with working a non- DevOps job after graduation if I don't have the necessary skills by the time I have completed the degree. In the meantime I can work on those necessary skills and job hunt.

​

My questions:

Which of the listed master's degrees above would best fit someone in DevOps ?
What AWS certificate would you suggest to start with for someone with my background ?
From a job finding perspective, in which order should I learn the necessary skills ?
What do you think of this plan ? Any improvements, suggestions, do's or don'ts ?
What are the possibility of getting a sponsorship in the DevOps field compared to any other areas?

Your feedback means a lot to me, so in advance, thank you everyone.

https://redd.it/sa5d6s
@r_devops

Some career advice needed;

Hi! I've been unemployed for a while instantly and I'm looking to get back into the working space. I have chosen a government funded .NET coding bootcamp that I am planning on following. Now, as I might have expected the government services are not really premium quality service and it's taking forever to hear from these people. I am therefor planning on maybe pursuing a career as a devops engineer. I have had multiple job offerings for devops engineer positions because of my Linux experience and my home python coding projects, but I am hesitant to go into devops. I am well aware that Devops people have to code as well, but I am only seeing things like ansible and terraform scripts as "coding", with some bash en python on the side. What I was‍ looking for in coding is more like back-end coding (writing program logic, managing databases,..) and maybe some scripting as wel (terraform, ansible). I wonder if going into devops will give me a lot of opportunities to do the back-end stuff as well, instead of only scripts with IaC tools and automation. I don't know if I'm making sense or if people will understand what I mean, English is my second language and I'm often not very good at explaining myself. XD But I thought I would give it a shot on this SR anyway. Thanks!

https://redd.it/sa0xww
@r_devops

25 Kubernetes questions that will help you get certified

If you are learning K8s or preparing to get certified, here are some questions that can help you to explore topics worth knowing.

What are the things that made you more efficient with K8s?

https://www.bettercoder.io/blog/141/25-kubernetes-questions-that-will-help-you-get-certified-and-become-more-efficient-with-k8s

https://redd.it/sab608
@r_devops

State of the DORA DevOps Metrics in 2022

State of the DORA DevOps Metrics in 2022 is an article I wrote which takes a critical look at the 'DORA Metrics' popularised by Accelerate in 2018. It's based on my experience of applying these in a large tech company, and seeing how teams actually use them.

Accelerate, The DevOps Handbook, and others describe a golden model for organisations to work towards. I'm interested in seeing what parts of this model get adopted by orgs and what parts sound good but are less practical. Share your experience below. I'd love to engage and talk about it.

> Accelerate: The Science of DevOps - Building and Scaling High Performing Technology Organizations (2018) had a huge impact in the technology industry. The book describes models of DevOps capabilities and culture, and how organisations can drive improvement in software delivery and reliability. What most people remember from the book, and the largest impact it’s had on the industry, are what are colloquially referred to as the DORA metrics. Four key indicators which strongly correlate with high performing organisations ...

> Three and a half years on are those metrics still relevant? To this day new content marketing is posted repeating the verbatim claims of the book with no critical analysis. I work as a Lead Engineer on the Engineering Insights Platform at a large technology organisation. Over the last three years the org has embraced Accelerate and delivery metrics of all sorts have been recorded. In this post I share my experience and thoughts from seeing these delivery metrics applied in practice.

Continue reading at State of the DORA DevOps Metrics in 2022

https://redd.it/saaegf
@r_devops

Ansible is not very consistent

Hello, I am relatively new to Ansible and it's great when it works but a lot of the times for longer playbooks on a lot of hosts (~300) it doesn't work too well. 300 isn't even that many hosts honestly.

I am not doing anything special in the playbook and it is very inconsistent between invocations. Sometimes it works fine, and other times it randomly is not able to reach the client in the middle of the playbook and I get these messages

fatal: 10.2.216.198: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.198 port 22", "unreachable": true}
fatal: 10.2.216.195: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.195 port 22", "unreachable": true}
fatal: 10.2.216.152: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.152 port 22", "unreachable": true}
fatal: 10.2.216.104: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.104 port 22", "unreachable": true}
fatal: 10.2.216.204: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.204 port 22", "unreachable": true}
fatal: 10.2.216.164: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.164 port 22", "unreachable": true}
fatal: 10.2.216.139: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.139 port 22", "unreachable": true}
fatal: 10.2.216.169: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.169 port 22", "unreachable": true}
fatal: 10.2.216.187: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.187 port 22", "unreachable": true}
fatal: 10.2.216.160: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.160 port 22", "unreachable": true}
fatal: 10.2.216.90: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.90 port 22", "unreachable": true}
fatal: 10.2.216.202: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.202 port 22", "unreachable": true}
fatal: 10.2.216.150: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.150 port 22", "unreachable": true}
fatal: 10.2.216.96: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.96 port 22", "unreachable": true}
fatal: 10.2.216.122: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.122 port 22", "unreachable": true}
fatal: 10.2.216.176: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.176 port 22", "unreachable": true}
fatal: 10.2.216.91: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.91 port 22", "unreachable": true}
fatal: 10.2.216.93: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.93 port 22", "unreachable": true}
fatal: 10.2.216.206: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.206 port 22", "unreachable": true}
fatal: 10.2.216.143: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.143 port 22", "unreachable": true}
fatal: 10.2.216.107: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: Connection closed by 10.2.216.107 port