Free book: Kubernetes Up and Running, Second Edition

Microsoft is giving away this book if you are interested: https://azure.microsoft.com/en-us/resources/kubernetes-up-and-running/

https://redd.it/docxy7
@r_devops

TLS in Kubernetes

Pardon me for the noob question.

I have a spring boot web app that I want to deploy to a kubernetes cluster - for example in IBM Cloud. A requirement for this web app is that it should be exposed via https.

I have read from online articles that I could use Let's Encrypt to generate a certificate for my domain, but the problem is I don't have a domain, what I have is the IP address and port of the kubernetes node where my web app is deployed to.

What do I need to do in order to enable https on my web app?

TIA!

https://redd.it/dofnx1
@r_devops

Getting kubernetes logs to ELK stack?

Greetings,

​

In my organization, all our VMs syslog, nginx etc get sent to a logstash instance in the same VPC, then forwarded to a central logstash cluster which inserts them in elasticsearch/kibana. Unfortunately I am not the one who set this all up, so I am doing some archaeology here.

​

I have now provisioned a few k8s clusters in **GKE** which by default sends container/ingres etc logs to **StackDriver.**

​

I am trying to find the best solution for getting these logs to our central logstash /ELK systems.

​

​

I found this: [https://github.com/GoogleCloudPlatform/pubsubbeat](https://github.com/GoogleCloudPlatform/pubsubbeat) .

I also found this:

[https://kubernetes.io/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana/](https://kubernetes.io/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana/)

​

​

I'm not married to using StackDriver if I can get the logs in a more direct way. I'm wondering if anyone else is putting their kubernetes application etc logs into ELK, and how you are doing it. Bonus points if its also on GKE.

​

Thanks folks

https://redd.it/dok2oy
@r_devops

GoLang App from AWS to Azure

Hello there DevOps nation.


So I work at small start up and we're trying to set up DevOps environment. I'm the person who's in charge of this as we don't have many personnel. Somehow I found it extremely hard to set up CodePipeline & Elastic BeanStalk on AWS than Azure. So I was wondering.. Did azure really caught up to AWS and might be better in some cases now?


How does Azure compares to AWS?


I feel like Azure is much easier to use and has more to offer as they offer team management tool (VSTS, Git, Kanban Board and more) but idk. I'm just getting stepping into this DevOps world.


Please let me know which one is better Cloud Service. I need to set up our CodePipeline and Load Balanced Instances.

https://redd.it/dokx22
@r_devops

What does the JEDI contract mean in terms of the playing field between AWS & Azure?

AWS is clearly still the leader but where does everyone see Azure within 3-6 years, and should one focus on becoming versed with Azure?

https://redd.it/dokfd3
@r_devops

DevOps decisions being made without DevOps input, and other growing pains

Throwaway, in case someone from work comes across this.

I started as a DevOps engineer about a year ago at a fairly small company (~10-15 people) and we've now grown to almost double during that time. During the first several months of my employment here, DevOps just meant make cloud infrastructures and do IT. Finally I was able to expand DevOps into actual DevOps, such as CI, CD, automated testing, etc etc, and eventually the company hired another DevOps person to work with me.

During this time we've grown so much that we're having some massive communication and project management pain, and the company is scrambling to find a way to mitigate this. We've started using Jira and Freshdesk.

With the recent rise in CircleCI outages affecting us for hours, apparently the management has made the decision that we should start using Azure DevOps without talking to the DevOps team whatsoever. Both of us think this is the absolute wrong direction to go in.

We're not a Microsoft shop, and 90% of our infrastructures are in AWS. We use Node, Golang, Ruby, Python, .NET, and more that I'm not recalling right now.

It seems like DevOps here is just a title with no meaning. When it comes to standards and practices, every dev will use their own ideals, including deciding to turn of testing and other bad ideas, and I have no way to get them to follow these ideas or convince them, and DevOps is the last step in the software development process, only being included when it's time to deploy.

Am I wrong in feeling pissed of about this, and does anyone have any advice for this situation?

https://redd.it/dofckl
@r_devops

Auto Discovery

Hi all,

do you know any open source tool / scripts in order to discover all traffic in an unknown infrastracture?
I want to create a map with application and hosts interactions.

Thanks

https://redd.it/doo3s9
@r_devops

Tutorial: Run macOS Mojave using Vagrant

I wrote a tutorial on how to launch macOS Mojave (and soon Catalina) VMs using Vagrant. I've mostly used it for development and testing of Ansible playbooks targeted at configuring headless builders for iOS and macOS apps (I'll write a tutorial on that as well).

Hopefully someone will find it useful. Please let me know if I can improve the tutorial or the site. All feedback is much appreciated! :)

https://lunar.computer/posts/vagrant-macos-mojave/

https://redd.it/doonf6
@r_devops

Kubernetes Newsletter

Can someone help me find the best kubernetes newsletter that can help me tracking the latest updates in kubernetes?

https://redd.it/doq40b
@r_devops

How to establish a DevOps culture?

First post to reddit; this seems like a reasonable group.

I work for a smallish (\~100 staff) company in a 'devops team' but for me the term has always been more about building a collaborative work environment using development principles to deliver infrastructure or other systems; tooling helps but changing how the organization operates is what it's really about. We're not at the sharp end of automation practices, but our products need to be easier to deploy.

What are the best ways of accepting contributions (features and fixes) from operations and support teams to an in-house 'automation' tool that will be never be bought or used by customers?

* Is it really the case that PCI-DSS forbids direct contributions to an in-house tool codebase even though it has been written in the development?
* Is it fanciful to try and break the silo and remove the notion of development ownership of tool written for ops people? They hitherto have not much input into its design and development.
* What are the best strategies for ensuring that narrow targeted (possibly customer-specific) features and fixes can be worked into the ongoing development and release cycles?
* Is forking the master copy to a different repo (or even git server) and accepting pull requests viable?

https://redd.it/dovtuj
@r_devops

Best way to manage logs for multiple projects?

Hi all,

I work on multiple projects for different clients. Now, in the applications i should have a logger which can log important stuffs which can help us debug if something bad happens.
For most projects, i choose the Microstructure archutecture.
Now, i'm thinking about the best way to log which does not increase the project running cost by a large extent.

I think logging for every project at one place would be a bad idea? As every client would want to have their logs separate in their control.

What do you guys suggest? What should i use for the logging part?
What do you guys use?

Thanks!

https://redd.it/doryeo
@r_devops

DevOps - What is needed to work as a DevOp

Hi

I am currently an IT helpdesk agent and want to become a DevOp.

Is it worth the jump to become a DevOp ?

Do you need to be a SysAdmin first ?
Do I need to be a programer first ?
Do I just need to take a DevOps course and certification and ready to go ?

If I understand correctly, DevOps is a team comprised of both developers and operations ?

https://redd.it/dorfxu
@r_devops

I'm planning to use aws elasticserach service. I'm mainly using elastic for product listing and search. I don't how to start I created a cluster and mapped a domain for elasticservice in aws. How to create index on that with the existing postgres database with jewellery product details ?

Suggest your approach and thoughts on this scenario .


Thanks

https://redd.it/dou3tv
@r_devops

Why do YOU like DevOps?

Hi, and TIA!

I am a senior in college rn, and graduating pretty soon. I am interested in DevOps (with the couple internships I got to experience it a little bit) and enjoyed my OS/SysArch classes in college and want to continue using that in the real world.

I hear a lot of negative stories/rants on this sub. I was interested in hearing a story of your DevOps experience where you were reminded why you **love** this field instead!

https://redd.it/dos87m
@r_devops

How to have Jenkins execute .sql files in order

I am looking for a way to have Jenkins pull .sql files from my repo and execute them in order. I am not sure if batch command is the only way as I've looked at SQLPlus and it doesn't seem to work. The behavior I have is

Last step of a SQL job is a PowerShell script that starts the Jenkins jobs. Jenkins pulls from my GIT repo and executes SQL files in order so like 1,2,3,4. If one SQL file fails to create the job should fail. Are there any plugins that can do this?

https://redd.it/dou10l
@r_devops

Open Application Model Specification

Open Application Model is a specification for building cloud native applications.

Link: [https://github.com/oam-dev/spec](https://github.com/oam-dev/spec)

Focused on separating concerns of development and operation needs, *Open Application Model* brings modular, extensible, and portable design to building and delivering applications on platforms like Kubernetes.

When it comes to application development and deployment, we think it is important to distinguish between the parts that developers are responsible for, and the parts that operations is responsible for. Otherwise, if these roles get muddled, it would result in communications mishaps, bugs, or even service outages.

*Open Application Model* attempts to solve this problem by modeling the application according to the roles responsible for building and running apps and operating infrastructure.

* *Developers* are responsible for describing what a microservice or component does, and *how* it can be configured. They are the domain experts on the code.
* *Application Operators* are responsible for configuring the runtime aspects of one or more of these microservices. They are the domain experts on the platform.
* *Infrastructure Operators* are responsible for setting up and maintaining the infrastructure within which applications run. They are the domain experts on the low-level details.

https://redd.it/dotcat
@r_devops

Hashicorp Vault - deleting users and revoking all tokens?

Hello,

I'm having an issue where I can't seem to be able to de-login or prevent deleted users from accessing secrets anymore. Even if i delete the user, that user will still have access from wherever he previously logged in - I assume that's going to happen for the entire duration of the 'lease'. My question is...how can I logout all those deleted users? Is my assumption that I need to list all tokens that belong to an user, then revoke them, true? And, if so, how can I achieve that?

​

Thank you.

​

​

LE: My assumption doesn't seem to hold true; i've listed all leases via "vault list sys/leases/lookup/auth/userpass/login/username", then removed them using 'vault lease revoke', but the logged in user still has access to secrets :/

https://redd.it/dondb9
@r_devops

Entering the field

Hi, I'm a 22 years old guy who is looking to enter the Devops field, i got no experience in the IT world, for the last 2 months i've been studying tools like Docker, Git, Linux and aws, I want to go for Integration and automation sphere inside Devops, i got aws SA cert, and i'm thinking about getting the sysops and the developer certs.
In your opinion, what certs should i go for to land me on an interview ?
Maybe even go for CCNA, or RHCSA ?

https://redd.it/dopr6t
@r_devops

Migrate existing Artifactory OSS installation to existing Artifactory PRO installation

I tried setting up a remote-repo on my PRO installation to replicate from the OSS installation but I get an error.

>Error testing pull replication config: Replication to remote open-source Artifactory instance is not supported.

Is there a script that can use the CLI to download each OSS artifact and upload to the PRO installation? Or, do I need to purchase a PRO license, export the OSS version, and import into a new PRO installation, just to be able to replicate from one instance to the other?

https://redd.it/dopou9
@r_devops

Networking device configuration generator?

Hi guys, I'm a beginner to programming/scripting but I can write basic scripts using python, ruby & bash. Scripts like auto ssh, auto snmpwalk etc. and I wanted to create a simple program or webUI now wherein people can input variables and the system will generate a text(from a base template replacing the variables).

​

Can I please have some suggestion on what's the simplest way I can achieve this?

https://redd.it/don0as
@r_devops

What Are Your Go To Tools for Automating and Managing Common Tasks?
https://www.reddit.com/r/aws/comments/dp8p4m/what_are_your_go_to_tools_for_automating_and/

https://redd.it/dpa6l0
@r_devops