Need help using cpanel certificate on nginx with digital ocean

So I have a cpanel account with a wildcard domain I have been using for a while, I created a front-end app with would be on the cpanel, but my backend is hosted on digital ocean( I have a paid plan from a company and I would have to pay to build node on my cpanel).

Is there a way to use the wildcard certificate or install it on my digital ocean server

Say my domain is yes.com, since it's wildcard, can I have something like backend.yes.com on digital ocean?? While using same certificates?

Do I need to change the nameservers, need help with this, thanks.

https://redd.it/z8nxhd
@r_devops

What do you guys think about WASM + Docker?

The tech is still in preview, but might that just be the future of containerized apps?

https://redd.it/z8ojev
@r_devops

Terraform and Kubernetes deployment samples

Hello all,

i wanted to share my previously deployed templates for Terraform and Kubernetes. It should be easy to understand at all level developers with a little knowledge in the field.


https://github.com/tanerjn/terraform-deployment


https://github.com/tanerjn/kube-deployment


Feel free to star or fork to check it.

https://redd.it/z8ubn4
@r_devops

Build AWS AMI on GP3 with Packer 1.8.4?

Hello....I'm trying to figure out where the Packer experts hang out. I ask questions on the Hashicorp forums and they go unanswered, seems like there's little activitty there in general.

I'm trying to build AWS AMIs using GP3. GP2 works fine, but I can't get the syntax right for GP3.

This is what I have:



"builders": {
"type": "amazon-ebs",
"launch_block_device_mappings": [{
"volume_type": "gp3",
"volume_size": "3",
"device_name": "/dev/nvme0n1p2" },

But I keep getting an error that /dev/nvme0n1p2 is an invalid device name. /dev/nvme0n1p2 is the device root is being built on. I have also tried /dev/nvme0n1, /dev/nvme0, and even /dev/sda all with the same error.

I've also read that as of 1.7, GP3 is supposed to be the default volume type, but I'm still getting GP2 when I look at the AMI Storage tab.

Any help appreciated.

https://redd.it/z8ujdr
@r_devops

Is hosting Sentry ourselves worth it?

As our usage is growing, we have to pick whether to byte an expensive bill (over 3k/month), use sampling a lot, or self-host. The primary cost driver is the use of transactions.

What has been your experience self-hosting Sentry?

https://redd.it/z8v967
@r_devops

Seeking recommendations for code coverage and documentation presentation from Github actions.

Hello everyone,

**tl;dr** What's the best solution for maintaining unit test coverage HTML output and auto generated from code HTML docs for every open branch in a repository that's triggered by GitHub actions or a similarly automated update?

I'm looking to create a CI/CD pipeline from my teams growing set of GitHub repositories and I'm looking to start off with suggestions for how to present code coverage from unit tests as well as automatically generated documentation from code comments.

Firstly I would like to say I've seen codecov and I really like their offering but their $10/person/month price tag is just not going to work for us and it's a private repository. I am perfectly willing to self-host this solution and would love to hear if there are free self hosted packages that do what I need.

I am hoping to achieve the following goals with my CI:

* HTML code coverage generated by the project is available linked to from the README.md or PR comment in a way that is specific to the current branch. This could be also done by annotating code views in GitHub if necessary but I would like this to be specific to each branch rather than having one HTML coverage artifact for the whole project which would need to be like the main branch or something
* Documentation generated from the build is placed somewhere that's easily linked to from the README.md
* Code coverage and documentation HTML is removed when a branch is deleted so that every live branch has artifacts but storage isn't building up forever.

There are some solutions I've considered that I don't love:

1) Auto generate documentation and HTML code coverage in a GitHub action and post it to the the GitHub pages for the repo. This has the disadvantage of there being only one coverage and documentation artifact for the entire repo, not one per active branch. But it's pretty easily done.

2) Check in the code coverage and documentation into each branch and view the HTML by navigating to the code. Something about this just weirds me out from a developer perspective. I don't love build artifacts cluttering the repo and we don't need to maintain historic changes for the HTML coverage report. Also I cringe at the thought of this causing merge conflicts that might have to be dealt with.

3) Build my own web host that has an API where in GitHub actions can upload the build results of code coverage and documentation to the server I create and provide a few simple links for users to go look at it. While this is exactly what I want, and also not exactly a very difficult project, I feel like something like this probably exists and I don't want to maintain this in the future if there's a good solution with a community.

https://redd.it/z91y9q
@r_devops

Containerizing devops tools with docker compose

Recently I've been thinking about containerizing our devops tools in my current work place. The dev and devops teams currently have everything installed locally to do deployments. We use terraform, terragrunt, ansible, packer, kube etc.

I have been toying with docker compose and feel it would be a good fit for us as we can control the versions of the tools at a repo level. I can get individual docker compose services running fine e.g. just terraform. When I introduce multiple services with the same docker compose file, things start to fall apart.

We use terraform and terragrunt together, packer and ansible so having the 2 related tools within the same docker compose file makes sense.

Does anyone have experience of this type of situation or would suggest any material?

https://redd.it/z90nv3
@r_devops

Access variables in Jenkins trigger section

I am trying to use a shared library pipeline (if that's the correct way to put it) from two different Jenkins files. One to do nightly builds and one for deliveries. This may not be the best setup (i'm just learning) but I am having trouble accessing a ?parameter? passed in. I want the nightly build to get scheduled for a certain time and the delivery to only be run if started manually. The rough outline is:

shared lib

**pipe.groovy**

def call(body)

triggers{

cron(env.target == 'nightly' ? '00 8 * * *' : '') // env.target is null?

....

stages{

stage{

steps{

sh('printenv') // env.target is set



**Jenkins.nightly**

pipe{

target = 'nightly'
...


**Jenkins.delivery**

pipe{

target = 'delivery'
...

I seem to be able to access the ?build in? env vars in the trigger section but not this way. I've tried many combinations of trying to do so.

Any suggestions?

https://redd.it/z96891
@r_devops

SWE joined devops, no coding for months

Promised the world, found OPs instead.
Smells like OPs, is OPs and I want out.

Afraid to have an only 6 months Job in CV.

Recruiters only propose Devops roles already but I was supposed to learn and I am not right now. Essentially I’ve given up SWE for devops and there’s no dev in it.

Made my mind to return to SWE but see above.

Anyone with same experiences?

How did you get out?

https://redd.it/z98kgx
@r_devops

Git Portfolio: GitHub or Gitlab?

I want to use GitHub or Gitlab for a personal portfolio. I only want to upload POCs or Demos.
I migrated from Github to Gitlab 3 years ago. However, In the last time, in some jobs I had, we migrated from Gitlab to Github because of the new pricing.
Nowadays, I believe maybe Github it's better for a personal Portfolio. I don't care about Github/Gitlab CI; I can adapt to that part.
So, GitHub vs. Gitlab? What it's better for a personal portfolio?

https://redd.it/z98lfq
@r_devops

Tools for determine when a PR is safe to automatically merge

I swear I’ve seen a post about this recently, but can’t find it for the life of me.

I’m not asking about running security scans on code, rather Im asking for a tool that allows me to define safety criteria (i.e., file X wasn’t modified, dir Y was modified, etc) and automerge a PR if that criteria is met.

My current solution using bash is becoming a bit annoying to manage.

Any suggestions welcome.

https://redd.it/z9bwjz
@r_devops

How do you find the lambda function from the HCL config file?

I see something like:

resource "aws_labda_function" "lambda01" {
filename = "lambda.zip"
function_name = "lambda01function"
}

I didn't find anything named [lambda.zip](https://lambda.zip), lambda01 or lambda01function elsewhere across the whole codebase. How do you find the lambda function that the HCL config refers to? HCL is used by Hashicorp Nomad.

https://redd.it/z9dy7o
@r_devops

Ansible:

Trying to update values in the below json file.

{
“Host”: “ttrg97”,
“Vm “: “test”
}


When I update any value , the square brackets are missing.

{
“Host”: “updatedvalue ”,
“Vm “: “test”
}
I’m new to Ansible can someone help me how to update this file

https://redd.it/z9775i
@r_devops

Degrees/Experience necessary for DevOps

Hi All,

I’m currently a senior at a university in california and I wanted to ask about the possibility of getting an entry-level DevOps job if I have a B.S. in Statistics, along with IT Experience. I currently work at my university’s service desk for the department of engineering and I am getting experience with Python (scripting, data analysis, machine learning, web scraping) and SQL through my courses. Will this suffice for a job out of college or should I seek other routes?

Thank you

https://redd.it/z96b73
@r_devops

How much networking i need ?

basically i wanna land a DevOps position after few years doing backend and a CS degree , am already comfortable with the tools and the philosophy but i feel that i ve lost all the networking knowledge i gathered in university i barely remember OSI model , subnetting and random stuffs .

so am asking if there's any networking road map specifically for devops engineer ?

https://redd.it/z8riig
@r_devops

Remote Server Task Execution opensource tool suggestions

​

Good morning everyone, I'm a newbie and I ask you for suggestions for tools that allow me to automate my boring tasks.

​

My current scenario

\- I remotely manage a few servers (VMs)

\- The architecture is On-Premise

\- My tedious tasks are running commands/scripts remotely via ssh

\- Some tasks are one-off, others are scheduled (e.g. a procedure that runs every Friday afternoon)

\- The most complex situation is a backup procedure that requires an orchestration with the following steps:

1. Stop application server.
2. Perform backup on database server
3. Run commands on a third server
4. Restart the application server

​

Features of the tool I'm looking for

\- Low learning curve and easy maintenance

\- Allow to run commands remotely, either occasionally or on a scheduled basis

\- Have a graphical interface that allows viewing the status of scheduled tasks and that, with the click of a button, the user can manually execute other tasks.

\- Have a user control with LDAP

​

What I already researched

Some company colleagues commented on Jenkins, I think we even have a team that uses it in some project.

​

This would be the most logical path to follow, but... I think the tool (jenkins) is somewhat ugly, even knowing that there is Jenkins Pipeline and BlueOcean

​

IMPORTANT: For the love of God, no fights or controversies, I don't mean to say that Jenkins is bad, or that it wouldn't suit me, I'm just saying that I'd rather try a different tool

​

I appreciate any suggestion you can provide

https://redd.it/z8qiho
@r_devops

Best resources to learn ansible?

Title.

https://redd.it/z8q3uf
@r_devops

Looking for an online course

Hey !


I'm 6 years experience in Java/C# development, Redhat administration, project management and trying to learn devops.


I did the Devops Foundation basic course and passed the test sucessfully so i know about the principles but i would like to get more technical.


I've been looking on udemy and coursera but there is so many choices that i figured out i would ask for some guidance here.


Do you have any course you would recommend ?


My picks for now :

https://www.coursera.org/professional-certificates/devops-and-software-engineering

https://www.coursera.org/specializations/aws-devops

https://www.udemy.com/course/decodingdevops/

https://www.udemy.com/course/kubernetes-les-bases-indispensables/

​

Thanks :)

https://redd.it/z9ll9e
@r_devops

DevOps Foundation Certifications Tutorials.

DevOps Foundation Certifications Tutorials.

\---------------------------------------------

https://www.youtube.com/playlist?list=PL0xeHY\_ImQVWiVUwZag\_ZcNYaS45gw1x\_

DevOps is a modern approach to a software development process that overcomes the challenges of earlier working models where now the Development and Operation teams work together in collaboration and sharing end to end responsibilities from Requirement gathering >> System Design >> System implementation >> System testing >> System deployment >> System maintenance and monitoring and gathering feedback from the end users, then again implementing the changes and releasing the product without delaying any time.

​

​

\#DevOps #DevSecOps #SRE #Certifications #Course #Training #Tutorials

https://redd.it/z9mt3o
@r_devops

How busy is everyone.. Really.

Been working as a DevOps engineer for 1yr+ (with a few years prior experience before that) and I'm on the lookout for new opportunities due to the company I work at not doing too well.

My fear however, is jumping into a place that the workload is immense. I'm currently suffering from stress atm, so that's something I really don't want at a next place.

It's actually pretty cool at the moment where I am. No one on my back I've got some nice small projects on the go that I can focus and work on. We hardly have any standups and when we do, it's really casual.

I'd just like to know, is this the standard life balance as a tech worker? Is everyone reallyyy busy or do you have a good balance?

https://redd.it/z9om3o
@r_devops

Cloudfront -> S3 + api-gateway origins

Hi all ,


I'm in desperate need of help and understanding. I can't believe how bad I am at misunderstanding any of this stuff but I'm very new to anything remotely "frontend"


I have a private S3 bucket with a simple html page on it.
I have a Lambda function which does exactly what I need for internal needs.
I created an api-gateway invoke URL with POST to trigger this function. I also attached an API-KEY so it can't be abused.

\- I created a cloudfront distribution which has the S3 bucket as the base origin and it loads the desired html page as expected and I have basic auth being served by cloudfront function on Viewer Request
\- I then created a second origin for the URL of the invoke URL generated by api-gateway. Within that Origin i have added Add custom header - optional

x-api-key : xxxxx


Within the HTML page I have a simple form
On the form I have
<form id="MyForm" method="post" action="https://XXXXXX.execute-api.eu-west-1.amazonaws.com/dev/lambda">

​

What unfortunately is happening is that the header is not being attached and access is being denied. I can confirm this disabling the api requirement and viewing the event


Is there something fundamental / foundational I'm missing here ? Like I feel completely embarrassed by my lack of understanding on this

https://redd.it/z9nn54
@r_devops