Reddit DevOps
283 subscribers
76 photos
32.4K links
Reddit DevOps. #devops
Thanks @reddit2telegram and @r_channels
Download Telegram
SWE joined devops, no coding for months

Promised the world, found OPs instead.
Smells like OPs, is OPs and I want out.

Afraid to have an only 6 months Job in CV.

Recruiters only propose Devops roles already but I was supposed to learn and I am not right now. Essentially I’ve given up SWE for devops and there’s no dev in it.

Made my mind to return to SWE but see above.

Anyone with same experiences?

How did you get out?

https://redd.it/z98kgx
@r_devops
Git Portfolio: GitHub or Gitlab?

I want to use GitHub or Gitlab for a personal portfolio. I only want to upload POCs or Demos.
I migrated from Github to Gitlab 3 years ago. However, In the last time, in some jobs I had, we migrated from Gitlab to Github because of the new pricing.
Nowadays, I believe maybe Github it's better for a personal Portfolio. I don't care about Github/Gitlab CI; I can adapt to that part.
So, GitHub vs. Gitlab? What it's better for a personal portfolio?

https://redd.it/z98lfq
@r_devops
Tools for determine when a PR is safe to automatically merge

I swear I’ve seen a post about this recently, but can’t find it for the life of me.

I’m not asking about running security scans on code, rather Im asking for a tool that allows me to define safety criteria (i.e., file X wasn’t modified, dir Y was modified, etc) and automerge a PR if that criteria is met.

My current solution using bash is becoming a bit annoying to manage.

Any suggestions welcome.

https://redd.it/z9bwjz
@r_devops
How do you find the lambda function from the HCL config file?

I see something like:

resource "aws_labda_function" "lambda01" {
filename = "lambda.zip"
function_name = "lambda01function"
}

I didn't find anything named [lambda.zip](https://lambda.zip), lambda01 or lambda01function elsewhere across the whole codebase. How do you find the lambda function that the HCL config refers to? HCL is used by Hashicorp Nomad.

https://redd.it/z9dy7o
@r_devops
Ansible:

Trying to update values in the below json file.

{
“Host”: “ttrg97”,
“Vm “: “test”
}


When I update any value , the square brackets are missing.

{
“Host”: “updatedvalue ”,
“Vm “: “test”
}
I’m new to Ansible can someone help me how to update this file

https://redd.it/z9775i
@r_devops
Degrees/Experience necessary for DevOps

Hi All,

I’m currently a senior at a university in california and I wanted to ask about the possibility of getting an entry-level DevOps job if I have a B.S. in Statistics, along with IT Experience. I currently work at my university’s service desk for the department of engineering and I am getting experience with Python (scripting, data analysis, machine learning, web scraping) and SQL through my courses. Will this suffice for a job out of college or should I seek other routes?

Thank you

https://redd.it/z96b73
@r_devops
How much networking i need ?

basically i wanna land a DevOps position after few years doing backend and a CS degree , am already comfortable with the tools and the philosophy but i feel that i ve lost all the networking knowledge i gathered in university i barely remember OSI model , subnetting and random stuffs .

so am asking if there's any networking road map specifically for devops engineer ?

https://redd.it/z8riig
@r_devops
Remote Server Task Execution opensource tool suggestions

​

Good morning everyone, I'm a newbie and I ask you for suggestions for tools that allow me to automate my boring tasks.

​

My current scenario

\- I remotely manage a few servers (VMs)

\- The architecture is On-Premise

\- My tedious tasks are running commands/scripts remotely via ssh

\- Some tasks are one-off, others are scheduled (e.g. a procedure that runs every Friday afternoon)

\- The most complex situation is a backup procedure that requires an orchestration with the following steps:

1. Stop application server.
2. Perform backup on database server
3. Run commands on a third server
4. Restart the application server

​

Features of the tool I'm looking for

\- Low learning curve and easy maintenance

\- Allow to run commands remotely, either occasionally or on a scheduled basis

\- Have a graphical interface that allows viewing the status of scheduled tasks and that, with the click of a button, the user can manually execute other tasks.

\- Have a user control with LDAP

​

What I already researched

Some company colleagues commented on Jenkins, I think we even have a team that uses it in some project.

​

This would be the most logical path to follow, but... I think the tool (jenkins) is somewhat ugly, even knowing that there is Jenkins Pipeline and BlueOcean

​

IMPORTANT: For the love of God, no fights or controversies, I don't mean to say that Jenkins is bad, or that it wouldn't suit me, I'm just saying that I'd rather try a different tool

​

I appreciate any suggestion you can provide

https://redd.it/z8qiho
@r_devops
Looking for an online course

Hey !


I'm 6 years experience in Java/C# development, Redhat administration, project management and trying to learn devops.


I did the Devops Foundation basic course and passed the test sucessfully so i know about the principles but i would like to get more technical.


I've been looking on udemy and coursera but there is so many choices that i figured out i would ask for some guidance here.


Do you have any course you would recommend ?


My picks for now :

https://www.coursera.org/professional-certificates/devops-and-software-engineering

https://www.coursera.org/specializations/aws-devops

https://www.udemy.com/course/decodingdevops/

https://www.udemy.com/course/kubernetes-les-bases-indispensables/

​

Thanks :)

https://redd.it/z9ll9e
@r_devops
DevOps Foundation Certifications Tutorials.

DevOps Foundation Certifications Tutorials.

\---------------------------------------------

https://www.youtube.com/playlist?list=PL0xeHY\_ImQVWiVUwZag\_ZcNYaS45gw1x\_

DevOps is a modern approach to a software development process that overcomes the challenges of earlier working models where now the Development and Operation teams work together in collaboration and sharing end to end responsibilities from Requirement gathering >> System Design >> System implementation >> System testing >> System deployment >> System maintenance and monitoring and gathering feedback from the end users, then again implementing the changes and releasing the product without delaying any time.

​

​

\#DevOps #DevSecOps #SRE #Certifications #Course #Training #Tutorials

https://redd.it/z9mt3o
@r_devops
How busy is everyone.. Really.

Been working as a DevOps engineer for 1yr+ (with a few years prior experience before that) and I'm on the lookout for new opportunities due to the company I work at not doing too well.

My fear however, is jumping into a place that the workload is immense. I'm currently suffering from stress atm, so that's something I really don't want at a next place.

It's actually pretty cool at the moment where I am. No one on my back I've got some nice small projects on the go that I can focus and work on. We hardly have any standups and when we do, it's really casual.

I'd just like to know, is this the standard life balance as a tech worker? Is everyone reallyyy busy or do you have a good balance?

https://redd.it/z9om3o
@r_devops
Cloudfront -> S3 + api-gateway origins

Hi all ,


I'm in desperate need of help and understanding. I can't believe how bad I am at misunderstanding any of this stuff but I'm very new to anything remotely "frontend"


I have a private S3 bucket with a simple html page on it.
I have a Lambda function which does exactly what I need for internal needs.
I created an api-gateway invoke URL with POST to trigger this function. I also attached an API-KEY so it can't be abused.

\- I created a cloudfront distribution which has the S3 bucket as the base origin and it loads the desired html page as expected and I have basic auth being served by cloudfront function on Viewer Request
\- I then created a second origin for the URL of the invoke URL generated by api-gateway. Within that Origin i have added Add custom header - optional

x-api-key : xxxxx


Within the HTML page I have a simple form
On the form I have
<form id="MyForm" method="post" action="https://XXXXXX.execute-api.eu-west-1.amazonaws.com/dev/lambda">

&#x200B;

What unfortunately is happening is that the header is not being attached and access is being denied. I can confirm this disabling the api requirement and viewing the event


Is there something fundamental / foundational I'm missing here ? Like I feel completely embarrassed by my lack of understanding on this

https://redd.it/z9nn54
@r_devops
Red flags with interview process?

Currently proceeding with a infrastructure position that has some DevOps to it but based on the preliminary conversation it seems much more like cloud engineering with lots of Terraform and AWS. Cool.

However, the next stage is a strict DSA hackerrank interview using Python or Java. After that, it's 4-6 virtual on site interviews. This is not a FAANG.

That seems a bit absurd (amount of interviews) and out of track for the job (hackerrank DSA?) for what looks like an ops-focused role. It's kind of turning me off to the company. Am I wrong with this?

I'm OK with python but I'm def an Ops guy who spends most of his days on the CLI and Terraform.

https://redd.it/z9sylw
@r_devops
Is there a software engineering concept of visually describing a large codebase?

I'm not sure of the term, but I'd assume something like this exists. To visually organize the structure of your codebase. Kind of like the Cloudcraft of your source code. TIA!

https://redd.it/z9rewd
@r_devops
GitOps workflow for K8s

TLDR: What GitOps workflow works well for your company and what are the downsides?

I'm planning on pushing my team into a GitOps workflow for managing our K8s infra. I like the idea of approving/tracking things through git but I could see an issue where you have to test many different yaml changes to see if the changes fix something and then the git history gets messy. Also if you require approvals to push to prod then you will always need 2 people online to push any fixes there which isn't ideal in after-hours issues.

I'm thinking to solve this we either have a sandbox non-gitops cluster for testing some changes or we pushing those changes directly and then forcing a git squash/rebase to go to staging/prod with approval required, although then the histories don't match which could be confusing. To get around the break glass scenario we could use a service account Gitlab to approve if absolutely necessary. Wondering your thoughts and experience

Tech stack- EKS, Gitlab, external-secrets, with possibly ArgoCD but still evaluating

https://redd.it/z9vvod
@r_devops
Which Container Certification Should I Get?

I’ve been working in general IT for the past few years and I am looking to advance my career.

I already have a couple AWS certs as well as the RHCSA and I am now focusing on containers.

So among the DCA, KCNA, CKA or Red Hat Container Specialist cert, which would would be best to go for?

https://redd.it/z9z4ey
@r_devops
WARNING! Using --password via the CLI is insecure. Use --password-stdin.

Im doing a small project for my course wotk usin gitlab, docker and flask/python. I'm having a issue through gitlab or maybe docker trying to make changes through the ci/cd pipeline.


This is my gitlab-ci.yml file

buildjob:
stage: build
tags:
- flaskdockerpersonal
script:
- docker login -u myusername -p mypassword
- docker build -t myusername /myflaskapp:latest .
- docker image push myusername /myflaskapp:latest
- aws ecs update-service --cluster flaskcluster --service flaskapp-service --force-new-deployment



I tried the above code and it didn't work and gave me WARNING! Using --password via the CLI is insecure. Use --password-stdin and that authentication failed.. I tried googling and looking at stackoverflow and most the coments were explaing to use this "echo $CI_REGISTRY_PASSWORD | docker login -u $CI_REGISTRY_USER $CI_REGISTRY --password-stdin"

But I have no idea how and what this is. Do I need to do something else in gitlab with docker? I just want to login to my docker and push the image. Any help?

https://redd.it/za1cv7
@r_devops
JS Backends - logging - quasi poll

I handle the architecture side of my company and its recently been decided that we're going to have a couple of JS Server rendered apps. The current one we have sucks so hard in the way of logging and any time based insight into what is going on. I've basically required backend logging that will go to cloudwatch, being able to trigger lambda's etc.

To me, frontend JS can do what ever it wants but when its taking outside requests, it needs to act like a pure API and log log log.

Opinions? I don't want these logs in a JS recorder like Sentry, or send to both.

https://redd.it/za4aup
@r_devops
Filebeat config to parse a particular field string with json.

So right now I have filebeat sending logs to elasticsearch. The logs in elasticsearch is shown as follow

{
"foo": "bar",
"ggg":"bbbb",
"message":"{"@timestamp":"2022-11-30T15:41:23.203-05:00","@version":"1","ggg":"aaa"}"
}

&#x200B;

The above is not what i really want, what i want is this:

&#x200B;

{
"foo": "bar",
"ggg": "bbbb",
"message": {
"@timestamp":"2022--11-30T15:41:23.203-05:00",
"@version":"1",
"ggg","aaa"
}
}

How to do the above?

Below is my filebeat config:

filebeat:
autodiscover:
providers:
- hints:
defaultconfig:
paths:
- /var/log/containers/*${
data.kubernetes.container.id}.log
type: container
enabled: true
node: ${NODE
NAME}
type: kubernetes
output:
elasticsearch:
allowolderversions: true
hosts:
- https://elasticsearch.foobar.net:9200
password: ${ELASTICPASSWORD}
protocol: https
ssl:
certificate
authorities:
- /etc/certs/elastic-ca.pem
username: elastic
processors:
- addcloudmetadata: null
- addhostmetadata: nul

https://redd.it/za0eo8
@r_devops
CODEGURU profiler - heap usage not accurate?

Im profiling some code with CodeGuru because I suspect a memory leak. The app running grows to over 10GB heap (java) but when I check in CodeGuru it says its only using 28 MB.

my profiler setup within the code is

new Profiler.Builder().profilingGroupName(groupName).withHeapSummary(true).build().start()

are there any tips on how to get a more accurate reading of memory?

https://redd.it/z9yvus
@r_devops