Best resources to learn ansible?

Title.

https://redd.it/z8q3uf
@r_devops

Looking for an online course

Hey !


I'm 6 years experience in Java/C# development, Redhat administration, project management and trying to learn devops.


I did the Devops Foundation basic course and passed the test sucessfully so i know about the principles but i would like to get more technical.


I've been looking on udemy and coursera but there is so many choices that i figured out i would ask for some guidance here.


Do you have any course you would recommend ?


My picks for now :

https://www.coursera.org/professional-certificates/devops-and-software-engineering

https://www.coursera.org/specializations/aws-devops

https://www.udemy.com/course/decodingdevops/

https://www.udemy.com/course/kubernetes-les-bases-indispensables/

​

Thanks :)

https://redd.it/z9ll9e
@r_devops

DevOps Foundation Certifications Tutorials.

DevOps Foundation Certifications Tutorials.

\---------------------------------------------

https://www.youtube.com/playlist?list=PL0xeHY\_ImQVWiVUwZag\_ZcNYaS45gw1x\_

DevOps is a modern approach to a software development process that overcomes the challenges of earlier working models where now the Development and Operation teams work together in collaboration and sharing end to end responsibilities from Requirement gathering >> System Design >> System implementation >> System testing >> System deployment >> System maintenance and monitoring and gathering feedback from the end users, then again implementing the changes and releasing the product without delaying any time.

​

​

\#DevOps #DevSecOps #SRE #Certifications #Course #Training #Tutorials

https://redd.it/z9mt3o
@r_devops

How busy is everyone.. Really.

Been working as a DevOps engineer for 1yr+ (with a few years prior experience before that) and I'm on the lookout for new opportunities due to the company I work at not doing too well.

My fear however, is jumping into a place that the workload is immense. I'm currently suffering from stress atm, so that's something I really don't want at a next place.

It's actually pretty cool at the moment where I am. No one on my back I've got some nice small projects on the go that I can focus and work on. We hardly have any standups and when we do, it's really casual.

I'd just like to know, is this the standard life balance as a tech worker? Is everyone reallyyy busy or do you have a good balance?

https://redd.it/z9om3o
@r_devops

Cloudfront -> S3 + api-gateway origins

Hi all ,


I'm in desperate need of help and understanding. I can't believe how bad I am at misunderstanding any of this stuff but I'm very new to anything remotely "frontend"


I have a private S3 bucket with a simple html page on it.
I have a Lambda function which does exactly what I need for internal needs.
I created an api-gateway invoke URL with POST to trigger this function. I also attached an API-KEY so it can't be abused.

\- I created a cloudfront distribution which has the S3 bucket as the base origin and it loads the desired html page as expected and I have basic auth being served by cloudfront function on Viewer Request
\- I then created a second origin for the URL of the invoke URL generated by api-gateway. Within that Origin i have added Add custom header - optional

x-api-key : xxxxx


Within the HTML page I have a simple form
On the form I have
<form id="MyForm" method="post" action="https://XXXXXX.execute-api.eu-west-1.amazonaws.com/dev/lambda">

​

What unfortunately is happening is that the header is not being attached and access is being denied. I can confirm this disabling the api requirement and viewing the event


Is there something fundamental / foundational I'm missing here ? Like I feel completely embarrassed by my lack of understanding on this

https://redd.it/z9nn54
@r_devops

Red flags with interview process?

Currently proceeding with a infrastructure position that has some DevOps to it but based on the preliminary conversation it seems much more like cloud engineering with lots of Terraform and AWS. Cool.

However, the next stage is a strict DSA hackerrank interview using Python or Java. After that, it's 4-6 virtual on site interviews. This is not a FAANG.

That seems a bit absurd (amount of interviews) and out of track for the job (hackerrank DSA?) for what looks like an ops-focused role. It's kind of turning me off to the company. Am I wrong with this?

I'm OK with python but I'm def an Ops guy who spends most of his days on the CLI and Terraform.

https://redd.it/z9sylw
@r_devops

Is there a software engineering concept of visually describing a large codebase?

I'm not sure of the term, but I'd assume something like this exists. To visually organize the structure of your codebase. Kind of like the Cloudcraft of your source code. TIA!

https://redd.it/z9rewd
@r_devops

GitOps workflow for K8s

TLDR: What GitOps workflow works well for your company and what are the downsides?

I'm planning on pushing my team into a GitOps workflow for managing our K8s infra. I like the idea of approving/tracking things through git but I could see an issue where you have to test many different yaml changes to see if the changes fix something and then the git history gets messy. Also if you require approvals to push to prod then you will always need 2 people online to push any fixes there which isn't ideal in after-hours issues.

I'm thinking to solve this we either have a sandbox non-gitops cluster for testing some changes or we pushing those changes directly and then forcing a git squash/rebase to go to staging/prod with approval required, although then the histories don't match which could be confusing. To get around the break glass scenario we could use a service account Gitlab to approve if absolutely necessary. Wondering your thoughts and experience

Tech stack- EKS, Gitlab, external-secrets, with possibly ArgoCD but still evaluating

https://redd.it/z9vvod
@r_devops

Which Container Certification Should I Get?

I’ve been working in general IT for the past few years and I am looking to advance my career.

I already have a couple AWS certs as well as the RHCSA and I am now focusing on containers.

So among the DCA, KCNA, CKA or Red Hat Container Specialist cert, which would would be best to go for?

https://redd.it/z9z4ey
@r_devops

WARNING! Using --password via the CLI is insecure. Use --password-stdin.

Im doing a small project for my course wotk usin gitlab, docker and flask/python. I'm having a issue through gitlab or maybe docker trying to make changes through the ci/cd pipeline.


This is my gitlab-ci.yml file

buildjob:
stage: build
tags:
- flaskdockerpersonal
script:
- docker login -u myusername -p mypassword
- docker build -t myusername /myflaskapp:latest .
- docker image push myusername /myflaskapp:latest
- aws ecs update-service --cluster flaskcluster --service flaskapp-service --force-new-deployment



I tried the above code and it didn't work and gave me WARNING! Using --password via the CLI is insecure. Use --password-stdin and that authentication failed.. I tried googling and looking at stackoverflow and most the coments were explaing to use this "echo $CI_REGISTRY_PASSWORD | docker login -u $CI_REGISTRY_USER $CI_REGISTRY --password-stdin"

But I have no idea how and what this is. Do I need to do something else in gitlab with docker? I just want to login to my docker and push the image. Any help?

https://redd.it/za1cv7
@r_devops

JS Backends - logging - quasi poll

I handle the architecture side of my company and its recently been decided that we're going to have a couple of JS Server rendered apps. The current one we have sucks so hard in the way of logging and any time based insight into what is going on. I've basically required backend logging that will go to cloudwatch, being able to trigger lambda's etc.

To me, frontend JS can do what ever it wants but when its taking outside requests, it needs to act like a pure API and log log log.

Opinions? I don't want these logs in a JS recorder like Sentry, or send to both.

https://redd.it/za4aup
@r_devops

Filebeat config to parse a particular field string with json.

So right now I have filebeat sending logs to elasticsearch. The logs in elasticsearch is shown as follow

{
"foo": "bar",
"ggg":"bbbb",
"message":"{"@timestamp":"2022-11-30T15:41:23.203-05:00","@version":"1","ggg":"aaa"}"
}

​

The above is not what i really want, what i want is this:

​

{
"foo": "bar",
"ggg": "bbbb",
"message": {
"@timestamp":"2022--11-30T15:41:23.203-05:00",
"@version":"1",
"ggg","aaa"
}
}

How to do the above?

Below is my filebeat config:

filebeat:
autodiscover:
providers:
- hints:
defaultconfig:
paths:
- /var/log/containers/*${data.kubernetes.container.id}.log
type: container
enabled: true
node: ${NODENAME}
type: kubernetes
output:
elasticsearch:
allowolderversions: true
hosts:
- https://elasticsearch.foobar.net:9200
password: ${ELASTICPASSWORD}
protocol: https
ssl:
certificateauthorities:
- /etc/certs/elastic-ca.pem
username: elastic
processors:
- addcloudmetadata: null
- addhostmetadata: nul

https://redd.it/za0eo8
@r_devops

CODEGURU profiler - heap usage not accurate?

Im profiling some code with CodeGuru because I suspect a memory leak. The app running grows to over 10GB heap (java) but when I check in CodeGuru it says its only using 28 MB.

my profiler setup within the code is

new Profiler.Builder().profilingGroupName(groupName).withHeapSummary(true).build().start()

are there any tips on how to get a more accurate reading of memory?

https://redd.it/z9yvus
@r_devops

Why do people use so many abbreviations?

It is not devops related, but it sucks! I am in the industry for 12 years and i used and learned so many god damn abbreviations. I mean sure if you are working on in your team on a certain cloud vendor or a certain tooling, most likely everyone understand what service you mean, but if you fire those abbreviations to some one who‘s not into it, the person will most likely not understand what you are talking about and in most cases are not even able to google it, because that abbreviation has 20 wikipedia entries with not relation to what you are referring to.
Most people can type faster then they speak and for sure type faster then thy think, so why make life harder by using stupid abbreviations to outsiders? It doesn‘t make you look smarter, it is just annoying.

https://redd.it/z9ucvr
@r_devops

testing pyramid doesn't quite work for infrastructure

Active monitoring is cheap, there are many options and you should be using it, despite being at the top of the testing pyramid! https://youtu.be/9kDTAnRmeic

https://redd.it/zaehd0
@r_devops

unable to resolve Kubernetes cluster API URL dns

I ran my Kops create cluster on aws. This was working fine 2 hours back but all of sudden I get this error on running Kops validate:
unable to resolve Kubernetes cluster API URL dns: no such host

https://redd.it/zae390
@r_devops

A doubt on the env / secrets process

Hello folks

I am new to this company where they are using Gitlab CI Variables to pull the env variables. This method is done via a Gitlab Auth Token and is being used for all environments including local development.

This is the first time I am seeing this kind of a workflow. I am not a DevOps person, but I understand this side of things (a bit).
What can be the pitfalls of this approach and what is a better approach ?

​

Thanks

https://redd.it/zah5ye
@r_devops

Handling software lifecycle and CD with devices in client premises

Hey guys,

I am very much used to and spoiled by all the cloud providers, all my experience regarding automation lies with them...

​

Now I am faced with an issue: I have an artifact (think .NET or Java), and I need to deploy it to multiple devices located in different client premises. I also need some way to handle software updates in the least painful way. No k8s!

​

What are the best practices for CD in this case? In my mind there should be a centralized CD server that can connect to all the machines and do the rollouts.

https://redd.it/zaip7t
@r_devops

Taking Your DevOps Tools to the Dark Side

DevSecOps 2022 - Conf42 presentation yesterday on taking DevOps to the Dark Side from Mike, the Head of RAV (Reliability, Automation, Visibility) at NetFoundry, by using the open source solution OpenZiti.

https://youtu.be/T8UjctrFPAk?list=PLIuxSyKxlQrAhxoNbHJutmUl6RYr8vD6O&t=114

https://redd.it/zal3ov
@r_devops

How can I access VPN protected repo through ArgoCD?

I have a repository on Azure DevOps which can only be accessed using a VPN. Can someone please tell me the best way to connect to that repo from ArgoCD?

https://redd.it/zakpq7
@r_devops

Python for Devops learning dilemma

How much Python is one expected to know for a DevOps role?

I'm trying to get the most bang for my buck. I want to effectively but efficiently study Python for a Devops role. But I don't have much time. At the end of the day, I'm looking for the most practical approach. The one that will put food on the table.

 

I've read past posts and they seem to mention the book "Automate the Boring Stuff" as the go-to recommendation for Python.

But if anyone read that book before, the author pretty much states in the intro that it's a book for office workers, not for learning programming, and that if the reader's intention is to learn good software engineering, they won't get it from that book.

So I'm kinda confused. I thought good programming ability was an important aspect of DevOps? If so, then why are people recommending the book if it teaches basic automation more than programming principles?

 

As a fresh university graduate wanting to get into devops, my dilemma is:

1. Should I be studying python as a tool for automation (i.e. using the recommended book mentioned above or the Google IT Automation with python course) or

2. Should I be studying python as a means of programming and software engineering (in that case, what kind of resources should I be looking at? ) I read a previous top-post on this sub talking about an Amazon interview where they were asked about Data Structures and Design Pattens.

 

Note: I've taken several CS courses in my uni that taught the fundamentals of programming, but it was in C++ and I honestly can't remember much as I haven't used much of the knowledge since, given that I'm an IT major.

https://redd.it/zajzge
@r_devops