I’m doing my thesis and looking for those that work ON-CALL to participate in an anonymous online survey. Please help

I’m from CQUniversity and looking for those that work ON-CALL to participate in an anonymous online survey to study the effects of on-call work in the areas of sleep quality and anxiety.

Click the link https://cqu.syd1.qualtrics.com/jfe/form/SV\_eX3J6NYVyw8rJVc

CQUniversity is examining many of the issues affecting sleep and anxiety levels of on-call workers. The survey will be looking at the impact of an on-call workers on both anxiety and sleep.

By participating in this survey, you could be assisting researchers to identify key areas where employers and industries can make possible changes to support those in on-call settings, to experience better sleep, and improved anxiety levels, and thus long and short-term health outcomes in the future. Better health outcomes for workers equal improved efficiencies for businesses, the relevant sectors, and the community.

Thank you for your time I really appreciate it.

https://redd.it/zxs1kz
@r_devops

What's your team's current big project goal?

Hi all, I'm new here. Came to learn a little about:

1. what kind of projects others are working on?
2. what consumes most of your time each week?

Thanks in advance for the engagement.

https://redd.it/zx8cns
@r_devops

Do you manage non k8s environment, just bare Linux?

I love K8s and GitOps. It makes everything soo much easier to deal with. Put your over engineered Yamls into the Git repository and you're pretty much done. However, I still have to manage some bare metal servers or VMs. I'm currently using Puppet & Ansible.

In terms of user experience, Ansible is like kubectl apply. You pray and hope it applies successfully. Good luck if there's any configuration drift. Puppet is little bit better. DSL is good, almost full-fledged programming language. If you're lucky enough to have Enterprise version you're golden.

I'm craving to build something like ArgoCD but for Linux. How do I get there? Is there any new shiny tool that I'm not aware of? I want to basically push my new changes to git and be done with it. How are you guys managing your Linux nowadays?

https://redd.it/zxuqwx
@r_devops

The KCL Programing Language for DevOps

## https://github.com/KusionStack/KCLVM

## Introduction

Kusion Configuration Language (KCL) is an open source constraint-based record and functional language. KCL improves the writing of a large number of complex configurations such as cloud native scenarios through mature programming language technology and practice, and is committed to building better modularity, scalability and stability around configuration, simpler logic writing, fast automation and good ecological extensionality.

## What is it for?

You can use KCL to

[Generate low-level static configuration data](https://kcl-lang.io/docs/user_docs/guides/configuration) like JSON, YAML, etc or [integrate with existing data](https://kcl-lang.io/docs/user_docs/guides/data-integration).
Reduce boilerplate in configuration data with the schema modeling.
Define schemas with [rule constraints for configuration data and validate](https://kcl-lang.io/docs/user_docs/guides/validation) them automatically\].
Organize, simplify, unify and manage large configurations without side effects through gradient automation schemes.
Manage large configurations scalably with [isolated configuration blocks](https://kcl-lang.io/docs/reference/lang/tour#config-operations).
Used as a platform engineering programming language to deliver modern app with Kusion Stack.

## Features

Easy-to-use: Originated from high-level languages ​​such as Python and Golang, incorporating functional language features with low side effects.
Well-designed: Independent Spec-driven syntax, semantics, runtime and system modules design.
Quick modeling: [Schema](https://kcl-lang.io/docs/reference/lang/tour#schema)\-centric configuration types and modular abstraction.
Rich capabilities: Configuration with type, logic and policy based on Config, Schema, Lambda, Rule.
Stability: Configuration stability built on [static type system](https://kcl-lang.io/docs/reference/lang/tour/#type-system), [constraints](https://kcl-lang.io/docs/reference/lang/tour/#validation), and [rules](https://kcl-lang.io/docs/reference/lang/tour#rule).
Scalability: High scalability through automatic merge mechanism of isolated config blocks.
Fast automation: Gradient automation scheme of [CRUD APIs](https://kcl-lang.io/docs/reference/lang/tour/#kcl-cli-variable-override), [multilingual SDKs](https://kcl-lang.io/docs/reference/xlang-api/overview), [language plugin](https://github.com/KusionStack/kcl-plugin)
High performance: High compile time and runtime performance using Rust & C and LLVM, and support compilation to native code and WASM.
API affinity: Native support API ecological specifications such as [OpenAPI](https://github.com/KusionStack/kcl-openapi), Kubernetes CRD, Kubernetes YAML spec.
Development friendly: Friendly development experiences with rich language tools (Format, Lint, Test, Vet, Doc, etc.) and IDE plugins.
Safety & maintainable: Domain-oriented, no system-level functions such as native threads and IO, low noise and security risk, easy maintenance and governance.
Production-ready: Widely used in production practice of platform engineering and automation at Ant Group.

https://redd.it/zxuypr
@r_devops

digital product

I intend to develop a digital product portal. The user will log in to the portal and then add digital products to their shopping cart, and then check out. Once the checkout is complete, the portal will send the digital product to the user's email address.

I'm thinking to use AWS Lambda function to handle backend logic.

My question is, do I need to manage user sessions ? Or this could be stateless also ? Can AWS Lambda be a right fit in this use case ?

https://redd.it/zxgcca
@r_devops

I built haystack - google for workplace secrets and connection details.

Hi my name is Yuval I've been a devops engineer for a few years now,

I was sifting through confluence pages trying to find ssh connection details to our jenkins integration machine for 40 minutes straight, later I discovered my co-worker slack'ed me the ssh connection string two months ago.

I started working on haystack a few weeks ago a search engine for workplace apps specifically to search for secrets, credentials, connection details.. It enables you to search slack, confluence, jira, jfrog, github, circleci, jenkins, and email in one place.

It supports natural language queries so a query like: "how to connect to integ2 machine?" yields:

ssh -i private.pem [email protected]

Privacy?
Stores user data locally so there's no security risk, I didn't want to deal with security compliance headaches for storing user data in the cloud. March 23' code will be also released on Github. (see comment section)

Rolled it out to my co-workers a week ago and they thought it's a hit, so I'm planning on releasing it publicly on March 2023.

Early access
If you want to try it out before March 2023 - Available here

https://redd.it/zxzlys
@r_devops

Need a private on-prem docker image registry to use with Azure DevOps Server (TFS19)

Hi, I'm after tips or recommendations for the above please. I could update to TFS22 but at the moment all I want to do is to publish to an on-prem registry. I've got microk8s running on a Ubuntu host, which supports a local registry. I could also spin up a docker container (which one?). Thanks,

https://redd.it/zy24he
@r_devops

How DevOps Implementation Reshapes Software Development Process

Custom software development process gets more complicated amid rising challenges. However, advancing technology introduces new approaches to make software development ready to meet the complexities of modern businesses. DevOps is one such approach that enables developers to ensure fast and frequent releases of stable software. Simply put, DevOps is a key set of ideas and software development practices that can improve automation and bring transparency.

Read on to know the key principles and benefits of DevOps implementation. - https://techcloudspro.com/how-devops-implementation-reshapes-software-development-process/

https://redd.it/zy2xvl
@r_devops

Suggestions for skill development beside job

Lets get straight to the point. I have Intermediate knowledge in AWS, Kubernetes, gitlab Ci, Ansible etc. Good knowledge in Python, Linux, Prometheus and Grafana. With this bundle I got my first entry level DevOps job in a mid size company (200+ dev) with a decent salary.

Our DevOps team is big and divided by some sub-teams. Production team guys take care k8s, GitLab pipeline, custom gitlab runner etc. They are experienced developers. Platform and Deployment team takes care of Jenkins pipeline, AWS, manage 150+ VMs in Proxmox, Citrix, Monitoring etc.
They threw me into the Platform team and there was no proper onboarding and mentoring. There are meetings everyday, discussions about new issues, tickets, and all members have some knowledge in all these stuff. But here I am just a silent listener. It’s like survival for the fittest. I have to find my role on my own. There are nothing to do in Proxmox as a bunch of people are skilled and always wait to work there. Citrix env also same, not that much people knows about it but not that much needed to do here. Two guys takes care aws and they don’t need any more. So I found, They do not have anyone who knows about monitoring. So grab that part and from the last four months I am doing monitoring and alerting.

It seems like I have to show them a CKA or AWS SAA cert as a proof of competence to work in them. I have a plan for the cert, but it requires time. If I wasting time on learning them then may be I couldn’t learn anything what my current team is doing. We have oracle Db. If I do a course on Oracle DB, I will be busy immediately I informed my boss about it, but I don’t want to do dba stuff rather want work on k8s, cloud, ci/cd.

So, the final question is what should I learn in my spare time:

i. Things that I want to work on?

ii. Things that my current team is working with, like proxmox, Linux server troubleshooting, citrix, vmware, dba etc. to survive?

https://redd.it/zy2pgd
@r_devops

10 DevOps tools you should learn in 2023

https://blog.yusadolat.iss.one/10-devops-tools-you-should-learn-in-2023

https://redd.it/zy2uot
@r_devops

Need help to showcase my DevOps skills in resume

Hi Folks,

I have background of linux, shell scripting and azure Cloud, and managing platform operations and application services mostly I worked on back-end

I have been trying to get in to devops role

Since last few months I explored few devops tools and tried to implement my learnings
Following is what I was able to implement:

Ansible: spin two VMs (one controller vm and one target vm) and write ansible playbooks to automate few tasks
Was able to integrate Ansible Roles with Ansible Playbook

Docker: spin a vm and deployed containers
Here I explored docker commands, and writing a dockerfile and how it works

Kubernetes: deployed clusters, pod used node port, cluster port
Creating a k8s deployment


Nagios: deployed a vm where installed nagios another vm where I installed apache service and configure nagios to monitor the apache service on another VM

Jenkis: again here deployed vms configured jenkins agents on nodes, created and ran jenkins jobs, created a CI/CD pipeline triggered by Git Webhook

I am not sure how do I present this in my resume to target devops roles
Not able to articulate, or frame what I am able to do so that it attracts any recruiters attention

If any of you could give insight or help with how you would showcase above in Resume, Please guide me

I am not sure if above even counts as skills😬😅 but I really want to go into DevOps and have not got any exposure in my current company

Kindly help!!!
Highly appreciated

Ps. I have working experience with Ansible and carrying out jenkins deployments but this is less as compared to my other experience with the skills I mentioned at start and doesnt really stands out in my resume

https://redd.it/zy61k9
@r_devops

If there are layoffs are consultants/contractors the first to go?

I work for a fairly large organization, and each team seems to be made up of about 30-50% consultants/contractors. If there are cost cutting measures in place would these folks be the first to go?

https://redd.it/zy958t
@r_devops

Confidential GitLab?

A tutorial on how to have your own on prem GitLab always encrypted so no one can get access to sensitive code: https://edgelesssys.medium.com/why-you-should-deploy-your-own-confidential-gitlab-8e7a2bb93a92 . What do you think?

https://redd.it/zxzxg8
@r_devops

Need Help!! Stuck with giving access

Hi everyone,

Posting second time here regarding this, as I need inputs on how to implement this.
I’d be grateful.

I’m working in a jr devops role and I’ve a challenge with me right now. We’ve around 200 VMs on Azure, which we use az login to login to the machines. We need to give access to a third party user via a jump server to all of these machines to login and run a security scan. How do I give them access to these machines ?

https://redd.it/zwxui5
@r_devops

KeyCloak: alternative minimalistic UI?

Hello together :)

I want to include KeyCloak into a software project, which is delivered within K8s within the cloud or directly onto customer hardware.

All the permission-settings etc. should be done by the customer. Keycloak can be very complex from perspective of casual office worker so I want to provide an alternative UI that will be embedded to my software-solution (consistent UI/UX)

So my questions are:

\- Can every action in KeyCloak be performed though the KeyCloak-API as well?

\- Do you know any project like this? Maybe anyone has shared a minimalistic keycloak UI on GitHub or somewhere. Could not find anything useful on my own :(

​

Much thanks in advance!!

https://redd.it/zyeni9
@r_devops

Visualization/mapping tool?

Does anyone have recommendations for a visualization/mapping tool that will plug into my existing AWS setup and give me a dashboard/“one plane of glass” to see my entire infra setup? Primarily wanting to see networking and resources connected. IE want to be able to see these subnets belong to this VPC and these resources are in these subnets with these security groups attached, all in one place. These ec2 instances are all part of this autoscaling group. Etc etc etc.

Working in a very spaghetti infrastructure so its terrible trying to untangle it all and theres no existing way to get a 1000 foot view of the setup without combing through aws itself. In addition would like to be able to get a “mega map” into documentation and be able to show biz units as well.

https://redd.it/zwj6th
@r_devops

Migrate AWS Kafka to newer version without downtime ?

Im just curious how ppl do stateful apps migrations. Keeping rabbitmq and kafka up to date seems painful.

https://redd.it/zyjktp
@r_devops

IaC Rookie Questions

Provisioning and deploying services by hand has finally pushed me to my limit, and I've forced myself to sit down and learn how to deploy my infra with code.

I'm looking for some advice on a deployment method for my hybrid microservices:

Option A: Run deployments independent from code builds, intending to run them once to spin up services at the beginning of a project and then only rerun them when tweaks or updates need to be made

Option B: Bundle the IaC deployments, integrating them into their respective microservice code bases so that on each deployment of the software, my IaC deployments will run and deploy if resources are missing or update as necessary.

I'm leaning towards option B, but A would lead to faster build times and potentially be easier to maintain. Of course, I wonder if that's true, as this is my first go.

An aspect I like about option B is letting each microservice be responsible for what it needs and handling spinning up resources for different slots like dev, QA, staging etc...

I'm using Azure, basic ARM templates for now and GitHub Actions. I will likely migrate to Bicep or Terraform or something once I have my head wrapped around all this, but that's a convo for another day :D

https://redd.it/zyh1i7
@r_devops

DevOps security Question: public EC2 Instances

Hi All -


I'm building a Python task to list all of my publicly accessible EC2 instances (I'm using an unSkript Jupyter Notebook for the call, so the call into EC2 looks different than vanilla Python):

    ec2Client = handle.client('ec2', region_name=region)
    res = aws_get_paginator(ec2Client, "describe_instances", "Reservations")

    result={}
        # Iterate through the list of instances
    for reservation in res:
         for instance in reservation['Instances']:
            #print("instance",instance)
            instance_id = instance['InstanceId']
            public_DNS = instance['PublicDnsName']
            if len(public_DNS)>0:
                public_ip = instance['PublicIpAddress']
                result[instance_id] = {"public DNS": public_DNS,"public IP":public_ip}
    return(result)

This works great.

I can further use the

instance['LaunchTime']

to filter for instances that launched in the last hour (24 hours, etc.). (the use case is creating a "Hey - did you know there's a new public EC2 instance in your Cloud?" type of alert).

However, I can't find a way to find out when a SecurityGroup was added to an instance. Is there an easy way to determine the timestamp? (this would allow for the alert "Hey did you know that Instance i-xyz123 became public in the last hour?")


Thanks!

https://redd.it/zwojuf
@r_devops

What should I ask mid/senior-level DevOps applicants in an interview?

Hey folks,
I'm a DevOps intern (currently first and alone) at my company. We now have a requirement for mid/senior DevOps engineers, as some clients are asking us to handle their entire DevOps department, primarily consisting of implementing DevOps with cicd, Iac, Cloud architecture, and scalability + availability for the starters.


The issue is, except me, everybody is ONLY and ONLY experienced developer, and when we sit and ask the applicants, the questions I feel we are asking aren't doing the justice for the post we want the employee at.
I, being a student & intern, still holds huge knowledge in my field, still, even though I feel my questions are too theoretical or easy, also one mistake we did was, we didn't set up any assignments so there is a huge no. of weed in the applicants with high but shallow experience.
Can u suggest to me how should I conduct the interview, like should I also start asking them to do some practical stuff in the interview?
Also how long an interview should go, as there is so much to ask, to test them, even 1hr seems less.


Any response will be appreciated, thanks..!!

https://redd.it/zwt1rd
@r_devops

Looking for job advice- struggling in new role

I've been working as a jr DevOps engineer for a few months now (I previously worked as a Java dev) and I desperately want to quit; I'm wondering if my situation is fairly typical and I'm being overly critical of my org, or if this is objectively bad and I should be looking elsewhere for work.

​

I'm working on a team of about 10 people to maintain a decent-sized software suite for a few hundred users. (I feel like we're a little overstaffed and not doing enough, but that's beside my point.) There is virtually no documentation of anything in the environment, the little documentation that does exist is way out of date. Whenever I ask anyone for information I'll get a different answer from each person; even for something as simple as starting a service, 3 different people will provide 3 different answers and they're often all wrong. There's no correlated logging and no monitoring of the environment- users complain directly to the ops team if services are down. It's also extremely difficult to learn what is supposed to be happening because everyone kind of does their own thing, so someone might decide to test out a script and bring down a node, but someone else might notice the node is down and try to bring it back up during this testing thus frustrating both parties and making it hard to determine what is supposed to be happening at any given time. These problems have all been brought up in team meetings and one-on-ones with managers, but there never seems to be any action taken. What should I be doing to change my situation- is it to keep trying to make changes where I am, or does this sound like a lost cause?

https://redd.it/zwk2mm
@r_devops