Looking to get feedback from DevOps/Engineering Professionals!

The startup I'm working with is looking for SaaS leaders like you to provide feedback on a new automated solution they are building for the DevOps/engineering community. The goal is to enable SaaS companies to quickly automate software deployments to the cloud using a visual interface, saving users time by not having to create 1,000+ lines of configurations. This solution is being developed for companies that don’t have a large engineering team.

We want to show you a prototype within the next couple of weeks. This will take less than an hour. Please book here: https://calendly.com/d/zvr-39k-95x/opscanvas-prototype-review 

Thank you for your time in advance.

https://redd.it/10vl52p
@r_devops

Any government GS employees that are DevOps? How's work/life balance?

A friend of mine is a GS13 and the way he explained it is that all he does is oversee architectural meetings with his team and contractors. Basically building out, deploy, and provide support for cloud environments (mainly Azure). Says he gets to telework but comes in sometimes out of boredom. Has a set schedule. The contractors handle all the off hours support. He asked me to apply for a role, but I'm hesitant. I make WAY more in my current role in the private sector. It'll essentially be a pay downgrade, but great benefits and a pension. Was wondering if any federal employees can chime in that worked both public/private sectors? Is a GS position worth it with even with less pay?

https://redd.it/10x1vrq
@r_devops

How attached are you to production?

I often find myself checking in on weekends/after work to make sure everything is fine, even though I am not oncall.
When something happens - I have a real strong sense of ownership, trying to find RCA to remidiate from the cause.
However, I sometimes feel that's not shared for everyone. Seems to me like some people just want to pass on the crap to the next shift for them to solve.

How is this for you? Do you feel attached to prod?

https://redd.it/10x3o3m
@r_devops

Best practices for setting up ansible servers?

So at work we have about 2000 windows and 2000 linux servers, we do not use ansible tower for any of them (nor do we have any plans to do so). However, many departments runs the occasional ansible job. Some use it a lot, some system administrators use it to quickly set passwords and login rights. Others use it for openshift, elasticsearch, logstash and Kibana.

Our linux servers are almost al RHEL based and we use vault for secrets.

Currently the system works like this

Log into a private very restricted jumphost with your administrator user.
Log into ansible-runner from this jumphost (this is done as root!)
Here ansible jobs can be run against hosts, given that the host has been set as an ansible host. (This permission is also very restricted). Mostly single playbooks, very few roles, little to no system.
Some projects are git controlled others are not

My plan is to upgrade this system, making it more traceable. However, I would also like to not add too much friction for our users. Only a handful of projects are using it, and our main CMS is much better protected. The security is quite good as you need both access to a restricted jumphost, and the target host also needs a very specific role to be reachable

My current plan is something like the following:

Setup `ansible-runner-prod01` and `ansible-runner-prod02`, these are used to configure each other
Set a policy among our employees that access to these machines should be done through another jumphost, and login as a admin user, not root.
Each department will have their own ansible user with username and password stored in vault.
Each department will be given their own git controlled folder.
Ansible jobs will be run through a wrapper shell script [deploy.sh](https://deploy.sh) which logs into vault and then logs in as the ansible user.
Finally hosts can have different roles, so for instance only department XXX can run ansible jobs against it.

Thoughts? Are there other ways, better ways, more secure ways?

https://redd.it/10x2tld
@r_devops

Companies stealing/taking credit for DevOps Roadmap

https://roadmap.sh/devops created a fantastic roadmap for DevOps years ago, I've been following it for quite some time and I see they keep adding updates, changes and edits to it.

On LinkedIn I came across a post from some company called "Decipher Zone" with the exact same roadmap- LITERALLY the exact same, but it's just a got their companies logo watermarked on it and taking credit for it without giving all the same resources as roadmap.sh does.

https://www.decipherzone.com/blog-detail/devops-roadmap \- here is the link.

​

I know there's nothing I can do about it, just wanted to vent. The original creator is https://www.linkedin.com/in/kaamranahmed/ \- and he does not work for Decipher Zone.

Anyways, that's all. I'm not looking for any particular response, just felt like putting it out there.

https://redd.it/10x6kdz
@r_devops

devops generalist vs specialist

Are you expected to learn all the devops tools in depth or be Jack of all tools and master of none. As there are so many tools to learn and you need to know good knowledge about networking and a bit of coding to rectify errors in dev team etc.,

https://redd.it/10x65mv
@r_devops

Noob Question About Chef Attributes

So in a chef cookbook I am looking at, there are a bunch of

default[value\][value\] etc etc,

However, in the recipes, there are a bunch of values with the syntax

node[value\][value\] etc.

I don't see anywhere node values are set, where are the recipe's getting the node attributes from?

https://redd.it/10x403j
@r_devops

Is it a good idea for a CMS system to generate a CloudFormation template for the backend of a website?

The idea is about a CMS system that makes it easy for the user to create and manage their website's content. The CMS allows the user to directly edit content files in a GitHub repository through its user-friendly interface. This same repository holds the source code for the website, which is built using NextJS. The website's code includes API functions that fetch dynamic data from a database or authorize users.

The CMS takes things a step further by automatically generating a CloudFormation template, which can be uploaded to the user's AWS account. This template sets up the backend infrastructure for the website, including the database and authorization configuration. By using this template, the user can quickly and easily set up the backend for their website without having to worry about managing the infrastructure themselves.

https://redd.it/10x88eu
@r_devops

If you could define your own responsibilities...

I've had the golden offer, a job where I define my own responsibilities in a senior role within a large tech organisation

​

If you were in this position, what would you do?

https://redd.it/10x66dd
@r_devops

I want to get certified on GCP, Azure or AWS. Which organisation would give me the best future prospects?

Title says it all really. What do you think?

It feels like AWS is more popular.

https://redd.it/10x62ur
@r_devops

Master's Grad in 2022. Cannot land a first Round interview.

Hello y'all, Trying to get into Mid - Sr : SRE/DevOps

Having a tough time since I graduated and can't seem to land even first round interviews. Spent 100+ hours on this resume thinking something I am doing is wrong.Still unable to land even a SINGLE interview round!

I know my DSA's, have 3+ years of legit experience but things are getting bad very steeply. Shooting a shot here to see if someone can critique my resume.

XXX-XX-XX | XXXX, Open to relocation | LinkedIn Profile | GitHub | [email protected]

An AWS Certified Solutions Architect with a master’s degree in Computer Engineering and 4+ years of hands-on experience in developing event driven cloud native applications in public clouds like AWS with services like Lambda, Fargate, ECS,S3 etc... I am highly skilled in platform reliability, microservices design, serverless technologies, test automation and DevOps practices.

SKILLS:Languages (4+ years): Python (boto3, NumPy, Requests), Bash (Linux/CentOS), JavaScript (React/Redux/Node).

AWS services (5+ years): AWS CLI/SDK | Lambda, Fargate, CloudFormation, ECS, CloudWatch, S3, RDS, Kinesis.DevOps (4+ years): Network Administration, NetApp, Docker, Kubernetes, Jenkins, CircleCI, Git, GitHub.Amazon Web Services (5+ years): AWS CLI/SDK, Serverless Framework, AWS Backups, VPC, API Gateways, Lambda, EC2, EBS, EKS, CloudFormation, CloudWatch, S3, DynamoDB.

Web Development / Others: Authentication/Authorization (OAuth, JWT, RBAC, SSO), Microsoft Power BI, Databases (MySQL, PostgreSQL, Redis).

PROFESSIONAL ACHIEVEMENTS

Software Engineer – DevOps 2018 - 2021Organization Durham, NC

· Raised KPI’s expected in an DevOps role, consistently delivered 99.99% SLA, took ownership of all infrastructure for release/change management, performed zero downtime deployments, and completed a fully automated software testing system in under 2 months.

· Spearheaded agile teams in implementing well architected frameworks/best practices in AWS which led to successful ISO 9001:2015 Quality Management certification for XXXX.

· Patched 500+ issues in React/Redux front end systems, Relational Databases and configuration management.

· Created/Managed custom AMI’s, Docker Images and Kubelets to complete deployments. Performed patch management for EC2 instances, shifted security and QA practices to the left of SDLC.

· Authored reusable Infrastructure as Code templates (CloudFormation, Makefiles) for dynamic provisioning of AWS resources like EKS, EC2, Lambda, S3 within private/public VPC’s on AWS cloud.

· Authored workflows that preprocessed and analyzed code (CircleCI, Jenkins, Veracode) to identify many software vulnerabilities in early stages of SDLC. Competitively performed Code Reviews for Python, ReactJS and Infra.

· Managed Public/Private VPC’s. Ensured highly available and resilient architectures for enterprise software platforms.

EDUCATION

Master’s in Computer Science Jan 2021 - Dec 2022

(Some research information here) GPA: 3.69

Bachelor’s in Computer Science and Engineering Aug 2013 – May 2017 GPA: 3.75

​

​

https://redd.it/10x5b4w
@r_devops

How to set up alert monitor for data dog over a function of time?

Trying to setup a data dog monitor to check if a pod is in a certain status for over ten minutes? How can I do this? Datadog sub Reddit is locked and I could not find the relevant information in datadog docs, maybe I’m not looking in the right place. Help would be appreciated!

https://redd.it/10x4rv3
@r_devops

A better way to manage secrets in Kubernetes

Wrote an article on how to better manage secrets in kubernetes by using a custom operator i made. The operator will fetch secrets and put them in a Kubernetes secret and can auto reload deployments that depend on the fetched secrets. You can think of it like a wrapper around native kubernetes secrets

Article: https://maidul.medium.com/kubernetes-secrets-management-on-autopilot-36e0c6373024

https://redd.it/10xjxtf
@r_devops

Looking for DevOps learning partner

Hello everyone, I’ve recently started learning devOps and also looking for someone who is eager to learn and share knowledge together.
I intend to study AWS, Azure DevOps, Docker, Kubernetes, Terraform, an other related technologies.
Hit me up if you’re interested

Discord username: Illusive man#1442

https://redd.it/10xko9j
@r_devops

work sucks

The best vote to end this wins, submit your ideas! maybe your idea will make the news!!! how exciting!

https://redd.it/10xmibq
@r_devops

Do these sentences make sense?

I'm a tech writer interviewing DevOps engineers who are english as a second language. I just wanted to ask, if these sentences would make sense and are properly ordered. I know some of the tools, but not all.

Just want to make sure it's not something redundant like I know adobe creative cloud, photoshop, illustrator, creative suite, figma...

What tools for DevOps have you worked with?

”I’ve worked with many tools with CI/CD like Jenkins, ArgoCD, Github Actions, Ansible, Terraform, CloudFormation, Docker and Chef."

What's your ideal tech stack?

"Docker, Python, Kubernetes, AWS EKS, ArgoCD, Github Actions, Terraform Cloud. I'm already working with most of them."

https://redd.it/10xmwsr
@r_devops

Don’t have a CS degree, but want to learn CS fundamentals and practices (not necessarily a specific language). Where can I do this?

I graduated with a B.S. in IT (not CS specifically) in 2011, so I’ve been working for over a decade. Help desk, sysadmin, systems engineer, etc…

I’m currently a “Software Engineer”, but I do DevOps. Working with AWS, Terraform, Jenkins, Kubernetes, etc… It’s more Ops than Dev.

I self-learned Bash scripting and Python, but struggle to keep up with a coworker who has a legitimate CS degree. When he starts talking about “strongly-typed object-oriented programming languages”, I get lost. I just write bad Python scripts to make API calls, process YAML files, etc…

Where can I learn programming fundamentals? I don’t want to only learn a specific language, I want to learn programming jargon, best practices, architecture, etc…

I found this course on edX which I’m considering signing up for. Thoughts?

https://www.edx.org/course/software-engineering-basics-for-everyone

https://redd.it/10xmrgv
@r_devops

How can I implement terraform cd in bitbucket server?

Currently we are using bitbucket server managing our codes, we also has Jenkins, I want to implement terraform cd like github action:

comment "/tf plan" in PR-> run terraform plan, output result to comment and slack

comment "/tf apply" in PR -> run terraform apply, if apply succussed, then automatically merge PR

I have used github action, the above procedure is easy to implement with an operator server

I am wondering whether bitbucket server can easily achieve this or not.

Could you give me some ideas?

https://redd.it/10xp0q9
@r_devops

Github Actions vs CircleCI for 'advanced workflows'

Hello!


I'm currently considering to move our sizable CircleCI setup (multiple pipelines, about 50 active developers) over to Github Actions, with pricing being one of the main arguments for doing so.

I have at least basic knowledge and some experience with both tools.

One thing I keep reading while researching this is that "CircleCI has better support for advanced workflows", without explicitly stating what they mean exactly with this.

Could anyone point me to specific features/workflows that are supported by CircleCI that we'd be missing in Github Actions? And are there any arguments I should know off for sticking with CirclecI?

https://redd.it/10x39cx
@r_devops

Start a bat file remotely which never returns anything (jmeter-server.bat)

So we are doing distributed testing of our web-app using JMeter. For that you need to have the jmeter-server.bat file running in background as it acts as sort of a listener. The problem arises when one of the slave machine out of 4 restarts due to the load and the test is effectively stuck right there as the master machine expects some output from the 4th machine. Currently the automation is done via ansible-playbooks which are called in Jenkins. There are more or less 15 tests that are downstream to one another. So even if one test is stuck, the time is wasted until someone check on the machines.

​

Things I've tried so far:

​

1. I've tried using the Windows Task Scheduler and kept the jmeter-server.bat to run without any user loggin in, but it starts the bat file in background which in-turn spawns all the child processes in the background as well i.e. starts Selenium Chrome in headless mode.

2. I've tried adding the jmeter-server.bat in startup and configuring the system to AutoLogon without any password to trigger a session which will call the startup file. But unfortunately the idea was scrapped by IT for being insecure.

3. Tried using the ansible playbook by using the win_command but it again gets stuck as the batch file never returns anything.

4. Created a service as well for the bat file, but again the child processes started in background.

https://redd.it/10xrhzr
@r_devops

Using renovatebot to generate one PR per file, regardless of how many changes

Hi folks,

Recently I wrangled my renovate config to ensure that I'd get a single PR generated per-file, even if that file included multiple changes from multiple "managers". In my case, I needed to combine helmrelease updates, as well as helm values (for image updates).

I wrote up the process here: https://geek-cookbook.funkypenguin.co.nz/blog/2023/02/07/consolidating-multiple-manager-changes-in-renovate-prs/

I'd be grateful for feedback, or suggestions for improvement!

D

https://redd.it/10xqrsy
@r_devops