What are some great platforms to help implement devops practices?

Never used one but i have a feeling there are platforms that can be used to define pipelines / workflows for infrastructure provisioning, configuration management and more that are both operations and developers friendly.

For example, developers could use that platform to provision on demand environments after that pipeline / workflow was configured. That workflow will connect to defined secret and configuration management system, provision new kubernetes environment for developer, connect to helm repository and deploy all applications and create + provide dns record for that new environment.

Platform that will allow for one place to provision everything and monitor status of all that is provisioned.

Maybe help with blue / green or canary releases.

Are there good platforms like this that worth checking out?

We're running on kubernetes (GKE/EKS...), using helm, terraform and planning to introduce argo project.

https://redd.it/112fwpw
@r_devops

From Head of Technology to Head of Infra

Hello r/devops !

I need some help from the seasoned folks around y'all

I've started my career as a developer, went all through the hoops until I landed as Head of Technology in a medium sized company

In this role I was overlooking everything from product, dev, infra, 3rd parties integration etc etc

I've also had some surface-level hands on experience with clouds (mostly spinning VMs and configuring GWs/FWs)

I was recently offered a Head of Infrastructure role in a large (think Fortune 500 large) company,

While I understand the basic terminology and I have a rather good grasp on architecture, I've never dealt with such scales.

Here's where you come in -

Any resources, any blogs, podcasts, books, YouTube channels and the likes you can recommend I consume before stepping into the role.

Anything and everything goes, my goal is to study as much as possible without a specific focus before I begin.

Thank you

https://redd.it/112gzv8
@r_devops

Blog: Why CI/CD security starts with source code

Great blog article on the utility of shift left methodologies & modern devops security tooling

https://www.arnica.io/blog/why-ci-cd-security-starts-with-the-source-code

https://redd.it/112gxmt
@r_devops

FutureStack Roadshow returns to Sao Paolo and San Francisco! Join the New Relic team onsite for free workshops, food and drinks, and demos to up your observability game. See you there!

Hey, r/devops!

Great news: FutureStack Roadshow is back! We have two exciting, free, in-person upcoming events:

[FutureStack Roadshow Sao Paolo](https://newrelic.com/events/2023-03-08/futurestack-brazil?utm_source=reddit&utm_medium=community&utm_campaign=amer-fy23-q4-futurestack%20san%20francisco) \- March 8, 8AM - 5:30PM @ Casa Bisutti
[FutureStack San Francisco](https://newrelic.com/events/2023-03-15/futurestack-san-francisco?utm_source=reddit&utm_medium=community&utm_campaign=amer-fy23-q4-futurestack%20san%20francisco) \- March 15, 9AM - 5PM @ SPIN San Francisco

# What is "FutureStack" and why should I attend?

* Learn how to elevate your observability game during hands-on workshops and courses.
* Form a deep understanding of what your peers are doing in a way that’s only possible through interactive in-person sessions.
* Plug into exclusive technical breakout sessions not available online and take your know-how to the Nth degree.
* Be the first to see new innovations New Relic is bringing to market.
* Beat the New Relic team at Ping Pong and gain bragging rights!

Hope to see you there!
\-Chris & the team @ New Relic

https://redd.it/112kfso
@r_devops

Why Kubernates instead of PaaS?

I really don't see the benefit unless very specific use cases. Specially for any company below corporation level. Why not just use PaaS (EC2 / Azure App Service)? They manage themselves. They auto-scale. They can be maintained by a trained monkey. CI/CD is very simple to setup.

Why are people instead choosing to host their solutions in Kubernates? Hosting costs of PaaS can't be the reason, since having to hire a DevOps Eng to maintain your infrastructure is way more expensive than any PaaS out there.

What am I missing?

https://redd.it/112ljga
@r_devops

Pivotal Cloud Foundry Manifest Templating

Hi all - I was wondering if anyone here know of any sort of templating software that works for PCF manifests files in a similar way that Helm charts are used for k8 deployments?

https://redd.it/112narm
@r_devops

Infrastructure and Security

Hey devops, I’ve been a SWE for 5 years and have worked on individual pieces of infrastructure or application level code in various capacities and trying to wrap my head around everything fitting together better.

As a learning experience / future showcase for projects I am building a blog (woo 1 more to the list). It will have a frontend hosted on s3, a backend returning some data. Route53 dns will point to s3 making api calls and rendering html. I have my api service containerized with a port exposed mapping to the api running. The api has some endpoints with no request authentication and some using oauth2 session (1 day expiring) flow. I want to put nginx running in a seperate EC2 to sit between api and frontend but wasn’t sure if this added any level of security since the instances are still technically public if anyone visited the exact ip. I setup nginx with ssl. I am led to believe this is overkill if users won’t be signing into the site.


Overall a question about security and the roles each pieces plays in completing the puzzle. Thanks for reading.

https://redd.it/112ocil
@r_devops

what questions were asked to you in your interview for Devops role?

Share the questions (whatever you remember) maybe tools wise of possible. I know this is a big ask but if we look at the number of people are here in the sub, this thread could be a reference to all the future aspirants to devops role and not waste time on YouTube videos on devops interview questions. You can also suggest channels which are genuine to check for interview preparation for Devops role. Thank you

https://redd.it/112mntr
@r_devops

I'm completing my Bachelors' in Aug 2023 and I want Devops to be my first job.

I'm currently starting my final semesters of my Bachelors' degree, I'm already a Devops Intern at a startup with a stipend of 242USD per month (I feel very underpaid), and I literally can not find any viable job openings for a fresher like me which does not have 3+ years of relevant work experience.


I want to know how a fresher can get started in Devops in 2023. I've worked on a lot of things, from pipelines to kubernetes, docker to VMs, serverless, NoSQL, cost optimization, server administration, I've worked on a lot of projects, made reports, case studies, brought up multiple solutions to a problem and moulded my work as per the client's needs.

​

I understand how the role of Devops requires experience. But how can I have experience when there is no place to begin from? I do not like development, yet I can write up lambda functions, work the backend and on APIs, I can write scripts and automate as well. I love distributed computing, I love cloud and I love devops. I want a career in it. But how do I even start?


I apologize if the post comes off more like a vent, but I could genuinely use some guidance and advices. Please reddit, do your magic.

https://redd.it/112olok
@r_devops

Explain Why Kubernetes and Containers are Better Than VMs Like I'm 5.

We run a large monolithic ASP.NET (ported it ASP.NET Core from full framework) web app on AWS Elastic Beanstalk and it's been working pretty well for us. Deployment times are pretty slow (we use rolling updates) and AMI upgrades and beanstalk system upgrades sometime cause issues with our eb extensions, but it's fixable and well understood by now. I know containers and Kubernetes is the new standard in cloud deployment, but I'm struggling to grasp the benefits of using it versus an auto scaling cluster of VMs. I heard Kubernetes is complex and requires some expertise to run. At the same time, Beanstalk is pretty user friendly on the surface.

https://redd.it/112r20w
@r_devops

CodeSmash - Building in Public - Add Stacks to the Canvas

https://youtu.be/aBT0qPnl42U

Getting closer to the MVP! This time, we show how you can add AWS resources to your canvas and make them part of your stack.

https://redd.it/112n6c4
@r_devops

optimize devops using machine learning

What are some of the ways the devops process can be optimized using machine learning?

Has anyone seen any research papers on this topic where data from git or jira or similiar tools is used as input in machine learning models to optimize devops?

Can't find any such research papers

https://redd.it/112t2aa
@r_devops

Working using a in-house tool at early career stage

Background-
Hello, Junior DevOps Engineer here ( atleast by profile name ) and I have been using only an inhouse platform tool for infra provisioning since the start of my career ( aug, 2021 )
I do use various other tools and tech aswell in my day job ( jenkins, AWS, nexus, git etc ) but my majority of my work is using a inhouse framework that uses terraGrunt for infra provisioning and it has the end product are K8s pods which run the infra ( there is a lot of things in between but it’s all learned from the platform team and not researched by me ) been like this in my 1.5 years exp.

Question - Is it good for my career and upskilling in long term ( I’m 23 years old) to be using this tool for so long and also going forward or is it not a good thing for a newbie.
Out of all the things I do, I’m best at running this tool.


PS. Sorry for my english, it’s my second language

https://redd.it/112spgz
@r_devops

What do you use for DDoS prevention on your Kubernetes cluster?

I've been researching a Firewall for our GKE cluster, mainly for DDoS prevention and I haven't seen anything but Google Cloud Armor, I've tried Falco and it seems it doesn't detect DDoS -or I couldn't get it to do so", so what are you using for your clusters?

https://redd.it/112utrq
@r_devops

Are we gonna see end of ops in Devops.


I often learn that in Devops - developer roles / jobs seems to be more important and a necessity for Devops role to exits and devops engineer seem to know more about ops and it's associated networking etc..

https://redd.it/112vj5d
@r_devops

Deep Dive into open-appsec Machine Learning Technology

https://www.openappsec.io/post/deep-dive-into-open-appsec-machine-learning-technology

https://github.com/openappsec/openappsec

https://redd.it/112vc6e
@r_devops

Fiberplane Providers: Open-sourcing our plugin system to connect to observability tools

Hi, my name is Arend and I’m one of the engineers at Fiberplane. We’re excited to share that we’ve open-sourced our plugin system, which lets you connect your favorite SRE tools to Fiberplane. Prometheus, Elasticsearch, and Loki are already plugged in, with CloudWatch and Sentry providers now being developed in the open.

Fiberplane is an incident resolution tool. In a Fiberplane notebook, you can debug infrastructure, resolve incidents and run postmortems while resolving incidents. You can stream output from your terminal straight into notebooks using the fp CLI command and display graphs and query logs straight from Prometheus, Elasticsearch, and Loki. Fiberplane also comes with templates that let you generate runbooks.

Fiberplane Providers compile to WebAssembly and can run both in the browser and in the Fiberplane Daemon, which you can install inside your Kubernetes cluster. Now that our entire provider stack is open source, you can create custom integrations with observability, monitoring, and CI/CD tools, issue tracking, and version control.

To ease the creation of custom providers, we’re also open-sourcing our Provider Development Kit (PDK), written in Rust.

What integration would you still like to see?

https://fiberplane.com/blog/opensourcing-providers

https://redd.it/112xyl4
@r_devops

Nexus HA free alternative

On our company, we use Sonatype Nexus regularly and while it works perfectly, there's no High Availability option of it for free.

Can you guys recommend me any alternative that covers these requirements?

https://redd.it/112xymh
@r_devops

How long should your PR tests take?

I have a process which will build and deploy our entire application to an ephemeral build server and execute some automated API test cases against the application, the entire process takes about 22 minutes

To me, having a full battery of tests cases executed against your PR in a way that developers are unable to do locally (devs cant run the full application locally because of memory constraints) totally justifies the 22 minute wait time, it has already demonstrated value because our daily build test cases are failing less frequently and we catch things earlier. At least one of the senior devs on my team disagrees with my position.

but is 22 minutes too long? heck lets just round up and say 30 minutes. how long does it take a developer to create a PR, have it tested, and merge it in on your team?

https://redd.it/112zqwx
@r_devops

Which frontend framework do you mostly use?

I know DevOps is mostly backend but every once in a while there is a need to do some front end stuff, which frontend framework do you all mostly use?

https://redd.it/113132o
@r_devops

Creating a Platform for internal use of developers

Not sure if this is the kind of work that a DevOps engineer do, because currently the company that I'm working with is they would like us to create a platform that the developer will be using to enhance the developer experience can you provide any insight on this.

https://redd.it/112zv20
@r_devops