let's talk about Networking knowledge in Devops.

How much networking knowledge should a devops engineer should have and is it something one learns as they work and one is expected to take a course and learn them. If you can even suggest a book, it'll be grateful. Remember for Devops role.

https://redd.it/113qdft
@r_devops

Doubt about setting up an ERP on AWS

Good morning I have a question for my devops friends maybe they can help me.

A customer has an ERP on a 16gb RAM 2x2Tb hosting with a Postgres database with about 90gb currently occupied.

They need to move this to AWS, i.e. set up an ERP on AWS and migrate the data from one side to the other.

They also put emphasis on backups.

I have been thinking about these 2 options:

EC2 + Odoo

AWS Smart Business

Can you think of a better option and how much would it cost?

https://redd.it/113pmsw
@r_devops

Ignore CPU requests of workloads DEV/TEST

At the moment our devs can't specify the resource requests for the workloads per environment.
So on our dev/test clusters all CPU cores are reserved and no new pods can be scheduled. But node utilization is no where near to full.

How can we let the scheduler ignore the CPU requests of the pods, so they can get scheduled without wasting money/resources by adding new nodes?

Thanks!

https://redd.it/113sekv
@r_devops

It's been 1.5 years and I feel like I've grown very little as an engineer?

This is my first role out of college, I graduated smack in the middle of the pandemic and had been applying for 6 months before getting this role so I had to take it. After 18 months I've began to regret not waiting it out for a more SWE related position. I am currently in a junior DevOps role at a bank and while I'm able to complete the majority of my tickets I honestly hate my work, my standing on my team and my confidence in myself as an engineer.

There is little to zero documentation on any of the processes, meanings, why or what's of our systems. What does exist is usually put together awfully and is not indexed correctly meaning I can't even search for information I need without asking a senior or mid-level engineer every time and I hate doing so. It's been 18 months I feel like I should have a better understanding of all this stuff than I actually do. We work with Kubernetes, OpenShift, Docker, Jenkins, etc. but I still cannot tell you what exactly all these things do in conjunction with one another. To make matters worse I was originally hired to do programming related work but 1.5 years in now and I haven't coded a single thing. My work entirely consists of YAML files basically and I've gotten incredibly rusty with my programming skills. LeetCode Easy is giving me problems level of rusty.

In addition my company has fired or had quit 4 different mid or senior level engineers in the timespan since I joined and 2 of those were people who were immensely helpful to me at the beginning of my stint. The remaining mid-level and senior engineers and those who have been hired since barely interact with me no matter how much I try. I will message the lead engineer for the team with questions or things to review and he will just leave me on read. The junior engineer prior to me who was in my role also left within 6 months of joining the company....

I have my performance review coming up in a week and am lost. I am individual contributor on the work that is assigned to me usually and don't require much help but on things I don't know of that are larger tickets there is nowhere for me to go to find information. This role has stunted my abilities I feel like and I wish I never started out in a DevOps role. I have zero idea if my review will go well or if I'll be placed on a PIP, this is my 7th manager in 18 months as well and the first manager to actually have worked on the same team as me even though he's been gone on vacation for 12 out of the 17 days since he's been assigned to our team and as my manager. What should I do? The pay here is nothing crazy either in a HCOL area. I don't feel like I'm growing professionally or financially.

https://redd.it/113tidy
@r_devops

CI/CD Pipeline example for Homelab

Hi all

I am looking to find a pretty typical example of a ci/cd pipeline that I could implement in my homelab. I am about to start learning Rust and wanted to incorporate my lab into it somehow.

Something that is pretty standard for the industry to get as close to the real thing as possible.

Just starting out, so any help would be awesome!

https://redd.it/113v8cv
@r_devops

Data-driven decisions in OSS helm-dashboard

How to make decisions in OSS?
TL; DR - ask the users: https://docs.google.com/document/d/1E-gIa-EV7i3qrfajoIYYOCY18usvSeNyIdB9lREc0kw


Helm dashboard (https://github.com/komodorio/helm-dashboard/) is my first big open-source project, and during the last couple of months, we at Komodor have consistently been working on improving it (We released a GA and got 3K stars in a couple of months), but we were scratching our heads with the future roadmap!


The tricky part of OSS is that it's hard to know what should be developed next; we tried a couple of methods to make this work:
1. Reach directly to the users - but there's no easy way of doing so (we don't store any identifiers of who is using the project)
2. Github issues - not many people are actively opening GitHub issues, so you are left mainly with people reporting severe bugs or issues.
3. Reading about the problem in different places: Hacker news, Reddit, etc. - hard to get concrete insights.


To cope with those problems, we decided to create our first-ever user survey and ask the users and community members what they wanted (added CTA inside the product and GitHub to engage with the users).


Luckily for us, after two weeks, we got 22 answers! It might not sound like a lot, but it gives us a better understanding of where to lead the project, and it's 22 data points that we simply didn't have prior.


To make things even more transparent, we decided to share the results and the process with the community in hopes of helping other OSS maintainers.


If anyone has any feedback on the process (and the next features we should develop!) I'll be really happy to hear it :) 

https://redd.it/113wal8
@r_devops

Best Universal Date Format For DevOps Systems?

Hey!

I'm creating a secrets (sensitive information) metadata standard format to be used across multiple systems (Prometheus, Grafana, CircleCI, HashiCorp Vault, alerting tools, etc).

I'm trying to determine what date format should be used that will be able to be parsed universally.

The date standard I am leaning towards is ISO 8601.

Are there any other recommendations?

Thanks!

https://redd.it/113yaun
@r_devops

Are Terraform docs incomplete?

I'm new to Terraform and I'm starting out with Azure+Terraform. From where do I find the list of possible values that an Terraform azurerm module argument can take. For example inorder to deploy a simple Azure Web App I wanted to select a docker image from Azure container registry itself. So as per the docs it's supposed to go into the "site_config" block, but under which argument and what format , there's no example or document for it and it's frustrating. Can somebody point me in the right direction ? Thanks in advance.

https://redd.it/113xx6q
@r_devops

IT'S TIME AGAIN FOR AVIATOR'S CASUAL, OFF-THE-RECORD HANG OUT. THIS month, we'll be spending time with one Slack's productivity engineers.

Hey, everyone. Last month we ran a virtual meetup with Nadeem at Netflix that everyone seemed to enjoy. You can check out the thread here:
https://www.reddit.com/r/devops/comments/10elayg/casualofftherecordhangoutwithnetflix/
This month we're going to the same thing but with Sridhar at Slack. Same rules apply - it's going to be a very loose and pressure-free hang out for an hour or so where folks can ask questions and learn from one another. No recordings, no Aviator product talk, no salesperson calling you later. By next month we'll have a slack channel and an email you can opt into to get notified, but that's all. Anyway, 2/24 @ 2PM ET. Sign up at dx.community or this link (a google form):

https://docs.google.com/forms/d/e/1FAIpQLScHADjbCJmnrObldibEjS6c3bUSzkzJzSa8qkgthONnEKM1AA/viewform

Hope to see you there! I'll be monitoring the thread for questions/suggestions/problems/etc. Definitely welcome nominations and intros to guests as we move along.

https://redd.it/1140ib8
@r_devops

Extending my list with SLO Tools...

Hello, I updated my list with SRE SLO tools. I started to add some columns to help finding the right tool. What do you think? Do I have the right details for each tool? Is that helpful?

SRE SLO Tools — Tech Acceleration & Resilience (techaccelerationandresilience.com)

Please keep in mind that's a first iteration, I will put in more work. All feedback is welcome!

https://redd.it/1142kn5
@r_devops

Update: Self hosting app to create one-time shareable secrets - (new features)

[https://github.com/rpgeeganage/ots-share-app](https://github.com/rpgeeganage/ots-share-app)

A feature-rich self-hosting app to create one-time shareable secrets.

* Creates shareable links which valid for a maximum of **24 hours**.
* The contents are encrypted with `AES` in `CBC` mode, with a `256-bit` key. (Using [Crypto-js](https://cryptojs.gitbook.io/docs/#the-cipher-algorithms))
* Passwords are **NOT** sent to the backend server.
* The app periodically deletes encrypted content after it expires, and the encrypted content gets deleted once the web UI fetches it.
* `CLI` support.
* Multiple database connectivity support.
* `Mongo`
* `Postgres`
* `MySQL`

https://redd.it/1143koz
@r_devops

Turbocharge your terminal productivity with zsh-autosuggestions! (1mn)

https://www.youtube.com/watch?v=0r1mxuAzqS0

https://redd.it/1142ya6
@r_devops

Is cloudflare evil company?

Hello, the title says the question. Is Cloudflare can be trusted. It's offering ridiculously should be expensive stuff for free. And I am using bunch of them already. Before couple months I was just using DNS/CDN/Cache stuff now as I see they have bunch of amazingly cheap cloud solutions.

5 bucks for hosting your 100k images around globe with unlimited variation. Hosting JS applications for 1m request free, after free tier as low as AWS pricing. Global distrubuted SQL and R2 services, still amazingly low. Now they are trying MQ stuff which is still globally available.

I can understand cloudflare trying to earn little market cap but I'm really scared about price increase in short time after I build my shit around their property tech. I don't wanna rebuild some random client project after a year because Cloudflare increased prices in evil way.

And rather then cloud hosting Cloudflare was already giving free stuff years back. I don't understand how they can be this generous? How they could be earn this kinda money. Probably enterprise customers are paying our debt too but nearly half of WordPress sites in the world are behind Cloudflare, how that thing can be possible?

https://redd.it/1140kdd
@r_devops

Tips/directions for Maintaining Multiple Versions of software in GIT?

I need some specifics of how this can be done? I understand some people use branches (and avoid main or use it for highest release), others use tags but merge to main.

Example say I've got a backend application that is for a V1 of an application - and I am developing V2 that has breaking changes where it won't support V1 anymore (assume some parts of software are completely removed). I want to deploy them separately anyways so I can have V1 and V2 available for users (in my case it's a hardware limitation where V2 supports V2 hardware only but V1 hardware is still out there to users so software must still be in production and maintained).

How could I maintain both V2 and V1 at the same time? Say I have version 2.1.0 out for V2 users and 1.5.8 out for V1 users. If I need to make bug fix that affects a common thing for both - I need to put that change/set of commits into git and apply it to both V2 and V1 and release 2.1.1 and 1.5.9 with that change.

I've tried to read about this specifically but can't find something that I understand well enough. Like whats the git repo look like? can u do this with tags? If you use tags what do you merge to main? If you use tags how do you develop a new incremental version?

Does it make sense to maintain 2 versions of the software? Make 1 piece of code backwards compatible and just have it be a single code base? Or take V1 and modify it completely so that it is truly a V2 and is not compatible with V1. In the backwards compatible code I worry about it getting messy - especially if V3 hardware comes out. How to organize things so it's clear whats the code for V1, V2, V3, V++ hardware and in the case of maintaining separate versions of software entirely - there may be duplication of code or managing deployment may be more challenging.

https://redd.it/1147l3y
@r_devops

dotnet Docker Image SonarQube Scanning

Hi Guys,

Anyone here have already used docker image for dotnet sonarqube scanning?

If yes then can you please share the realiable docker image to scan dotnet projects and how it works. Thank you!

https://redd.it/11497u5
@r_devops

Datadog: why is it so popular?

My org is (finally) getting serious about observability and pushing an SRE mindset. I hear Datadog’s name come up A LOT, but not as much New Relic or Dynatrace. Not really looking for a comparison since we’ll evaluate the leaders in this space. But I’m curious what makes Datadog so much more popular? TBH, I think I was more wowed by others when they gave their demos. Is it their marketing? Are they at all the trade shows? Are the cool kids using it?

https://redd.it/114d0an
@r_devops

How to manage versioning of dockerized application ?

are there any tools just for maintaining the version of the application, we are using Azure devops for ci/cd and application is also hosted on azure servers.

Also is it a good practice to change the docker image tags from staging to production ? my manager wants to keep the latest tag of all the images for staging env but wants to change it to certain versions(different images with diff tags) when moving to production ?

https://redd.it/114dkml
@r_devops

Deploying Laravel with Docker, Nginx, Let's Encrypt SSL and Supervisor

Hey redditors! Help Needed!

I am very new to containerizing approach of deploying applications. I am trying to deploy my Laravel app to Azure using Docker and ACI. I couldn't find any well explained articles or articles matching my requirements of deployment.

I am actually trying to setup a proper DevOps pipeline, with sequence being: I push my code to GitHub, Run GitHub Actions, Build Docker Image, Push to ACR and Pull in ACI.

I attempted to build the Laravel docker image in my local environment with Nginx and Supervisor in a single image and it works well. But now I want to use automated Let's Encrypt SSL in my Nginx server. If I rebuild the image every time requesting a new SSL certificate for my server with `certbot` that wouldn't be a right idea, right? So, what is the best way to do it?

https://redd.it/114e3z8
@r_devops

Sagemaker for production services? xpost from r/aws and r/dataengineering

I need to spin up Sagemaker resources (which ones exactly TBD) for the ML folks on my team. They will be building out a new backend service that will be plugged into the rest of our application stack. We'll likely run it inside an ECS cluster on GPU instances. . .

However, I noticed that Sagemaker can be wired up with https endpoints out of the box. I've used a bunch of AWS services over the years and let's just say, I'm not the biggest fan of some of them especially the all-in-one solutions like Amplify and AppSync or dear lord, Elastic Beanstalk.

I feel like I'm going to hit limitations with Sagemaker that will drive me crazy while I am quite familiar with deploying an ALB fronted service running on ECS (or EKS but ECS makes more sense for what I'm doing).

tl;dr any reason I should stick with Sagemaker endpoints? My spidey sense is tingling.

https://redd.it/114iuun
@r_devops

I don’t know if this is a golden opportunity or a scam…

Hi all,

First time poster here. I haven’t been focused on devops at all, instead studying heavily for the past almost 2 years to be a full stack web developer. I recently moved to a new city and went to a local Jr developer meetup looking to network.

While making my introductions, I admitted I had taken a long sidetracked route to learn a good deal about bash scripting, vim configuration, and understanding the workings of my systemd-less Linux distribution.

I also talked about currently working with an old friends startup which works with VueJS, MariaDB, knexjs, ObjectionJS, HapiJS, Docker, and NodeJS. Although technically this constitutes my first web dev job, I am still very very green.

Apparently all my nerd talk caught the ear of a senior devops engineer who was in attendance. He suggested we meet to talk about a possibility of working in devops instead of web development. Prior to this conversation, I had only heard about devops in passing, and hadn’t really investigated the field.

While I was very amicable with the engineer in question, I couldn’t help but feel like something is amiss. Granted I enjoy working at the command line and know the basics of ssh, bash, git, and the other tech I mentioned above, but I’m not even close to an expert. He seemed highly interested in somebody who had a passion for working at the terminal, regardless of their skill level.

He said there simply wasn’t enough people who knew even a small amount of these sorts of subjects, and he wanted to meet one on one with laptops in hand to see what I knew and what I was passionate about. This all sounds good, but I am on guard a bit because I wonder if I’m being scammed or if something else is amiss.

Are there any red flags in what I’ve described here? Don’t get me wrong, I’m going to meet with this fellow again to see what he’s looking for and if he’s seriously interested in possibly employing me, but I’m getting serious too good to be true vibes.

Any advice and/or constructive thoughts are appreciated. Thanks in advance.

https://redd.it/114m7tw
@r_devops

Can I generate keypair directly in terraform?

Hey all,

I need to create and import keypair in an instance that I'm creating with terraform. Ideally, the keypair should be created in terraform and imported to the newly created instance.

​

Thanks.

https://redd.it/114plwh
@r_devops