IT'S TIME AGAIN FOR AVIATOR'S CASUAL, OFF-THE-RECORD HANG OUT. THIS month, we'll be spending time with one Slack's productivity engineers.

Hey, everyone. Last month we ran a virtual meetup with Nadeem at Netflix that everyone seemed to enjoy. You can check out the thread here:
https://www.reddit.com/r/devops/comments/10elayg/casualofftherecordhangoutwithnetflix/
This month we're going to the same thing but with Sridhar at Slack. Same rules apply - it's going to be a very loose and pressure-free hang out for an hour or so where folks can ask questions and learn from one another. No recordings, no Aviator product talk, no salesperson calling you later. By next month we'll have a slack channel and an email you can opt into to get notified, but that's all. Anyway, 2/24 @ 2PM ET. Sign up at dx.community or this link (a google form):

https://docs.google.com/forms/d/e/1FAIpQLScHADjbCJmnrObldibEjS6c3bUSzkzJzSa8qkgthONnEKM1AA/viewform

Hope to see you there! I'll be monitoring the thread for questions/suggestions/problems/etc. Definitely welcome nominations and intros to guests as we move along.

https://redd.it/1140ib8
@r_devops

Extending my list with SLO Tools...

Hello, I updated my list with SRE SLO tools. I started to add some columns to help finding the right tool. What do you think? Do I have the right details for each tool? Is that helpful?

SRE SLO Tools — Tech Acceleration & Resilience (techaccelerationandresilience.com)

Please keep in mind that's a first iteration, I will put in more work. All feedback is welcome!

https://redd.it/1142kn5
@r_devops

Update: Self hosting app to create one-time shareable secrets - (new features)

[https://github.com/rpgeeganage/ots-share-app](https://github.com/rpgeeganage/ots-share-app)

A feature-rich self-hosting app to create one-time shareable secrets.

* Creates shareable links which valid for a maximum of **24 hours**.
* The contents are encrypted with `AES` in `CBC` mode, with a `256-bit` key. (Using [Crypto-js](https://cryptojs.gitbook.io/docs/#the-cipher-algorithms))
* Passwords are **NOT** sent to the backend server.
* The app periodically deletes encrypted content after it expires, and the encrypted content gets deleted once the web UI fetches it.
* `CLI` support.
* Multiple database connectivity support.
* `Mongo`
* `Postgres`
* `MySQL`

https://redd.it/1143koz
@r_devops

Turbocharge your terminal productivity with zsh-autosuggestions! (1mn)

https://www.youtube.com/watch?v=0r1mxuAzqS0

https://redd.it/1142ya6
@r_devops

Is cloudflare evil company?

Hello, the title says the question. Is Cloudflare can be trusted. It's offering ridiculously should be expensive stuff for free. And I am using bunch of them already. Before couple months I was just using DNS/CDN/Cache stuff now as I see they have bunch of amazingly cheap cloud solutions.

5 bucks for hosting your 100k images around globe with unlimited variation. Hosting JS applications for 1m request free, after free tier as low as AWS pricing. Global distrubuted SQL and R2 services, still amazingly low. Now they are trying MQ stuff which is still globally available.

I can understand cloudflare trying to earn little market cap but I'm really scared about price increase in short time after I build my shit around their property tech. I don't wanna rebuild some random client project after a year because Cloudflare increased prices in evil way.

And rather then cloud hosting Cloudflare was already giving free stuff years back. I don't understand how they can be this generous? How they could be earn this kinda money. Probably enterprise customers are paying our debt too but nearly half of WordPress sites in the world are behind Cloudflare, how that thing can be possible?

https://redd.it/1140kdd
@r_devops

Tips/directions for Maintaining Multiple Versions of software in GIT?

I need some specifics of how this can be done? I understand some people use branches (and avoid main or use it for highest release), others use tags but merge to main.

Example say I've got a backend application that is for a V1 of an application - and I am developing V2 that has breaking changes where it won't support V1 anymore (assume some parts of software are completely removed). I want to deploy them separately anyways so I can have V1 and V2 available for users (in my case it's a hardware limitation where V2 supports V2 hardware only but V1 hardware is still out there to users so software must still be in production and maintained).

How could I maintain both V2 and V1 at the same time? Say I have version 2.1.0 out for V2 users and 1.5.8 out for V1 users. If I need to make bug fix that affects a common thing for both - I need to put that change/set of commits into git and apply it to both V2 and V1 and release 2.1.1 and 1.5.9 with that change.

I've tried to read about this specifically but can't find something that I understand well enough. Like whats the git repo look like? can u do this with tags? If you use tags what do you merge to main? If you use tags how do you develop a new incremental version?

Does it make sense to maintain 2 versions of the software? Make 1 piece of code backwards compatible and just have it be a single code base? Or take V1 and modify it completely so that it is truly a V2 and is not compatible with V1. In the backwards compatible code I worry about it getting messy - especially if V3 hardware comes out. How to organize things so it's clear whats the code for V1, V2, V3, V++ hardware and in the case of maintaining separate versions of software entirely - there may be duplication of code or managing deployment may be more challenging.

https://redd.it/1147l3y
@r_devops

dotnet Docker Image SonarQube Scanning

Hi Guys,

Anyone here have already used docker image for dotnet sonarqube scanning?

If yes then can you please share the realiable docker image to scan dotnet projects and how it works. Thank you!

https://redd.it/11497u5
@r_devops

Datadog: why is it so popular?

My org is (finally) getting serious about observability and pushing an SRE mindset. I hear Datadog’s name come up A LOT, but not as much New Relic or Dynatrace. Not really looking for a comparison since we’ll evaluate the leaders in this space. But I’m curious what makes Datadog so much more popular? TBH, I think I was more wowed by others when they gave their demos. Is it their marketing? Are they at all the trade shows? Are the cool kids using it?

https://redd.it/114d0an
@r_devops

How to manage versioning of dockerized application ?

are there any tools just for maintaining the version of the application, we are using Azure devops for ci/cd and application is also hosted on azure servers.

Also is it a good practice to change the docker image tags from staging to production ? my manager wants to keep the latest tag of all the images for staging env but wants to change it to certain versions(different images with diff tags) when moving to production ?

https://redd.it/114dkml
@r_devops

Deploying Laravel with Docker, Nginx, Let's Encrypt SSL and Supervisor

Hey redditors! Help Needed!

I am very new to containerizing approach of deploying applications. I am trying to deploy my Laravel app to Azure using Docker and ACI. I couldn't find any well explained articles or articles matching my requirements of deployment.

I am actually trying to setup a proper DevOps pipeline, with sequence being: I push my code to GitHub, Run GitHub Actions, Build Docker Image, Push to ACR and Pull in ACI.

I attempted to build the Laravel docker image in my local environment with Nginx and Supervisor in a single image and it works well. But now I want to use automated Let's Encrypt SSL in my Nginx server. If I rebuild the image every time requesting a new SSL certificate for my server with `certbot` that wouldn't be a right idea, right? So, what is the best way to do it?

https://redd.it/114e3z8
@r_devops

Sagemaker for production services? xpost from r/aws and r/dataengineering

I need to spin up Sagemaker resources (which ones exactly TBD) for the ML folks on my team. They will be building out a new backend service that will be plugged into the rest of our application stack. We'll likely run it inside an ECS cluster on GPU instances. . .

However, I noticed that Sagemaker can be wired up with https endpoints out of the box. I've used a bunch of AWS services over the years and let's just say, I'm not the biggest fan of some of them especially the all-in-one solutions like Amplify and AppSync or dear lord, Elastic Beanstalk.

I feel like I'm going to hit limitations with Sagemaker that will drive me crazy while I am quite familiar with deploying an ALB fronted service running on ECS (or EKS but ECS makes more sense for what I'm doing).

tl;dr any reason I should stick with Sagemaker endpoints? My spidey sense is tingling.

https://redd.it/114iuun
@r_devops

I don’t know if this is a golden opportunity or a scam…

Hi all,

First time poster here. I haven’t been focused on devops at all, instead studying heavily for the past almost 2 years to be a full stack web developer. I recently moved to a new city and went to a local Jr developer meetup looking to network.

While making my introductions, I admitted I had taken a long sidetracked route to learn a good deal about bash scripting, vim configuration, and understanding the workings of my systemd-less Linux distribution.

I also talked about currently working with an old friends startup which works with VueJS, MariaDB, knexjs, ObjectionJS, HapiJS, Docker, and NodeJS. Although technically this constitutes my first web dev job, I am still very very green.

Apparently all my nerd talk caught the ear of a senior devops engineer who was in attendance. He suggested we meet to talk about a possibility of working in devops instead of web development. Prior to this conversation, I had only heard about devops in passing, and hadn’t really investigated the field.

While I was very amicable with the engineer in question, I couldn’t help but feel like something is amiss. Granted I enjoy working at the command line and know the basics of ssh, bash, git, and the other tech I mentioned above, but I’m not even close to an expert. He seemed highly interested in somebody who had a passion for working at the terminal, regardless of their skill level.

He said there simply wasn’t enough people who knew even a small amount of these sorts of subjects, and he wanted to meet one on one with laptops in hand to see what I knew and what I was passionate about. This all sounds good, but I am on guard a bit because I wonder if I’m being scammed or if something else is amiss.

Are there any red flags in what I’ve described here? Don’t get me wrong, I’m going to meet with this fellow again to see what he’s looking for and if he’s seriously interested in possibly employing me, but I’m getting serious too good to be true vibes.

Any advice and/or constructive thoughts are appreciated. Thanks in advance.

https://redd.it/114m7tw
@r_devops

Can I generate keypair directly in terraform?

Hey all,

I need to create and import keypair in an instance that I'm creating with terraform. Ideally, the keypair should be created in terraform and imported to the newly created instance.

​

Thanks.

https://redd.it/114plwh
@r_devops

How many of you use twingate for accessing cloud environments or homelabs?

Recently someone recommended me twingate as a solution for accessing non-public resources in cloud environments. On the surface it seems like great alternative for things like wireguard, openvpn, ipsec, pritunl etc. which give you access to all protected network, and for things like tailscale/zerotier which give you access to only things with clients installed. Twingate can give access selectively for each user. Ive seen that people use it even for accessing their homelabs (NASes).

But i would like to hear other opinions about them, whether the company is trustworthy, whether they passed some security audits, things like that. Just to be sure that im not installing some trojan horse in networks which supposed to be protected.

https://redd.it/114mpcq
@r_devops

what do you do on a daily basis as a devops engineer?

Trying to understand how it varies based on company, role, experience and location. Please be as comprehensive as possible.

https://redd.it/114siyp
@r_devops

Outdated Default AWS IAM Policy Language Versions in Multiple AWS Services

https://www.cloudquery.io/blog/outdated-aws-iam-policy-language

​

Disclaimer: I'm the author. We did research on all AWS services that support the IAM policy language to look for outdated default versions that change interpretation of the IAM policy JSON.

https://redd.it/114us7r
@r_devops

Top 15 Kubectl plugins for security engineers

We have grouped in [this article the list of Kubectl plugins](https://sysdig.com/blog/top-15-kubectl-plugins-for-security-engineers/) that we strongly feel will be very useful for anyone, especially security engineers.


* Stern plugin
* RBAC-tool
* Cilium Plugin
* Kube Policy Advisor
* Kubectl-ssm-secret
* Kubelogin
* Kubectl-whisper-secret
* Kubectl-capture
* Kubectl-trace
* Access-matrix
* Rolesum
* Cert-manager
* np-viewer
* ksniff
* Inspektor-Gadget

Any that you miss?

https://redd.it/114me28
@r_devops

Advice on requesting to move back to previous role?

Hi All -

Curious if anyone has been in a similar position. I recently (6 months ago) moved to a new team internally to my company, but it's just *ok*. I thought this would've been a good move career wise, but I feel like my old role is still a better fit for me.

Is it in bad faith to reach back out to my old manager? They were quite upset that I had left the team, and really wanted me to stay. This is all internal in the same region if that matters.

Thanks!

https://redd.it/114x1yy
@r_devops

Comparing deployment pipelines using templating with GitOps

Greetings.

I have a setup with templated value files for Helm charts, prior to install/upgrade. That way the configuration repository just needs global yaml value files used for any project with any structure of their values.

Using it for shared annotations, labels, tolerations etc.

I'm wondering if anyone has experience or suggestions for to go about that in context of GitOps with pull mode like Argo CD.

Would you keep templates and push rendered files to git, or are there options available that remove need for templating without too much duplication?

https://redd.it/114icda
@r_devops

Industry standard on Terraform drifts

TLDR: What is the industry standard on detecting and handling drifts in terraform source code? What are the advantages and disadvantages of having VMs adhere to source code?

https://redd.it/1150fgp
@r_devops

Alerting. Prometheus Alertmanager vs Grafana Alerts

When setting up alerting for your infrastructure, do you find it better to use Alertmanager or the native alerting in grafana?

https://redd.it/1152z00
@r_devops