Secretless Broker — Thoughts?

Ran into this GitHub repo for a secretless broker but seems like it didn't really catch on: https://github.com/cyberark/secretless-broker#using-secretless-broker-with-conjur-open-source

Idea seems to be for an application to proxy requests through a "secrets broker" with access to secrets from a vault that can then make a response to a resource like database and return the response back to the application.

This way, the application itself never has access to the secrets.

https://redd.it/115b3ui
@r_devops

Building Better CI/CD Pipelines

Wrote down some thoughts on pipelines, talking about


* When to run pipelines
* Caching
* Docker in Docker


[https://www.infrastructureposts.com/p/e5-building-better-cicd-pipelines](https://www.infrastructureposts.com/p/e5-building-better-cicd-pipelines)

https://redd.it/115c5az
@r_devops

Hikaru 0.16.0b released

Hikaru 0.16.0b adds support for Kubernetes 24.x, 25.x, and 26.x, along with their associated Python clients.

Hikaru provides a variety of tooling to work with Kubernetes configs in Python, YAML, or JSON, allowing you to move smoothly between each of these representations, and can also use the Python representation to directly interact with Kubernetes. Hikaru helps you migrate from YAML, easily create watches, detect changes in configuration, and more. You can find out more Hikaru here at the PyPI page:

https://pypi.org/project/hikaru/

...at the Github repo:

https://github.com/haxsaw/hikaru

...or read the full doc at ReadTheDocs:

https://hikaru.readthedocs.io/en/latest/index.html

https://redd.it/115d4k2
@r_devops

Is it a good idea to just use all the tools from one vendor or mix and match?

So I really like the Hashicorp stuff and to me it seems to make a lot of sense that if I’m using some of their stuff and I want to do something else that they have tools for to use that. For example, I’m using packer to create images. It seems to make sense to use terraform over cloud formation if there is only slight benefits of cloudformation over terraform (not sure if there are)

Is there a benefit when looking for other DevOps that they’re all hashicorp or was or whatever vendor? Or is it better to mix and match?

https://redd.it/115cv22
@r_devops

Free, selfhosted CI/CD with artifact storage

I am planning to use Concourse CI to build my application. After building, I need somewhere to put it, so I can get a download link.

For GitHub, it's just a matter of uploading the artifact and it's done and ready. GitLab is the same. And guess what? You can host GitLab! Except you can't mirror GitHub to GitLab (Pull) without paying 20 USD/month...


Can someone guide me through this? I feel like I have looked everywhere and nothing suits my needs.

https://redd.it/115eszc
@r_devops

Devops learning path.

I am currently working in configuration management in an organization where my primary job is on Jenkins and Linux(I also have an internal Linux certification). Im currently learning GCP from basics as I had joined as a fresher and this is the first project. Also have some basic knowledge of Java and Shell scripting, Strong basic programming logic and SQL knowledge as well. We work as a sub-team to a separate devops team. I want to understand how I should approach to switch to a complete Devops role in the near future.

https://redd.it/115gx5e
@r_devops

Devops crash course options

Morning everyone,

I recently made a big career change after a long time in functionally "generalist" roles into the DevOps world. The position was taken with an understanding that this is new to me and with some time to acclimate. Primarily my understanding is this role will largely be in planning and procedure and less so in the implementation side.

There's a fairly signifcant opprotunity available in a project that will be "opening up" in 3-4 months, but taking it on will require me ramping up my timeline and doing a signifcant amount of independent learning on my part if I want to be remotely ready for the responsibility. My current competancy is largely in the Windows and and "light enterprise" world and the end game here will require a signifcant deep dive into what's going to be a mostly RHEL/OpenShift world. While I have some basic understanding of Linux and containers it's all limited home use and I'm treating myself as a total "rookie" for sake of training needs.

Long story short, there's a lot of courses out there and I'm looking for some advice in paring down the options a bit. If you found yourself stuck with some wide eyed dummy on your team and needed them to be semi-functional in a few months, any courses/cours providers out there you'd recommend? I won't be on an island where I'm going to need to know -everything- but realistially for me to be an actual functional member of this team I'll need to up my game signifcantly.

Cost is not unimportant but less so than quality and I'm willing to invest in paying for something that will be worth it. Anything with labs and hands on function is a major plus. I don't require any official certifications or whatnot, this is purely for my own want to improve and not necessarily a systemic barrier for employment at this time.

Appreciate any feedback, thank you!

https://redd.it/115grrf
@r_devops

Making software user-extendable (letting users add their own features inside popular SAAS tools)

This is an article about embedding a code-editor into user-facing SAAS so features can be created on-the-fly by users:
https://sellsitself.substack.com/p/making-software-user-extendable

https://redd.it/115jq3r
@r_devops

Chef template vs file?

I am still a little confused about the difference between the template resource and file resource in chef. Do they both essentially just copy a file over to the node, and if so, what are the main differences between the two?

https://redd.it/115lkjf
@r_devops

How do you organize your IaC with shared infrastructure and app infrastructure?

What are some of your practices for how IaC is organized and who is responsible for it? For example, shared/base infrastructure and infrastructure that is specific to an app. Is your app infrastructure in the same pipeline as the app or is it updated separately? Do devs have ownership over certain aspects of their application infrastructure or is that a separate team?

https://redd.it/115lxut
@r_devops

Is there any major benefit to having dev/stage deployments of Artifactory?

We're currently looking to self-host Artifactory in our AWS cloud using the AWS Partners solution: https://aws.amazon.com/solutions/partners/jfrog-artifactory-amazon-ec2/

JFrog is highly encouraging us to buy licenses for dev & stage in addition to prod deployments, and for high availability, this means 3 nodes per env, 9 licenses total...

I'm very curious how beneficial dev/stage deployments of Artifactory actually are? I definitely feel like I'm being upsold, but no one in my company has significant administration experience w/ Artifactory to know exactly how important these envs are? Opinions welcome :)

https://redd.it/115jg8w
@r_devops

What is the math behind networking?

I'm not a networking professional, but for no reason whatsoever, half of the reddit communities I try and ask (like Networking) won't let me post and instantaneously say I'm violating their rules even though it's physically impossible for anyone to have read them in the time it said I violated anything, so sorry that this doesn't directly relate to this community.

I know very little about queueing systems for operations research and network communications, but I have some experience in math the concepts, linear algebra, abstract algebra, calculus, statistics, etc which seems relevant to networking and building simulations.

Can anyone bridge the gap and explain some basic elements of how queuing systems relate to math, like calculus and linear algebra and how one might apply those mathematical areas to the study of optimal queueing systems and probability in networking?

https://redd.it/115wwds
@r_devops

What mathematical principles of devops are most closely related to theoretical math?

I'm not a huge fan of programming, but I have a knack for math and I enjoy working at it. What mathematical principles, in classical algebra, abstract algebra, linear algebra, calculus, or combinatorics, statistics or real and complex analysis, do you encounter most frequently in your study and/or application of dev-ops?

https://redd.it/11608dw
@r_devops

Need Advice Going from Sr Cloud Engineer to Manager

I'm looking for advice on how I can best demonstrate my ability to move up to a Cloud Manager role.

I've been at this company for 2 years now and I'm currently the only Sr Cloud Engineer on the team.
I want to stand out and demonstrate my ability to lead and deliver on projects but also molding my mind around what being a manger entails.

Here are some examples of current scope of duties:
\-Lead architecture, deployment and planning of new projects with key stakeholders/vendors
\-Build relationships with developers and other teams, continuing to promote DevOps culture and build platforms for their code
\-Build automation and Tooling
\-Migrated all projects to IaC and standardized CI/CD process
\-Train and mentor cross-functional teams on Cloud/DevOps terminology and best practices

I also have Professional and Associate level certifications in our cloud stack and always studying and looking to get more.

https://redd.it/1162okx
@r_devops

Any one freelancing ?

Hows it like compared to company role?
Do you make more money?
Do you trade sleep \ family time for money?
Is it possible to maintain such lifestyle over time ?
Do you get work from any of the online platforms ?

https://redd.it/1162kte
@r_devops

Best cloud solution for company wide upgrade to SAP/4Hana?

Our backend is made up of SAP Netweaver (some on premise, some already on the cloud). This year we are having a 10 month process of upgrading to SAP/4HAN in a general "cloudization" of the company.

IT admin wants to know which hosting solution is better, OpenSUSE or Redhat. However our company's core competency is not development. We do not have dedicated DevOps personnel, so I thought that maybe we should deploy our SAP infrastructure in a PaaS platform like Vercel or Netlify (obviously their equivalents to SAP. I am a web dev).

My reasoning is that while PaaS are much more expensive than IaaS, our lack of DevOps means we will be reliant on expensive consultants (which we already are with regards to Netweaver and SAP Basis) which will probably be far more expensive.

Suggestions or thoughts?

https://redd.it/1165us2
@r_devops

Does serverless Vercel/Netlify/Deno hosting support listening for message broker (e.g. Kafka) events?

I am investigating some serverless hosting options, and these three in the title look amazing, especially Vercel. I have already deployed a basic Svelte front end application in just 5 minutes. I found that I can even host a python application with it.

However, I wonder about appropriateness of these serverless platforms for hosting microservices. Let’s say my microservice needs to listen for Kafka events and then execute some code that processes them. Is it possible?

I have this question because these serverless hosting platforms appear to advertise being on-demand, which as I understand runs the code when there is an HTTP request incoming (not sure if accurate). However, if I want to listen for message broker events, I need the code running all the time. Unless I make event consumption through REST endpoint and have a 3rd party connector listening for events and making REST queries, but not considering such approach now.

https://redd.it/1165pq6
@r_devops

Where to find ARM buildpacks for Node.js?

I use Oracle Ampere arm instance to run Dokku inside Docker container.

I installed pack on the host:

(curl -sSL "https://github.com/buildpacks/pack/releases/download/v0.28.0/pack-v0.28.0-linux-arm64.tgz" | sudo tar -C /usr/local/bin/ --no-same-owner -xzv pack)

ubuntu@arm1:~$ pack --version
0.28.0+git-b10e41f.build-3729

I had to bind mount pack binary inside the Dokku container so it can see it:

services:
  dokku:
    image: dokku/dokku:0.29.0
    container_name: dokku
    ports:
      - "3022:22"
      # - "8443:443"
      # - "8080:80"
    environment:
      - DOKKU_HOSTNAME=dokku.${DOMAIN}
      - DOKKU_HOST_ROOT=/var/lib/dokku/home/dokku
    volumes:
      - ./dokku-data:/mnt/dokku
      - /var/run/docker.sock:/var/run/docker.sock
      # mount pack binary
      - /usr/local/bin/pack:/usr/local/bin/pack

But when I push and build Next.js app I get this:

fc251a6e7981: Download complete
e79f28f8f2a6: Verifying Checksum
e79f28f8f2a6: Download complete
fc251a6e7981: Pull complete
e79f28f8f2a6: Pull complete
Digest: sha256:f75a04887fced3ae0504a37edb2c0d29d366511cd9ede34dbb90c5282b106e79
Status: Downloaded newer image for buildpacksio/lifecycle:0.16.0
===> ANALYZING
remote: [analyzer] exec /cnb/lifecycle/analyzer: exec format error
remote: ERROR: failed to build: executing lifecycle. This may be the result of using an untrusted builder: failed with status code: 1
remote:  !     Removing invalid image tag dokku/nextjs-blank-dokku:latest
remote:  !     App build failed
To dokku.arm1.localhost3002.live:nextjs-blank-dokku
 ! [remote rejected] main -> main (pre-receive hook declined)
error: failed to push some refs to 'dokku.arm1.localhost3002.live:nextjs-blank-dokku'

I assume I need to pass url to custom BUILDPACK_URL that will work on arm, where can I search such buildpacks and do you already know some that will work?

https://dokku.com/docs/deployment/builders/herokuish-buildpacks/#detection

https://redd.it/1167klu
@r_devops

Having root directory inside location block in Nginx

Hi, I've got to know that we can have the root directory specified inside the location block of a nginx configuration instead server block. So I tried and when I redirect to that location, Nginx returns 401 Unauthorized.

Below is my server block.

server{
listen 80;
server_name plex.hylon.com;

location / {
proxy_pass https://127.0.0.1:32400;
}

set $weekend 'NO';

#check if weekend

if ( $date_local ~ 'Monday|Friday' ){
set $weekend 'Yes';
}
location /demo {
root /sites/demo;
return 307 /index.html;
}

}

When I pass [`plex.hylon.com/demo`](https://plex.hylon.com/demo) I got the 401 Unauthorized. Any reason why I can't do this? TIA

https://redd.it/1168kvs
@r_devops

Are any of you worried about AI affecting DevOps Engineering jobs?

Title. Jw was the DevOps community is thinking about this topic.

https://redd.it/1168rak
@r_devops

Devops' intense focus on fast code releases inevitably compromises security. While development cycles have become agile, security processes have remained stuck in the past.

Good article. Source.

On one hand, the agile development cycle demands rapid code changes, which often exclude security as a hurdle to quick development. On the other hand, traditional security processes tend to be slow and disconnected from the development cycle, causing production delays. Additionally, containerization and the rise of attack vectors, as well as cloud architecture, can further complicate security efforts.

What are your thoughts on these challenges, and how do you approach DevOps security in your own organization?

https://redd.it/116an8l
@r_devops