I made an absolute beginners tutorial for Ansible

Hello everyone. I just thought I'd share with a basic overview of Ansible. I'm sure most of the people on this sub are well versed with Ansible and know more than me, however, I thought I'd contribute by making a tutorial video of things I wish I had explained to me when I first started out.

https://youtu.be/CWjD8j04RPk

https://redd.it/117iye7
@r_devops

Blog Post: Ten Highly Effective DevOps OKRs

I write this article about DevOps OKRs and would love to know what you all think about it!


https://www.getdistilled.io/blog/ten-highly-effective-devops-okrs/

https://redd.it/117j7mo
@r_devops

Post on Helm

I recently did a post on Helm and how to use it to deploy applications to your Kubernetes cluster, how to build your own charts, hosting your own Chart Museum instance to publish Helm Charts, etc

https://ruan.dev/posts/everything-you-need-to-know-about-helm/

https://redd.it/117ik1i
@r_devops

Is there any point in uploading my scripts to gitlab?

I've worked help desk for 5 years.

Now Im a jr security analyst and I've made a handful of powershell scripts for my own team to use that automate mundane tasks we have to do daily. None of my scripts change anything and they arent used by any other teams. They just collect information from different sources and normalize the data.

The devops manager gave me access to gitlab and said I can upload my scripts there if I want. But whats the point? Im not a devops engineer. I've never used gitlab. Im not writing ansible or terraform playbooks that manage the infrastructure.


I mentioned my experience as an indicator for "I don't understand the devops process or why gitlab would be necessary to me."

https://redd.it/117nxj0
@r_devops

Tips for job fair booth tech company

Hey guys

My employer is participating at a job fair for developers in poland.
Since we mostly own pretty average and boring stuff for advertising our company at fairs we decided to change it up.

So to make it quick:

What have you guys seen on fairs that caught your attention and got you drawn towards?
What’s important to you when attending such a fair as a developer? No gos and must haves?
Just give me everything you have in mind.

We really want to create something cool and worthwhile for both sides, so every opinion is appreciated.

Have a nice week 🤝🏼

https://redd.it/1174sk1
@r_devops

OMG I JUST PASSED THE GCP PROFESSIONAL DEVOPS ENGINEER!!!

I’m so excited ….I will write a full write as soon as it sinks in!!! I can’t believe this!!

It was TOUGH! in fact terraform associate is a cake walk compared to THIS!!!

https://redd.it/117qe5i
@r_devops

What were the ancient tools used in late 90's early 00's ?

I'm interested in stories and experiences from people that had to maintain a fleet of server two decades ago, without terraform, ansible or any modern tool that we take for granted today.

What was the smartest thing you invented or saw in action that would help the sysadmin do a task in 2 minutes instead of 2 days?

I can think of many different ways to automate things without configuration management tools, but what was actually used?

https://redd.it/117q820
@r_devops

AWS EC2 vCPU limit increase

I am working on a project that requires me to use a new account to create an instance with GPU. This instance requires 4 vCPU and my current allowance for vCPU is 0.
I have applied for three petitions to increase the VCPU but all of them got rejected. In the three petitions, I tried different combinations of number of vCPU request and also one different location and I also mentioned that it is an academic project.

I want to ask what I should do to increase my vCPU limit to at least 4. Are there any specific locations on which my change of getting allotted is higher? Does anyone have any experience with this?

This is the reply I get from them every time:
Service quotas are put in place to help you gradually ramp up activity and decrease the likelihood of large bills due to sudden, unexpected spikes.

https://redd.it/117psxg
@r_devops

First devops job

Hi all. How was your first job as a devops engineer after finishing a bootcamp or program? Did you feel that you knew how to perform all of the tasks that were asked? Were you thoroughly trained?

https://redd.it/117ucld
@r_devops

How do you keep track of the deployments and the branches they come from?

As the title states, there’s a little chaos on our testing environments because we are not keeping an evidence of some sort regarding the branches where the configmaps and deploymentconfigs come from. Sometimes people just deploy new pods and mess up the QA work. So how could we keep track and know (without digging into jenkins and fabric) what branch was used last time someone deployed a new pod?
For context we are working on a microserviced app, on-prem with openshift and use jenkins with helm charts for pipelines and bitbucket for version control.

https://redd.it/1175xkc
@r_devops

Noob Chef Question

When you are running commands using chef, does it automatically run those commands as root?

https://redd.it/117vjit
@r_devops

Documentation as a service

What do you use for docs? I work at a mid size tech company (~100 Devs) and our tech docs are all over the place 🙈 Confluence, GitHub Wiki, markdown in GitHub and even a couple of home cooked Hugo sites... So yeah, company wide doc search is essentially impossible...

Am I alone with this problem?

What do you guys use for internal docs? Would you recommend any (free or paid) tool that you can plug into GitHub for markdown or tech docs (sphinx, jsdoc, golang package docs, terraform module doc, helm charts etc...)?

For extra info, we are rolling out Backstage and are thinking of using their tech docs feature but it is tightly bound to service entities so wouldn't apply to team docs for example.

https://redd.it/117wpsf
@r_devops

How do you manage your PROD Access?

Hello Folks,

We want to provide our operation team some permissions (On Azure) during the deployment window and then revoke once they have completed the operation.

What is the best way to achieve it or how do you guys usually do it?

I'm thinking to have some pipeline which could accept some input like operation team name, grant/revoke as inputs and run some az cli commands.

Please share your thoughts.

https://redd.it/117w7q1
@r_devops

Company wide identity provider

In the future we want to use a central identity provider in our company to authenticate and authorize our internal and external users against our applications and APIs.

The project is mainly driven by middle management and product managers. I am in the role of the DevOps engineer and take care of the infrastructure of our applications. Deploying an identity provider kind of falls under my tasks.

I've been working with AWS for years, so a natural choice would be to go with Cognito. While I like AWS products in general, I have doubts about whether Cognito is the right choice. Especially since people who are not fit in AWS should also work with it (operate it). But also because Cognito cannot be customized to the same extent as other identity providers.

In our company, there is currently only (dangerous) half-knowledge on the subject. I'm familiar with the basics of OAuth and OIDC, and I'm just getting more familiar with how it works. However, I am still a bit confused about which criteria to use to select a suitable identity provider.

My questions are: How should I proceed? Which criteria are decisive in your opinion? Should the software developers have a say in the selection? Should we hire an expert to assist us? Is there anyone here who has switched from Cognito to another authentication service? If so, why? Is there another recommendation? Is self-hosting a viable option?

Although this might not be something DevOps engineers usually do, I really enjoy digging into the nuts and bolts of this topic. I feel confident, that given enough time, I can make an informed decision. But management wants us to start as soon as possible with the first prototype.

https://redd.it/117yqln
@r_devops

Company wide identity provider

In the future we want to use a central identity provider in our company to authenticate and authorize our internal and external users against our applications and APIs.

The project is mainly driven by middle management and product managers. I am in the role of the DevOps engineer and take care of the infrastructure of our applications. Deploying an identity provider kind of falls under my tasks.

I've been working with AWS for years, so a natural choice would be to go with Cognito. While I like AWS products in general, I have doubts about whether Cognito is the right choice. Especially since people who are not fit in AWS should also work with it (operate it). But also because Cognito cannot be customized to the same extent as other identity providers.

In our company, there is currently only (dangerous) half-knowledge on the subject. I'm familiar with the basics of OAuth and OIDC, and I'm just getting more familiar with how it works. However, I am still a bit confused about which criteria to use to select a suitable identity provider.

My questions are: How should I proceed? Which criteria are decisive in your opinion? Should the software developers have a say in the selection? Should we hire an expert to assist us? Is there anyone here who has switched from Cognito to another authentication service? If so, why? Is there another recommendation? Is self-hosting a viable option?

Although this might not be something DevOps engineers usually do, I really enjoy digging into the nuts and bolts of this topic. I feel confident, that given enough time, I can make an informed decision. But management wants us to start as soon as possible with the first prototype.

https://redd.it/117yqln
@r_devops

Calculate replicability score on a project/repository

In my current company, we are trying to renovate our work methodology and one of the goals is to create project assets and/or libraries that can be replicated across multiple clients in order to accelerate development and generate marginality.

We have been asked to generate an internally shared replicability score of a project based on language, technology, and complexity.

Based on your experience, if you were to calculate a replicability score for a project what metrics would you use? What analysis strategy would you use?

https://redd.it/1180ijl
@r_devops

Site Reliability Engineer - Automotive AI experience - Available Immediately - USA

Hi all,

Using this platform more as a punt more than anything else.

I've been referred a very talented Site Reliability Engineer who has been laid off recently by one of US's biggest AI organisations. Mid-way through a very difficult personal period, he has reached out to myself and one other recruiter for opportunities on the market. Unfortunately, the opportunities I have for him would require him to be on-site atleast once a week but prefers remote.

If there are any hiring managers in the US who are looking for great SRE talent, this candidate can be vouched for by his recent and previous organisations and has refrained from using Linkedin because of past bad experience with external recruiters.

Happy to share some more details about his profile, please feel free to DM me. He's available for interview early next week.

https://redd.it/1181sdq
@r_devops

In-terminal debugging and CLI assistance https://github.com/HeyCLI/heyCLI_client

Hello all,

HeyCLI is a GPT3 powered command line helper that allows you to use the terminal in natural language. See [https://heycli.com](https://heycli.com)

We have added two new features to HeyCLI:

1. In-terminal debugging of python, nodejs, kubectl, gcloud, aws and many other command errors. When you get an error, just type: hey debug the error above (or something like that, be creative!) 
2. we attached HeyCLI to some commands so you can type "yes" to execute them. 

To try these features, follow the instructions here [https://github.com/HeyCLI/heyCLI\_client](https://github.com/HeyCLI/heyCLI_client)

https://redd.it/118071p
@r_devops

How to get notified on Error Events in NewRelic?

I am currently doing this in the browser:

newrelic.noticeError(err);

I am seeing them arrive in New Relic/Events, but how do I make it to get notifications via Email when error is logged via client side?

https://redd.it/11842bs
@r_devops

Bootstrapping and updating CI/CD permissions

I'm trying to determine the best way to bootstrap and update permissions for CI/CD minimizing manual steps but also keeping it secure, least privilege. I'm sure this is a common need. I'd like to understand good practices around it that I might be missing.

For example, setting up a GitHub repository with GitHub Actions managing infrastructure and apps in AWS. In order for GitHub Actions to have authorization, I need to add an OIDC provider and a role restricted to the GitHub repo with a policy with reasonably least privilege.

I'm OK with this being done by checking out the repo and running the initial IaC with local AWS permissions (I use SSO so that no long-lived Access Keys in \~/.aws). Bootstrapping done, no problems.

But now as the applications grow, more permissions are needed by GitHub Actions to manage new infrastructure. I don't want GitHub Actions in particular to have Administrator Access on the account. So to add the new permissions, I would update the permissions in the bootstrap IaC and apply manually.

Everything is still in git. Recreating or replicating the environment wouldn't have any manual steps apart from running the bootstrap IaC. It seems like the way to go.

The only thing that rubs me the wrong way is that permissions to manage app specific resources would have to be managed outside of the app. They could be pulled in from the app repo/folder and the bootstrap admin would have to verify the diff when applying it.

So my question is: How do you handle the bootstrapping and updating of bootstrapped permissions for your CI/CD?

https://redd.it/1184jz3
@r_devops

CDKTF FAQ

I was recently tasked with a CDKTF project. As I started to dig into CDKTF, I had a lot of questions. I realized that there wasn't really a good FAQ online so I decided to share what I've learned. CDKTF can be kind of confusing as it's new and I suspect many people have questions around it (I saw a question the other day here about it). I plan on updating this FAQ it as I continue to learn more about CDKTF.

https://terrateam.io/docs/cdktf/faq

https://redd.it/11881mp
@r_devops