Which features do you miss the most in the free version of GitLab?

Howdy fellas!
I wonder, which features do you guys miss the most in the community version of GitLab? Is it even worth subscribing at all, and if so, what features would make subscription pointless?

https://redd.it/11qjt47
@r_devops

Prometheus and Grafana

Hi all, any courses on Prometheus and grafana? Introductory of course. Looking for recommendations just to get me started, running it locally, playing around with data, etc. I want my team’s kubernetes clusters to be more visible, having dashboards is ideal. Any recommendations? Even if it’s a great YouTube video that’s helped you out.

https://redd.it/11qn5fg
@r_devops

How we deployed PostHog on Kubernetes

Last month PostHog announced that it was sunsetting support for it’s platform on Kubernetes. It’s not surprising considering how many moving parts users need to figure out when self-hosting the application. The timing for us was coincidental since our engineering team just spent a large chunk of time figuring out how to add it to our marketplace for our users. We thought it would be a great time to outline how to self-host PostHog on Kubernetes (and how our engineering team went about adding the application to our marketplace for users to deploy the OSS application on Kubernetes without the complexity.

https://www.plural.sh/blog/how-we-deployed-posthog-on-kubernetes/?utm\_medium=social&utm\_source=Reddit&utm\_campaign=posthog

https://redd.it/11qka8b
@r_devops

Who got a Devops gig w/o production Kubernetes experience?

I'm experienced mainly in a lot of different Azure PaaSes, Terraform/Terragrunt, Azure DevOps, and Ansible and PowerShell. I've only done some basic Kubernetes troubleshooting when the Kubernetes guy didn't understand some fundamental stuff. I'm looking around and almost all the DevOps positions require Kubernetes experience. Right now there's zero % chance of dealing with Kubernetes at my current job. Am I screwed? Sometimes I feel like the companies needed Kubernetes want it but really don't need it since they aren't scaling due to demand. It's probably more of a convenience thing at that point. I feel screwed right now... :(

https://redd.it/11qncz8
@r_devops

Crossplane throttling my control plane

I’d love to use crossplane for IaC, but when installing it in an EKS cluster (v1.25), the control plane API hits the rate limit. What can I do to stop that? Can I “auto scale” the control plane?

https://redd.it/11qp3m4
@r_devops

Most important lessons learned in the trenches

A lot of knowledge that a person acquires from their work experience is often not transmitted successfully to other people. In a field like DevOps where there is still a lot of innovation ongoing and there are no established or agreed upon procedures for accomplishing tasks. Given this level of volatility, what are timeless kernels of knowledge have you acquired in your work experience that you would like to impart on others?

https://redd.it/11qtrl8
@r_devops

My poor man's server setup you might laugh about

Insight into an unglamorous server setup from a devops perspective.

I'd love to read your thoughts on it!

https://redd.it/11qks87
@r_devops

Monorepo CI Pipeline with Argo Events and Argo Workflows

We started our k8s journey several months ago. In the past month we have started deploying some apps to the dev cluster to get a sense for how this will work. One of the devs has been working with me on this. He compiles an app, I build an image, push it to the registry, and deploy it in the cluster. After doing this manually dozen or so times we agree we need to build a CI pipeline to automate as much of this as possible.

We are going to build a CI pipeline using Argo Events and Argo Workflows. We have done some of the work. We have a webhook setup from Bitbucket to trigger a Workflow of Workflows pattern. We just have a couple of steps so far, but I've been thinking about the app repo, which is a monorepo. We have talked about breaking that out into multiple repos, but we're going to stick with the monorepo for the time being.

I'm thinking about how this could work with a monorepo. I have a couple of rough ideas. I thought I'd throw them out here and get some feedback. First idea is to do something with git diff to determine which directories in the app code repo have changed and deploy those to the dev cluster on each commit. Not sure how versioning would work in this case. Second idea is not automating the process fully, but instead manually submit the CI workflow as needed and use intermediate parameters with a drop down to select the app to deploy.

https://redd.it/11qw0bv
@r_devops

are you interested in an end to end queue/pubsub & worker platform

Hello,

I'm currently thinking of building a service for an end to end queue/pubsub & worker platform with emphasis on the platform rather than simply queue/pubsub backend like sqs, confluent etc,. I'm thinking of push based subscription to have a unified contract for workers and service to service calls i.e use http/grpc for both service to service calls and for workers.

push based subscription has a lot of usecases compared to pull based subscription like canarying, elastic scaling, common operating semantics with http/grpc service.

I built a similar platform for my org, but I'm not sure how much value a managed service would provide for other organisations and would you be willing to buy such a service and why(what problems do you see in your current platform)?

Thanks

https://redd.it/11qqp3z
@r_devops

is it possible to disable the echolock feature/software of my pc?

my previous company decided to leave me the PC i used for my work from home setup after i resigned. however, they never got back to me with disabling the echolock system they input in it.

on echolock:

“echolock improves time on the system and enhances enterprise productivity by: Tracking login adherence and presenting dashboards on the reasons for time spent away from the system. Enabling accurate determination of productive and non-productive tasks(apps and website)”

is it possible to disable this? it would be really helpful for me so that i can freely use the PC. thanks!

https://redd.it/11qyace
@r_devops

Django AMI market place

Did anyone created AWS private market place for AMIs

https://redd.it/11qkccj
@r_devops

To DRY or NOT to DRY! Github Actions Version

Hey everybody,

As the DevOps engineer for a startup I'm responsible for the deployment of the microservices that we have.

I've started to create a generalized pipeline (Reusable Workflows Github Actions) that works in all microservices and that works nice, until.... I wanted to try Semantic Releases for every microservice.

So this is where the DRY is not helping... I've created the Reusable Workflow with the intention of not repeating and if there was something that i wanted to enforce( like SonarQ or security practices etc) i would implement in the main workflow and all pipelines will have the change. However i'm not seeing as an advantage right now having in mind our goal, which i explain just below...

The goal is to have only master branch deploying to development and then creating releases both for sandbox and production. I'm having some struggle in visualising the semantic release in the reusable workflows... Is it even possible?

Do you have a better approach? Or know a better way?

https://redd.it/11r0m56
@r_devops

Help designing authentication implementation

I’m not sure where / how to implement auth. I would like it so that a user can login with Google on my frontend.

I have a frontend running SvelteKit, a backend web API hosted elsewhere running Rust (Axum framework) and a MySQL database hosted elsewhere again.

For now, performance is not a concern. I just want to implement secure best practices, enabling users to login to the frontend with their GitHub / Google accounts, and keep the session alive.

Can you please guide me how to implement this?

Thank you for your help 🙏

https://redd.it/11qzzzp
@r_devops

Integration Testing API Endpoints

Currently, we lack robust and thorough testing for our API. For some context, the components of our backend that we own include a GraphQL server, the Node.js API, and a Postgres database. We also use other third-party services for transactional emails, chat messaging, push notifications, authentication, etc. All the solutions I found for API testing just rely on the response to determine if the test passed or not (i.e. correct body, status code, headers, etc.). I want to go a step further though and test the entire system end-to-end within a dedicated test environment. An example of tests I want to write:

test("Verification Email", async (apiClient, emailClient, database) => {
    const apiResult = await apiClient.post("/v1/auth/send_verification_email", { email: "[email protected]" });

    const testerEmail = emailClient.get("[email protected]");

    const verificationEmail = await testerEmail.getEmail({ from: "[email protected]", subject: "Verification Email", timeout: 120 });

    const links = verificationEmail.getLinks();

    assert(links.length > 0);

    const verificationLink = links[0];

    const verificationResult = await apiClient.get(verificationLink);

    const isUserEmailVerified = await database.query("SELECT email_verified FROM users WHERE email = '[email protected]'");

    assert(isUserEmailVerified);
});

Sorry the example is a bit long, but I wanted to exactly describe the flexibility I'm looking for. Is there a test suite that can do something like this? It doesn't have to be in JavaScript or any particular language for that matter. If this doesn't exist, but you think it may be helpful to you as well, would you be interested in helping me build this out?

Thank you

https://redd.it/11qf613
@r_devops

How's the job market for devops right now?

I'm a data engineer that's done a lot of cloud platform work, looking at devops roles and devops-focused data engineering roles in the future.




I was wondering how's the market for devops right now? I'm in a big city for tech, and the job market for devops and data engineers is still pretty bad. Most job postings in my area are at consulting companies.



I'm working at a unicorn tech company now, looking for startups with at least Series A funding and bigger tech companies. I guess that limits me in the job search.

https://redd.it/11r4od3
@r_devops

React Args vs Variables for Docker Images?

I am looking to validate some information and figure out how to resolve a few issues we are seeing with developers building images. I am not a programmer and from a devops perspective, still on the green side. We have some issues with a few teams who build React applications and publish the applications as containers in a registry. While scanning the registry for vulnerabilities a few secrets have been found that obviously need to be addressed.

When asking around people are telling me that React apps need to be built using arguments vs utilizing environment variables so that is why some sensitive values get placed into the docker image. I'm reviewing the builds and that is the case so that is why some secrets are there but is this really a limitation or are teams just uneducated on how to properly build secure React images?

One thing I was also exploring was where these secrets are used and if there are more modern authentication mechanisms React should be using such as Managed Identiies but still digging. Any guidance or links to relevant resources appreciated!

https://redd.it/11r5hqt
@r_devops

Infrastructure as Code with Terraform — Terraform 101

https://yohan.hashnode.dev/infrastructure-as-code-with-terraform-terraform-101

https://redd.it/11r3kil
@r_devops

Can you do infrastructure as code on non-cloud assets?

It seems infrastructure as code and cloud are commonly thrown together. If I had a server farm, could I still do infrastructure as code on it using the same tools like Terraform?

https://redd.it/11r7ufu
@r_devops

Other than compensation, what do you look for when applying to other jobs?

Just curious what others have found helpful when looking at other DevOps jobs at different companies.

https://redd.it/11r86md
@r_devops

Kubernetes, microservices and OAuth2.0 client credentials flow

I have a kubernetes cluster with some microservices which I would like to access the resource server. I have an OAuth2.0 authorization server ready to be deployed and all is left is to configure and distribute client ids and secrets. Now my question is: how do you handle distributing e.g. 20 client secrets and and how do you handle rotating them in the authorization server and client microservices? Are then any standard solutions for this?

https://redd.it/11rahzu
@r_devops

Dynatrace DPS Package

Is anyone signed up on Dynatrace’s DPS Pricing model? Looking to understand the benefits to the customer

https://redd.it/11r8p01
@r_devops