Reddit DevOps
266 subscribers
30.9K links
Reddit DevOps. #devops
Thanks @reddit2telegram and @r_channels
Download Telegram
Good sub or Discord channel to practice interviews and mocks?

Just got to know EU startup I work remote is shutting down. I am an experienced SRE/Devops and have beeen working on setting up GKE with Pulumi, typescript and stateful databases, Datadog and openTelemetry recently but I now have to catch up on EKS and anything that I haven't worked on recently.

Is there a good sub or Discord channel where you get to practice interviews, maybe take mocks and just keep morale up while job hunting.

https://redd.it/12xfscg
@r_devops
Having problems while converting my .p7b certificate into .pfx format.

I am trying to create SSL certificate for my Java application. For that I generated my certificate singing request (CSR) using keytool. Now, after requesting certificate, I got it in .p7b format that I don't want. My required format is .pfx or .p12.

I tried to convert this into .pfx but not succeed. I tried openssl command for this.

openssl pkcs7 -print_certs -in yourdomain.p7b -out yourdomain.pem

openssl pkcs12 -export -in yourdomain.pem -inkey yourdomain.key -out yourdomain.pfx

But this is not working and saying that unable to load private key. Please if someone can help me with this.

https://redd.it/12x2j2o
@r_devops
Why are all the Indian job canidates so bad

My company is hiring for a new web developer and getting floaded with applicants. I'm vetting all of these and have extended numerous interviews. All of the Indian applications I get are all the same. They have a bachelor's from an Indian college, getting a master's from a US college, and have a resume 5-7 pages long of nonsense bullet points. We've given interviews to some of the applicants. In all of the interviews, they would either cheat during the coding tests or lie about their qualifications regarding the software or language.

https://redd.it/12xhv4j
@r_devops
I need a proxy to cache (incl. POST, body based keys) and modify headers

I have this API that I do not control.

I need a proxy between my application and this API that:

1. Will send my API key to the origin without exposing it
2. Add CORS headers so my front-end application can work with it
3. Cache the response for some amount of time, including POST requests and keys based off request body

What would be the easiest way to achieve this? I could write a small proxy server but I'm sure there are ready-to-use solutions out there.

CloudFront nailed the two first points, but it doesn't cache POST requests.

Thanks in advance!

https://redd.it/12xozaw
@r_devops
How your perfect CI/CD pipeline look like?

Ignoring all the constraints and tooling restrictions, how will you design it?

https://redd.it/12xrfii
@r_devops
As a developer/SWE (particularly in a regulated industry) do you have admin access access to your local work laptop?

If you don’t, what do you do instead? If you do, could you do your job without?

https://redd.it/12xs5xp
@r_devops
Fabcy a DevSecOps CTF

My company have made a capture the flag tournament all about hacking with a DevOps flare. Stuff like hacking Jenkins or Kubernetes. Solve the puzzle, find the flag, learn some security tips and win points. FREE to play, with some chat and networking over on discord.

It's next Thursday (4th May, Star Wars day) and you can sign up and play for free at https://ctf.punksecurity.co.uk/

https://redd.it/12xussr
@r_devops
Is secure string variable a different format from the usual string?

I am running a pipeline where I’m trying to pass a secure string variable as input parameter to my PowerShell script. But it keeps failing. And for context, I’m sending a connection string that is critical to access azure blob data.

https://redd.it/12xu8xz
@r_devops
Getting better at observability, looking for suggestions for my python-based discord bot.

TL;DR: I'm looking for a good, ideally OpenTelemetry base stack for python that would work well for the scenarios below (distributed traces, logging, metrics), knowing that I have to manually instrument, and plays well in local dev env.


Hey all. I have some experience with Azure Monitoring and App Insights, but the tooling there for python is... lacking.

So I'm taking this opportunity to expand my scope of knowledge and try something different.

My needs are as follows:

\- I have websockets that I receive messages on that I'd like to handle as a new span/operation id- I want to be able to associate python logging as trace events so I can view a timeline of what happened for a given handler call.- I want to be able to treat my calls to external dependencies like HTTP or database over tcp as child traces.- I want to be able to capture overall traces status (success/fail and if possible why)

\- I have discord command handlers that should have similar requirements to the websockets.

\- I want to be able to emit metrics both linked to my traces (duration and context dimensions) as well as independent (ex: breakdown of commands ran by discord server id)

I feel as though with some massaging I could probably keep using application insights + python OTel + Azure Monitor Exporters OTel Preview, but it seems to me that given this isn't a work project, this is a fine learning opportunity.

So as a result, I'm adding a few "nice to have" options.

1. I have monthly credit on Azure, so anything I can host "production in azure" would be great.
2. I would love whatever I use to have a relatively solid self-host development solution
3. The more I can do configuration and provisioning as code, the better.
4. Free is best, cheap is good.

I've been looking a bit at grafana, prometheus, and loki. I'm not clear where traces are stored in this sort of a setup. In fact, I'm still trying to wrap my head around the OTel model, so there are things about it I clearly don't fully understand, but I'm in a bit of a "I don't know what I don't know, ya know?" state right now.

Thanks in advance to anyone who can help point me in a helpful direction.

https://redd.it/12xmd90
@r_devops
Those of you with internal CLIs/tooling written in general purpose languages what do they do and what language?

Recently wrote a tiny GoLang CLI that wraps kubectl and AWS CLI to make running commands for different environments/regions/services easier and looking for inspiration to add to it!

https://redd.it/12y2r51
@r_devops
Roast my resume, please. Not a senior, 4 yoe, can't find a job.

Resume link: https://imgur.com/q2fZfQs


Left my last enterprise job because they failed to pay me my salary multiple times in a 5 months. Tried to apply dozens of time. Out of 50+ applications, I got only 4 interviews with a team. On one of them I failed programming block: stressed out because that was my first public coding. No regrets though, it was a great experience. 2 others went great, but folks have preferred candidates with k8s and system architecture experience, which i have none. The one I passed, was a contract gig. Accepted an offer, cause needed money to live. Finished it successfully a month ago. And again have had no luck with finding anything since. In 100% of cases I am rejected by email without even a recruiter talk.


My location is between Europe and Middle East. I am applying mostly to Balkan, Cyprus and Eastern European remote positions and local jobs in my current country of residence. Positions I apply to: Junior DevOps, Intern DevOps, System Administrator, Technical Support, System engineer, Service Desk engineer. Rarely to regular Devops positions, because they mostly asking for k8s knowledge.


Can you guys, please, help me to understand what's wrong with me or my resume?
Is it an area of search? Skills? Is there exist some hidden international pool of "not recommended" employees, where I have been thrown by my previous employer? My passport? Fira Sans font?


Thank you in advance. Appreciate any feedback.

https://redd.it/12y5cm4
@r_devops
Resume review

For context, I am an international masters student and I have been applying to summer internships since the past 2-3 months in SRE/DevOps roles but I never heard back from most places. Maybe the reason was my resume, maybe I started applying too late, or maybe it's the market. I don't know... but it did not go according to my expectations.

I found an internship at a small company but I want to prepare myself better for a full-time job search later when I am graduating at the end of the year. Starting with fixing my resume. I would love to hear some feedback on it and any other advice for my job search.

Here is the link to my resume: https://imgur.com/a/FY3Q3P5

Thank you for your time!

https://redd.it/12y7diy
@r_devops
Automated Release Versioning and Bumping on Gitlab

Context:

I am building a CICD pipeline for Java(Springboot) & node based microservices which will be deployed to EKS cluster using Helm. Preference to keeping a minimum tool footprint i.e. using all possible features of Gitlab to achieve this. My question is primarily around the versioning part of the pipeline. How do you guys handle the automated artifact versioning and version bumping? I have a few options in my mind:

Options:

1. Use Git Tags to store the version using semantic release plugin for Gitlab.
I have used this before and the Squash commits feature in merge request breaks it since tags are tied to commit sha.
2. Use a File inside Gitlab Repo along with git LFS locking. (Locking required since multiple pipelines may write to this file at the same time)
This looks okay, but I have seen people having issues with file not getting correctly displayed.
3. Use a Database to store the versions (DynamoDB)
Only downside I see is additional component (connectivity, credentials, costs, etc)
4. Fetch Helm Chart versions, bump the version and push the Chart back.
Not even sure this is the right way to do it.

Please provide your suggestions on how you would go about doing it.

https://redd.it/12y8kdg
@r_devops
Hey, Guys just need your small help!

I have been researching Linux for DevOps for quite some time and by researching I have stacked piles of sample bash scripts. So, I want you all to go through my GitHub repo and if you found my repo for the sample script good, please Fork it and give my repo some stars. Thanks in advance.

My Github Repo: - https://github.com/yashwant7chaudhari/Sample-Bash-Scripts

https://redd.it/12y7pmn
@r_devops
Need a Feature Flagging Solution for Your Project? Let's Discuss and Share Ideas!

Hey everyone!

I've been exploring the world of feature flagging and remote configuration lately, and I'm interested in helping others who might be looking for a solution to manage the rollout of new features, A/B testing, and remote configuration in their projects.

If you're in search of a feature flagging tool, or if you're just curious about the concept, let's start a discussion:

1. What are your requirements and expectations for a feature flagging solution?
2. Are there any specific challenges or use cases you're looking to address with feature flags?
3. Have you come across any platforms or tools that have caught your attention?

Whether you're new to feature flagging or have some experience, I'd love to connect with you and share ideas. This is a great opportunity to learn from each other and discover potential solutions that could benefit your projects.

Feel free to ask questions, share your thoughts, or even tell us about your current project's feature flagging needs. I look forward to hearing from you all!

Cheers!

https://redd.it/12ybc5s
@r_devops
javax.ejb.CreateException: Initialization failed for Singleton ResourceLoader

This is the error:

Error occurred during deployment: Exception while loading the app : javax.ejb.CreateException: Initialization failed for Singleton ResourceLoader. Please see server.log for more details.

I am trying to deploy an .ear application to Glasssfish application server. And I am getting the above mentioned error. The JDBC Connection Pools database ping is successful. Here're all the settings:

https://imgur.com/a/t7LTru3

https://imgur.com/a/Mwu9Ulz

Here're the files that I added for deployment in

/home/banksmart/glassfish4/glassfish/domains/domain1/config

https://imgur.com/a/aLILZya

Here's what I get when I ll into config directory.

https://imgur.com/a/221wrwp

I've got no idea how do I get the full server.log of the most recent log (tail -f server.log doesn't provides the most recent log), so pardon me for not being able to present it.

How do I fix this issue? PS, I'm on centos 7 on vmware workstation pro.

As per the shittyly written instruction manual, this is my adminconfiguration.properties file:

https://pastebin.com/36zWr5he

I've changed hibernate.update = update

initialize.initial.script=Y and,

hibernate.dialect=org.hibernate.dialect.MySQL8Dialect

https://redd.it/12yeo6d
@r_devops
GitHub integration to azure devops for an organization

Recently the team asked me to create a cicd pipeline for Uipath deployment and i have no prior experience in cicd. I learnt through online, How do i integrate GitHub into azure devops? The company has created an organisation on GitHub. Azure pipeline asks for authentication, but hardly anyone approves. I believe there is way to create a personal access token and add service connection but not sure if it's the correct way. I want to avoid Oauth.

https://redd.it/12ygm05
@r_devops
Securing Release Pipelines in Github Actions? How?

I have a release workflow that does a promotion to heroku from Staging to Prod, but only certain people can run that in the Main branch, but the thing is that if somebody does a checkout on the main branch and they create their branch they will be able to modify the release.yaml workflow and run that workflow from their branch at the Action section in Github, and technically do a release, because the branch has access to Secret Vars? - Did any of you resolve this problem, other than creating specific repos just for this activity.

https://redd.it/12yhqpb
@r_devops
This month we're talking about lessons learned from setting up and organizing internal dev platforms.

https://dx.community

This Friday, two members of the Amplitude eng team will join us to discuss the do's and don'ts of internal dev platforms. It's free and not recorded.

https://redd.it/12xqu2w
@r_devops