Good sub or Discord channel to practice interviews and mocks?
Just got to know EU startup I work remote is shutting down. I am an experienced SRE/Devops and have beeen working on setting up GKE with Pulumi, typescript and stateful databases, Datadog and openTelemetry recently but I now have to catch up on EKS and anything that I haven't worked on recently.
Is there a good sub or Discord channel where you get to practice interviews, maybe take mocks and just keep morale up while job hunting.
https://redd.it/12xfscg
@r_devops
Just got to know EU startup I work remote is shutting down. I am an experienced SRE/Devops and have beeen working on setting up GKE with Pulumi, typescript and stateful databases, Datadog and openTelemetry recently but I now have to catch up on EKS and anything that I haven't worked on recently.
Is there a good sub or Discord channel where you get to practice interviews, maybe take mocks and just keep morale up while job hunting.
https://redd.it/12xfscg
@r_devops
Reddit
r/devops on Reddit: Good sub or Discord channel to practice interviews and mocks?
Posted by u/ceasars_wreath - No votes and no comments
Having problems while converting my .p7b certificate into .pfx format.
I am trying to create SSL certificate for my Java application. For that I generated my certificate singing request (CSR) using keytool. Now, after requesting certificate, I got it in .p7b format that I don't want. My required format is .pfx or .p12.
I tried to convert this into .pfx but not succeed. I tried openssl command for this.
But this is not working and saying that unable to load private key. Please if someone can help me with this.
https://redd.it/12x2j2o
@r_devops
I am trying to create SSL certificate for my Java application. For that I generated my certificate singing request (CSR) using keytool. Now, after requesting certificate, I got it in .p7b format that I don't want. My required format is .pfx or .p12.
I tried to convert this into .pfx but not succeed. I tried openssl command for this.
openssl pkcs7 -print_certs -in yourdomain.p7b -out yourdomain.pemopenssl pkcs12 -export -in yourdomain.pem -inkey yourdomain.key -out yourdomain.pfxBut this is not working and saying that unable to load private key. Please if someone can help me with this.
https://redd.it/12x2j2o
@r_devops
Reddit
r/devops on Reddit: Having problems while converting my .p7b certificate into .pfx format.
Posted by u/mrburnwal - 1 vote and 13 comments
Why are all the Indian job canidates so bad
My company is hiring for a new web developer and getting floaded with applicants. I'm vetting all of these and have extended numerous interviews. All of the Indian applications I get are all the same. They have a bachelor's from an Indian college, getting a master's from a US college, and have a resume 5-7 pages long of nonsense bullet points. We've given interviews to some of the applicants. In all of the interviews, they would either cheat during the coding tests or lie about their qualifications regarding the software or language.
https://redd.it/12xhv4j
@r_devops
My company is hiring for a new web developer and getting floaded with applicants. I'm vetting all of these and have extended numerous interviews. All of the Indian applications I get are all the same. They have a bachelor's from an Indian college, getting a master's from a US college, and have a resume 5-7 pages long of nonsense bullet points. We've given interviews to some of the applicants. In all of the interviews, they would either cheat during the coding tests or lie about their qualifications regarding the software or language.
https://redd.it/12xhv4j
@r_devops
Reddit
r/devops on Reddit: Why are all the Indian job canidates so bad
Posted by u/Rickety_cricket420 - No votes and 53 comments
I need a proxy to cache (incl. POST, body based keys) and modify headers
I have this API that I do not control.
I need a proxy between my application and this API that:
1. Will send my API key to the origin without exposing it
2. Add CORS headers so my front-end application can work with it
3. Cache the response for some amount of time, including POST requests and keys based off request body
What would be the easiest way to achieve this? I could write a small proxy server but I'm sure there are ready-to-use solutions out there.
CloudFront nailed the two first points, but it doesn't cache POST requests.
Thanks in advance!
https://redd.it/12xozaw
@r_devops
I have this API that I do not control.
I need a proxy between my application and this API that:
1. Will send my API key to the origin without exposing it
2. Add CORS headers so my front-end application can work with it
3. Cache the response for some amount of time, including POST requests and keys based off request body
What would be the easiest way to achieve this? I could write a small proxy server but I'm sure there are ready-to-use solutions out there.
CloudFront nailed the two first points, but it doesn't cache POST requests.
Thanks in advance!
https://redd.it/12xozaw
@r_devops
Reddit
r/devops on Reddit: I need a proxy to cache (incl. POST, body based keys) and modify headers
Posted by u/hagg3n - No votes and 2 comments
How your perfect CI/CD pipeline look like?
Ignoring all the constraints and tooling restrictions, how will you design it?
https://redd.it/12xrfii
@r_devops
Ignoring all the constraints and tooling restrictions, how will you design it?
https://redd.it/12xrfii
@r_devops
Reddit
r/devops on Reddit: How your perfect CI/CD pipeline look like?
Posted by u/arslan70 - No votes and 1 comment
As a developer/SWE (particularly in a regulated industry) do you have admin access access to your local work laptop?
If you don’t, what do you do instead? If you do, could you do your job without?
https://redd.it/12xs5xp
@r_devops
If you don’t, what do you do instead? If you do, could you do your job without?
https://redd.it/12xs5xp
@r_devops
Reddit
r/devops on Reddit: As a developer/SWE (particularly in a regulated industry) do you have admin access access to your local work…
Posted by u/civicode - No votes and 6 comments
Fabcy a DevSecOps CTF
My company have made a capture the flag tournament all about hacking with a DevOps flare. Stuff like hacking Jenkins or Kubernetes. Solve the puzzle, find the flag, learn some security tips and win points. FREE to play, with some chat and networking over on discord.
It's next Thursday (4th May, Star Wars day) and you can sign up and play for free at https://ctf.punksecurity.co.uk/
https://redd.it/12xussr
@r_devops
My company have made a capture the flag tournament all about hacking with a DevOps flare. Stuff like hacking Jenkins or Kubernetes. Solve the puzzle, find the flag, learn some security tips and win points. FREE to play, with some chat and networking over on discord.
It's next Thursday (4th May, Star Wars day) and you can sign up and play for free at https://ctf.punksecurity.co.uk/
https://redd.it/12xussr
@r_devops
Reddit
r/devops on Reddit: Fabcy a DevSecOps CTF
Posted by u/punksecurity_simon - No votes and no comments
Roast my resume early career DevOps engineer
resume link
I'm looking to transition into more senior roles eventually, maybe senior DevOps engineer or solutions architect roles.
https://redd.it/12xwfj6
@r_devops
resume link
I'm looking to transition into more senior roles eventually, maybe senior DevOps engineer or solutions architect roles.
https://redd.it/12xwfj6
@r_devops
Imgur
Discover the magic of the internet at Imgur, a community powered entertainment destination. Lift your spirits with funny jokes, trending memes, entertaining gifs, inspiring stories, viral videos, and so much more from users.
Is secure string variable a different format from the usual string?
I am running a pipeline where I’m trying to pass a secure string variable as input parameter to my PowerShell script. But it keeps failing. And for context, I’m sending a connection string that is critical to access azure blob data.
https://redd.it/12xu8xz
@r_devops
I am running a pipeline where I’m trying to pass a secure string variable as input parameter to my PowerShell script. But it keeps failing. And for context, I’m sending a connection string that is critical to access azure blob data.
https://redd.it/12xu8xz
@r_devops
Reddit
r/devops on Reddit: Is secure string variable a different format from the usual string?
Posted by u/chloyeeet - 1 vote and 3 comments
Getting better at observability, looking for suggestions for my python-based discord bot.
TL;DR: I'm looking for a good, ideally OpenTelemetry base stack for python that would work well for the scenarios below (distributed traces, logging, metrics), knowing that I have to manually instrument, and plays well in local dev env.
Hey all. I have some experience with Azure Monitoring and App Insights, but the tooling there for python is... lacking.
So I'm taking this opportunity to expand my scope of knowledge and try something different.
My needs are as follows:
\- I have websockets that I receive messages on that I'd like to handle as a new span/operation id- I want to be able to associate python logging as trace events so I can view a timeline of what happened for a given handler call.- I want to be able to treat my calls to external dependencies like HTTP or database over tcp as child traces.- I want to be able to capture overall traces status (success/fail and if possible why)
\- I have discord command handlers that should have similar requirements to the websockets.
\- I want to be able to emit metrics both linked to my traces (duration and context dimensions) as well as independent (ex: breakdown of commands ran by discord server id)
I feel as though with some massaging I could probably keep using application insights + python OTel + Azure Monitor Exporters OTel Preview, but it seems to me that given this isn't a work project, this is a fine learning opportunity.
So as a result, I'm adding a few "nice to have" options.
1. I have monthly credit on Azure, so anything I can host "production in azure" would be great.
2. I would love whatever I use to have a relatively solid self-host development solution
3. The more I can do configuration and provisioning as code, the better.
4. Free is best, cheap is good.
I've been looking a bit at grafana, prometheus, and loki. I'm not clear where traces are stored in this sort of a setup. In fact, I'm still trying to wrap my head around the OTel model, so there are things about it I clearly don't fully understand, but I'm in a bit of a "I don't know what I don't know, ya know?" state right now.
Thanks in advance to anyone who can help point me in a helpful direction.
https://redd.it/12xmd90
@r_devops
TL;DR: I'm looking for a good, ideally OpenTelemetry base stack for python that would work well for the scenarios below (distributed traces, logging, metrics), knowing that I have to manually instrument, and plays well in local dev env.
Hey all. I have some experience with Azure Monitoring and App Insights, but the tooling there for python is... lacking.
So I'm taking this opportunity to expand my scope of knowledge and try something different.
My needs are as follows:
\- I have websockets that I receive messages on that I'd like to handle as a new span/operation id- I want to be able to associate python logging as trace events so I can view a timeline of what happened for a given handler call.- I want to be able to treat my calls to external dependencies like HTTP or database over tcp as child traces.- I want to be able to capture overall traces status (success/fail and if possible why)
\- I have discord command handlers that should have similar requirements to the websockets.
\- I want to be able to emit metrics both linked to my traces (duration and context dimensions) as well as independent (ex: breakdown of commands ran by discord server id)
I feel as though with some massaging I could probably keep using application insights + python OTel + Azure Monitor Exporters OTel Preview, but it seems to me that given this isn't a work project, this is a fine learning opportunity.
So as a result, I'm adding a few "nice to have" options.
1. I have monthly credit on Azure, so anything I can host "production in azure" would be great.
2. I would love whatever I use to have a relatively solid self-host development solution
3. The more I can do configuration and provisioning as code, the better.
4. Free is best, cheap is good.
I've been looking a bit at grafana, prometheus, and loki. I'm not clear where traces are stored in this sort of a setup. In fact, I'm still trying to wrap my head around the OTel model, so there are things about it I clearly don't fully understand, but I'm in a bit of a "I don't know what I don't know, ya know?" state right now.
Thanks in advance to anyone who can help point me in a helpful direction.
https://redd.it/12xmd90
@r_devops
Reddit
r/devops on Reddit: Getting better at observability, looking for suggestions for my python-based discord bot.
Posted by u/polyphonyrequiem - 1 vote and no comments
Those of you with internal CLIs/tooling written in general purpose languages what do they do and what language?
Recently wrote a tiny GoLang CLI that wraps kubectl and AWS CLI to make running commands for different environments/regions/services easier and looking for inspiration to add to it!
https://redd.it/12y2r51
@r_devops
Recently wrote a tiny GoLang CLI that wraps kubectl and AWS CLI to make running commands for different environments/regions/services easier and looking for inspiration to add to it!
https://redd.it/12y2r51
@r_devops
Reddit
r/devops on Reddit: Those of you with internal CLIs/tooling written in general purpose languages what do they do and what language?
Posted by u/noobernetes - No votes and no comments
Roast my resume, please. Not a senior, 4 yoe, can't find a job.
Resume link: https://imgur.com/q2fZfQs
Left my last enterprise job because they failed to pay me my salary multiple times in a 5 months. Tried to apply dozens of time. Out of 50+ applications, I got only 4 interviews with a team. On one of them I failed programming block: stressed out because that was my first public coding. No regrets though, it was a great experience. 2 others went great, but folks have preferred candidates with k8s and system architecture experience, which i have none. The one I passed, was a contract gig. Accepted an offer, cause needed money to live. Finished it successfully a month ago. And again have had no luck with finding anything since. In 100% of cases I am rejected by email without even a recruiter talk.
My location is between Europe and Middle East. I am applying mostly to Balkan, Cyprus and Eastern European remote positions and local jobs in my current country of residence. Positions I apply to: Junior DevOps, Intern DevOps, System Administrator, Technical Support, System engineer, Service Desk engineer. Rarely to regular Devops positions, because they mostly asking for k8s knowledge.
Can you guys, please, help me to understand what's wrong with me or my resume?
Is it an area of search? Skills? Is there exist some hidden international pool of "not recommended" employees, where I have been thrown by my previous employer? My passport? Fira Sans font?
Thank you in advance. Appreciate any feedback.
https://redd.it/12y5cm4
@r_devops
Resume link: https://imgur.com/q2fZfQs
Left my last enterprise job because they failed to pay me my salary multiple times in a 5 months. Tried to apply dozens of time. Out of 50+ applications, I got only 4 interviews with a team. On one of them I failed programming block: stressed out because that was my first public coding. No regrets though, it was a great experience. 2 others went great, but folks have preferred candidates with k8s and system architecture experience, which i have none. The one I passed, was a contract gig. Accepted an offer, cause needed money to live. Finished it successfully a month ago. And again have had no luck with finding anything since. In 100% of cases I am rejected by email without even a recruiter talk.
My location is between Europe and Middle East. I am applying mostly to Balkan, Cyprus and Eastern European remote positions and local jobs in my current country of residence. Positions I apply to: Junior DevOps, Intern DevOps, System Administrator, Technical Support, System engineer, Service Desk engineer. Rarely to regular Devops positions, because they mostly asking for k8s knowledge.
Can you guys, please, help me to understand what's wrong with me or my resume?
Is it an area of search? Skills? Is there exist some hidden international pool of "not recommended" employees, where I have been thrown by my previous employer? My passport? Fira Sans font?
Thank you in advance. Appreciate any feedback.
https://redd.it/12y5cm4
@r_devops
Imgur
Discover the magic of the internet at Imgur, a community powered entertainment destination. Lift your spirits with funny jokes, trending memes, entertaining gifs, inspiring stories, viral videos, and so much more from users.
Resume review
For context, I am an international masters student and I have been applying to summer internships since the past 2-3 months in SRE/DevOps roles but I never heard back from most places. Maybe the reason was my resume, maybe I started applying too late, or maybe it's the market. I don't know... but it did not go according to my expectations.
I found an internship at a small company but I want to prepare myself better for a full-time job search later when I am graduating at the end of the year. Starting with fixing my resume. I would love to hear some feedback on it and any other advice for my job search.
Here is the link to my resume: https://imgur.com/a/FY3Q3P5
Thank you for your time!
https://redd.it/12y7diy
@r_devops
For context, I am an international masters student and I have been applying to summer internships since the past 2-3 months in SRE/DevOps roles but I never heard back from most places. Maybe the reason was my resume, maybe I started applying too late, or maybe it's the market. I don't know... but it did not go according to my expectations.
I found an internship at a small company but I want to prepare myself better for a full-time job search later when I am graduating at the end of the year. Starting with fixing my resume. I would love to hear some feedback on it and any other advice for my job search.
Here is the link to my resume: https://imgur.com/a/FY3Q3P5
Thank you for your time!
https://redd.it/12y7diy
@r_devops
Imgur
Resume
Discover the magic of the internet at Imgur, a community powered entertainment destination. Lift your spirits with funny jokes, trending memes, entertaining gifs, inspiring stories, viral videos, and so much more from users.
Automated Release Versioning and Bumping on Gitlab
Context:
I am building a CICD pipeline for Java(Springboot) & node based microservices which will be deployed to EKS cluster using Helm. Preference to keeping a minimum tool footprint i.e. using all possible features of Gitlab to achieve this. My question is primarily around the versioning part of the pipeline. How do you guys handle the automated artifact versioning and version bumping? I have a few options in my mind:
Options:
1. Use Git Tags to store the version using semantic release plugin for Gitlab.
I have used this before and the Squash commits feature in merge request breaks it since tags are tied to commit sha.
2. Use a File inside Gitlab Repo along with git LFS locking. (Locking required since multiple pipelines may write to this file at the same time)
This looks okay, but I have seen people having issues with file not getting correctly displayed.
3. Use a Database to store the versions (DynamoDB)
Only downside I see is additional component (connectivity, credentials, costs, etc)
4. Fetch Helm Chart versions, bump the version and push the Chart back.
Not even sure this is the right way to do it.
Please provide your suggestions on how you would go about doing it.
https://redd.it/12y8kdg
@r_devops
Context:
I am building a CICD pipeline for Java(Springboot) & node based microservices which will be deployed to EKS cluster using Helm. Preference to keeping a minimum tool footprint i.e. using all possible features of Gitlab to achieve this. My question is primarily around the versioning part of the pipeline. How do you guys handle the automated artifact versioning and version bumping? I have a few options in my mind:
Options:
1. Use Git Tags to store the version using semantic release plugin for Gitlab.
I have used this before and the Squash commits feature in merge request breaks it since tags are tied to commit sha.
2. Use a File inside Gitlab Repo along with git LFS locking. (Locking required since multiple pipelines may write to this file at the same time)
This looks okay, but I have seen people having issues with file not getting correctly displayed.
3. Use a Database to store the versions (DynamoDB)
Only downside I see is additional component (connectivity, credentials, costs, etc)
4. Fetch Helm Chart versions, bump the version and push the Chart back.
Not even sure this is the right way to do it.
Please provide your suggestions on how you would go about doing it.
https://redd.it/12y8kdg
@r_devops
Reddit
r/devops on Reddit: Automated Release Versioning and Bumping on Gitlab
Posted by u/godOfOps - No votes and 5 comments
Hey, Guys just need your small help!
I have been researching Linux for DevOps for quite some time and by researching I have stacked piles of sample bash scripts. So, I want you all to go through my GitHub repo and if you found my repo for the sample script good, please Fork it and give my repo some stars. Thanks in advance.
My Github Repo: - https://github.com/yashwant7chaudhari/Sample-Bash-Scripts
https://redd.it/12y7pmn
@r_devops
I have been researching Linux for DevOps for quite some time and by researching I have stacked piles of sample bash scripts. So, I want you all to go through my GitHub repo and if you found my repo for the sample script good, please Fork it and give my repo some stars. Thanks in advance.
My Github Repo: - https://github.com/yashwant7chaudhari/Sample-Bash-Scripts
https://redd.it/12y7pmn
@r_devops
Reddit
r/devops on Reddit: Hey, Guys just need your small help!
Posted by u/Minute_Ad5775 - No votes and 2 comments
Better than Backstage?
Disclaimer, I’m the ceo-founder of Port.
Adding here a technical cover of Port by Viktor Farcic
https://youtu.be/ro-h7tsp0qI
Would love to get your thoughts and feedback on our product decisions
https://redd.it/12ybccy
@r_devops
Disclaimer, I’m the ceo-founder of Port.
Adding here a technical cover of Port by Viktor Farcic
https://youtu.be/ro-h7tsp0qI
Would love to get your thoughts and feedback on our product decisions
https://redd.it/12ybccy
@r_devops
YouTube
How To Build A UI For An Internal Developer Platform (IDP) With Port?
A UI is an almost unavoidable component in internal developer platforms (IDP). In the past, the only widely accepted choice was Backstage. Today, we have Port as a (potentially) better choice for the Web UI part of your developer portal.
#port #idp #int…
#port #idp #int…
Need a Feature Flagging Solution for Your Project? Let's Discuss and Share Ideas!
Hey everyone!
I've been exploring the world of feature flagging and remote configuration lately, and I'm interested in helping others who might be looking for a solution to manage the rollout of new features, A/B testing, and remote configuration in their projects.
If you're in search of a feature flagging tool, or if you're just curious about the concept, let's start a discussion:
1. What are your requirements and expectations for a feature flagging solution?
2. Are there any specific challenges or use cases you're looking to address with feature flags?
3. Have you come across any platforms or tools that have caught your attention?
Whether you're new to feature flagging or have some experience, I'd love to connect with you and share ideas. This is a great opportunity to learn from each other and discover potential solutions that could benefit your projects.
Feel free to ask questions, share your thoughts, or even tell us about your current project's feature flagging needs. I look forward to hearing from you all!
Cheers!
https://redd.it/12ybc5s
@r_devops
Hey everyone!
I've been exploring the world of feature flagging and remote configuration lately, and I'm interested in helping others who might be looking for a solution to manage the rollout of new features, A/B testing, and remote configuration in their projects.
If you're in search of a feature flagging tool, or if you're just curious about the concept, let's start a discussion:
1. What are your requirements and expectations for a feature flagging solution?
2. Are there any specific challenges or use cases you're looking to address with feature flags?
3. Have you come across any platforms or tools that have caught your attention?
Whether you're new to feature flagging or have some experience, I'd love to connect with you and share ideas. This is a great opportunity to learn from each other and discover potential solutions that could benefit your projects.
Feel free to ask questions, share your thoughts, or even tell us about your current project's feature flagging needs. I look forward to hearing from you all!
Cheers!
https://redd.it/12ybc5s
@r_devops
Reddit
r/devops on Reddit: Need a Feature Flagging Solution for Your Project? Let's Discuss and Share Ideas!
Posted by u/niigarzy - 1 vote and 1 comment
javax.ejb.CreateException: Initialization failed for Singleton ResourceLoader
This is the error:
I am trying to deploy an .ear application to Glasssfish application server. And I am getting the above mentioned error. The JDBC Connection Pools database ping is successful. Here're all the settings:
https://imgur.com/a/t7LTru3
https://imgur.com/a/Mwu9Ulz
Here're the files that I added for deployment in
https://imgur.com/a/aLILZya
Here's what I get when I
https://imgur.com/a/221wrwp
I've got no idea how do I get the full server.log of the most recent log (
How do I fix this issue? PS, I'm on centos 7 on vmware workstation pro.
As per the shittyly written instruction manual, this is my
https://pastebin.com/36zWr5he
I've changed hibernate.update = update
initialize.initial.script=Y and,
hibernate.dialect=org.hibernate.dialect.MySQL8Dialect
https://redd.it/12yeo6d
@r_devops
This is the error:
Error occurred during deployment: Exception while loading the app : javax.ejb.CreateException: Initialization failed for Singleton ResourceLoader. Please see server.log for more details.I am trying to deploy an .ear application to Glasssfish application server. And I am getting the above mentioned error. The JDBC Connection Pools database ping is successful. Here're all the settings:
https://imgur.com/a/t7LTru3
https://imgur.com/a/Mwu9Ulz
Here're the files that I added for deployment in
/home/banksmart/glassfish4/glassfish/domains/domain1/confighttps://imgur.com/a/aLILZya
Here's what I get when I
ll into config directory.https://imgur.com/a/221wrwp
I've got no idea how do I get the full server.log of the most recent log (
tail -f server.log doesn't provides the most recent log), so pardon me for not being able to present it.How do I fix this issue? PS, I'm on centos 7 on vmware workstation pro.
As per the shittyly written instruction manual, this is my
adminconfiguration.properties file:https://pastebin.com/36zWr5he
I've changed hibernate.update = update
initialize.initial.script=Y and,
hibernate.dialect=org.hibernate.dialect.MySQL8Dialect
https://redd.it/12yeo6d
@r_devops
Imgur
Discover the magic of the internet at Imgur, a community powered entertainment destination. Lift your spirits with funny jokes, trending memes, entertaining gifs, inspiring stories, viral videos, and so much more from users.
GitHub integration to azure devops for an organization
Recently the team asked me to create a cicd pipeline for Uipath deployment and i have no prior experience in cicd. I learnt through online, How do i integrate GitHub into azure devops? The company has created an organisation on GitHub. Azure pipeline asks for authentication, but hardly anyone approves. I believe there is way to create a personal access token and add service connection but not sure if it's the correct way. I want to avoid Oauth.
https://redd.it/12ygm05
@r_devops
Recently the team asked me to create a cicd pipeline for Uipath deployment and i have no prior experience in cicd. I learnt through online, How do i integrate GitHub into azure devops? The company has created an organisation on GitHub. Azure pipeline asks for authentication, but hardly anyone approves. I believe there is way to create a personal access token and add service connection but not sure if it's the correct way. I want to avoid Oauth.
https://redd.it/12ygm05
@r_devops
Reddit
r/devops on Reddit: GitHub integration to azure devops for an organization
Posted by u/IndianBarney - No votes and no comments
Securing Release Pipelines in Github Actions? How?
I have a release workflow that does a promotion to heroku from Staging to Prod, but only certain people can run that in the Main branch, but the thing is that if somebody does a checkout on the main branch and they create their branch they will be able to modify the release.yaml workflow and run that workflow from their branch at the Action section in Github, and technically do a release, because the branch has access to Secret Vars? - Did any of you resolve this problem, other than creating specific repos just for this activity.
https://redd.it/12yhqpb
@r_devops
I have a release workflow that does a promotion to heroku from Staging to Prod, but only certain people can run that in the Main branch, but the thing is that if somebody does a checkout on the main branch and they create their branch they will be able to modify the release.yaml workflow and run that workflow from their branch at the Action section in Github, and technically do a release, because the branch has access to Secret Vars? - Did any of you resolve this problem, other than creating specific repos just for this activity.
https://redd.it/12yhqpb
@r_devops
Reddit
r/devops on Reddit: Securing Release Pipelines in Github Actions? How?
Posted by u/techcury - No votes and no comments
This month we're talking about lessons learned from setting up and organizing internal dev platforms.
https://dx.community
This Friday, two members of the Amplitude eng team will join us to discuss the do's and don'ts of internal dev platforms. It's free and not recorded.
https://redd.it/12xqu2w
@r_devops
https://dx.community
This Friday, two members of the Amplitude eng team will join us to discuss the do's and don'ts of internal dev platforms. It's free and not recorded.
https://redd.it/12xqu2w
@r_devops
dx.community
The Hangar
A community of DX enthusiasts.