Where do you go for your dev related news? i'm looking for magazine's interpage's or newsoutlets.

title

https://redd.it/139q1fn
@r_devops

How do you write documentation that developers without experience are able to follow and understand ?

This seem like my nemesis. I cannot put myself in the shoes of someone who has a hard time googling for „What is Helm” or „aws lambda in python”..

I just cant. Its fundamentally written in my DNA that if I dont know something -> I learn, search and understand.

But it seems most recent developers are NOT LIKE THAT.

Im supposed to create an introduction documentation to any tech we use. Something like „From ZERO to HERO”..

I just cant do it, most things are so obvious to me, I always forget to put them in documentation.

Worst part is that I know that even, if I write an amazing doc piece -> ppl dont read it and still complain they dont understand and want to be spoon fed or hand holded.

I cannot be the only one with this issue. How other platform teams are handing this ? How do you nit lose your mind with those new devs ?

https://redd.it/139ryg1
@r_devops

Thoughts on this??

Link: https://youtu.be/dV3wAe8HV7Q

https://redd.it/139vx3b
@r_devops

Trunk based dev to deployment

At the company I work at, for an internal tool, we recently switched our git strategy from using long lived branches for our 4 environments DEV, QA, UAT & PROD to using a single branch called mainline.

The current CI/CD setup just deploys from the respective branches whenever there is a merge on their branch. Having moved to trunk based development model, I was looking around for solutions to setup our CI/CD to allow devs to tests their code in lower environments before promoting to higher envs for QA or UAT testing.

What possible ways can this be done without having the need to trigger the CI/CD pipeline for each environment manually and also guarantee that devs or QAs have confirmed that the code works as expected.

https://redd.it/139xotd
@r_devops

Amidst Docker, Podman why does one not hear about systemd-nspawn, mkiso and debootstrap often?

Containerization at its core works with Namespacing, User Ids, Networks in the userspace.

There is a great write up by Benjamin Toll about using systemd containers, where he breaks down all the capabilities that systemd-nspawn along side with tools like mkiso / debootstrap can do without Daemon Layers like Docker / Podman and runc, containerd.

I am quite curious if there are certain things these set of tools are not able to achieve in the Container Space. If DevOps peeps who use them, can you share your experience with systemd-nspawn?

https://redd.it/139u04t
@r_devops

Keeping contents in the same git repository from two different folders

We have a parent folder ABC upon which git is configured. Which means that if we run git config -l after cd to ABC we can see the git repository it is pointing to.

​

Now I wanted to add fstab file which is under /etc directory to the same git repository. Is there any way I can acheieve this?

we are thinking to do rsync between /etc/fstab with fstab file(under ABC), so that it can pushed to the same repository.

​

Please let me know your suggestions.

https://redd.it/139qdlx
@r_devops

Issue with auth when using a bitnami postgres helm chart

helm install --set auth.username="admin",auth.password="postgres123",auth.database="database",architecture="replication", release oci://registry-1.docker.io/bitnamicharts/postgresql

const sequelize = new Sequelize('database', null, null,{
dialect: 'postgres',
port: 5432,
replication: {
read: [
{
host: 'release-postgresql-read',
username: process.env.DB_USER || 'admin',
password: process.env.DB_PASSWORD || 'postgres123'
},
],
write: {
host: 'release-postgresql-primary',
username: process.env.DB_USER || 'admin',
password: process.env.DB_PASSWORD || 'postgres123'
}
},
pool: {
max: 10,
idle: 30000
},
});

This is what I have.

When I go kubectl get services, I get:

release-postgresql-primary ClusterIP 10.111.239.207 <none> 5432/TCP 85m
release-postgresql-primary-hl ClusterIP None <none> 5432/TCP 85m
release-postgresql-read ClusterIP 10.107.56.248 <none> 5432/TCP 85m
release-postgresql-read-hl ClusterIP None <none> 5432/TCP 85m

I use the clusterIp to connect to the read and write instances of the postgres bitnami chart, but I get the error:

Error: SequelizeConnectionError: password authentication failed for user "admin" (node:19) UnhandledPromiseRejectionWarning: SequelizeConnectionError: password authentication failed for user "postgres" at Client._connectionCallback (/app/node_modules/sequelize/lib/dialects/postgres/connection-manager.js:143:24) at Client._handleErrorWhileConnecting (/app/node_modules/pg/lib/client.js:318:19) at Client._handleErrorMessage (/app/node_modules/pg/lib/client.js:338:19) at Connection.emit (events.js:400:28) at /app/node_modules/pg/lib/connection.js:116:12 at Parser.parse (/app/node_modules/pg-protocol/dist/parser.js:40:17) at Socket. (/app/node_modules/pg-protocol/dist/index.js:11:42) at Socket.emit (events.js:400:28) at addChunk (internal/streams/readable.js:293:12) at readableAddChunk (internal/streams/readable.js:267:9)

https://redd.it/13a3wug
@r_devops

Lightweight ELK alternative for ingesting and analyzing local logs?

Looking for something like ELK stack that I could spin up quickly locally to forward some structured logs and analyze them. What are existing solutions?

https://redd.it/13ab0l5
@r_devops

ingress-service not working on minikube

NAME CLASS HOSTS ADDRESS PORTS AGE
ingress-service nginx kub.com 192.168.49.2 80 10m

I made a curl request:

&#x200B;

curl -X GET "https://kub.com/api/mark?name=peter"

&#x200B;

I am getting:

&#x200B;

DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

When I use docker-compose, I get a response, but with kubernetes, it's not getting routed.

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: ingress-service
annotations:
nginx.ingress.kubernetes.io/rewrite-target: /$1
spec:
rules:
- host: kub.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: cluster-ip-service
port:
number: 3000

I executed these:

minikube ssh
sudo ip link set docker0 promisc on
minikube addons enable ingress
minikube addons enable ingress-dns


But I can't seem to make it work. I made a similar config for a simpler app and I could make a GET request to example.com/

https://stackoverflow.com/questions/66275458/could-not-access-kubernetes-ingress-in-browser-on-windows-home-with-minikube

&#x200B;

Is there something wrong with the ingress config?

https://redd.it/13aac21
@r_devops

Aren't we just glorified linux admins?

At least I wish I were.
In my sysadmin times documentation was god.
The inquisition came if you did not write one.
You had time. Not much time if any server or user had an emergency... but any other day you had time to actually improve the systems.

Working at a software company now and it's clear as day to me that they don't understand that devops & cloud engineering are in no way that much different from normal sysadmin work... but now I'm seen mostly as a productive force whose time on projects is another bill for the customer... and not a maintenance role like in past times.
If I write docs while working on projects I could easily double my time working on them. And I'm already at >150h for a pipeline with new tech and all environments (dev to prod).
There was a project where I ate away a third of the allocated budget. No documentation there... there was no time for that. That happens if you want a new, shiny and novel pipeline that your 12 year old jenkins can't handle.
Our devs can use the same tools for years or decades and don't have to learn that many new things. Every new project is novel to me because of different requitements.

No time for RnD.
No time for learning.
No documentation.
No time for me to write documentation.
Can't even make templates. No time, who pays for that?
Often only temporary, makeshift fixes possible (that become permanent)... because... WHO PAYS FOR FIXING THE FIXES?

On a range of 1 to 10.
How fast should I run?

https://redd.it/13adr4v
@r_devops

Transitioning back to a hands-on DevOps/platform engineering role

Hey Reddit,

I'm currently leading a successful team of DevOps/platform engineers across America, Europe, and South Asia. While I love the challenge of leading a team, I miss the hands-on work of DevOps and platform engineering.

In my current role, I spend a lot of time managing my team, setting priorities, and working with stakeholders to understand their needs. While these are important skills to have as a leader, I miss the technical challenge of building and deploying systems at scale.

I want to transition back to a hands-on DevOps/platform engineering role, but I'm worried about the interview process. Many companies these days require candidates to spend hours on coding challenges, often with little context or relevance to the actual job. While I'm confident in my skills and experience, I don't want to spend a week coding for someone when I could be working on real projects.

So, I'm turning to the Reddit community for advice. Have you successfully transitioned back to a hands-on DevOps/platform engineering role after leading a team? What tips do you have for someone looking to make the switch? How did you navigate the interview process and prove your skills and experience without spending hours on a coding challenge?

Additionally, I'd love to hear from hiring managers and recruiters. What do you look for in candidates who want to transition back to a hands-on role? Is there anything I can do to stand out during the interview process and prove my skills and experience without spending hours on a coding challenge?

I appreciate any advice or insight you can provide. Thanks in advance

https://redd.it/13aja3f
@r_devops

Can I build you a website for free?

Hey guys, I'm a new entrepreneur and am looking to get my foot into starting a web dev. I'm pretty good actually and just need about 10-15 people who'll let me build their sites for free to build my portfolio. Dm me!!

https://redd.it/13aighj
@r_devops

Help required

I am backend developer. I have an API I have to host in series of VPS.

I have setup load balancer for my API using nginx, mysql master-master replication as well as reverse proxy on top of it all. All my VPS are 1vcpu 2gb ram variant.

I am looking for properly managing this infrastructure.

I was researching into DevOps tools for my need and found some:
Jenkins
Ansible

I got overwhelmed by these services and their resources.

Where do I start? How do I begin?

I have version control set up in github with automated testing and Cron jobs in VPS to pull every 1 hour

I know nothing about DevOps.

Happy to answer further questions for help.

Thanks in advance.

https://redd.it/13amxs7
@r_devops

What do people use for quota management?

As the title says. I have various accounts on AWS, GCP or other tools where I need to adhere to quotas (hourly/weekly/monthly) for certain services (e.g can’t get over X messages in AWS SNS).

I'm wondering how I can monitor/alert on these before it will have an impact on my pricing.

Thanks for any pointers!

https://redd.it/13apl9h
@r_devops

Quick poll for folks using centralized logging: Do you use encryption to ingest your logs?

I'm looking into setting up proper centralized logging and found that most tutorials either don't mention encrypted (TLS/SSL) ingestion at all or just touch on it barely, so I wanted to see how the real world handles this.

Note: I am not asking whether the web interface is using HTTPs, I am asking about the way the logs are being sent.

View Poll

https://redd.it/13aw20d
@r_devops

Supercharge Your Cloud Productivity with CloudJin - Convert Infrastructure Diagrams to Terraform!


Hey fellow engineers in the DevOps community! We're excited to introduce CloudJin, an AI-powered cloud infrastructure automation tool designed to skyrocket your productivity by seamlessly converting infrastructure diagrams into Terraform code. We're looking for prospective users who'd like to join our waitlist, offer their valuable input and help us build the product alongside.

What sets CloudJin apart?

Experience a massive productivity boost by automating the conversion of infrastructure diagrams to code.
Gain security visibility and stay on top of potential threats by ensuring consistency across deployments.
Improve agility in your cloud management and adapt quickly to changing business requirements.
Streamline collaboration with a visually intuitive approach, empowering teams to work more efficiently.

We'd be thrilled to have you join our waitlist and be among the first to try CloudJin. Your insights and suggestions will play a crucial role in shaping the future of our platform. Check us out at https://www.cloudjin.ai and let's revolutionize the way we manage cloud infrastructure together!


Join our waitlist now, https://www.cloudjin.ai/#join-the-waitlist !

https://redd.it/13axnt7
@r_devops

Learning about Authentication and Authorization - courses/certifications?

Hi,

Do you know any online course or a certification which would cover, in detail, authentication and authorisation protocols? (the main reason why I'm asking about a cert is because they tend to have a well thought-through learning curriculum, like e.g. RHCSA)

In particular, I would like to learn, in a nice, guided fashion, about Kerberos, LDAP (inc Active Directory), OAuth 2.0, RADIUS and JWT.

I know what they are, I have come across them at my various jobs, I have even fiddled with some settings on an ad-hoc basis, but it has always been incidental to my work - it would be nice to have some in-depth coverage (ideally with demos, examples, best practices etc.).

Sure, I can read through the docs, but that's usually not the most engaging thing to read on Saturday :-).

Cheers!

https://redd.it/13b09hh
@r_devops

Dev self service portal

Does your place have a self service portal where developers can self serve deploy resources in the cloud? How do you do self service kubernetes? I’ve seen a couple options such as backstage and Ops level. What is your solution and what features does it provide. What does the developer experience look like (UI, API, gitops flows)?

https://redd.it/13b966p
@r_devops

Is it ok to use the replication parameter with bitnami postgres?

const sequelize = new Sequelize('database', null, null, {
dialect: 'mysql',
port: 3306,
replication: {
read:
{ host: '8.8.8.8', username: 'read-1-username', password: process.env.READ_DB_1_PW },
{ host: '9.9.9.9', username: 'read-2-username', password: process.env.READ_DB_2_PW }
,
write: { host: '1.1.1.1', username: 'write-username', password: process.env.WRITEDBPW }
},
pool: { // If you want to override the options used for the read/write pool you can do so here
max: 20,
idle: 30000
},
})

https://sequelize.org/docs/v6/other-topics/read-replication/

The doc says that

I've read read replica are switched using round-robin, I am guessing it means that the load is distributed using round-robin, but what happens when the write server goes down, does one of the read replica becomes a write db? Secondly, does bitnami postgres helm chart works well with this read replica parameter, or you need to use another library in order to make it work? I am thinking the write db if it shuts down the whole application just crashes on the write side and that's also what bitnami assumes.

https://redd.it/13b9rvc
@r_devops

No operation guys in Devops anymore.

Have you guys noticed that operations/ app engineering part of DevOps is dissipating? Soon, there will be only developers.

https://redd.it/13bfefu
@r_devops

Argo Ecosystem: Argo CD, Argo Workflows, Argo Events, Argo Rollouts, Argo Everything

I feel like not everyone realizes, that Argo is a whole ecosystem today, with different tools covering different use cases, but all working together in a very nice combo. I made a short video explaining Argo ecosystem: https://youtu.be/ae0XJGJPLvo

https://redd.it/13bgzdj
@r_devops