Azure DevOps - How to do DevOps with Azure

The approaches used by development and IT operations teams under the name "DevOps" are meant to speed up and scale software delivery.

Automation, continuous integration, development, testing, and the use of infrastructure as code are some of these techniques. One of the popular devops platforms is Azure Devops. So, let’s get started!

https://itcertificate.org/blog/azure/how-to-do-devops-with-azure/

https://redd.it/13h3qkk
@r_devops

What Linux knowledge is expected for an interview?

I'm a new grad and I'm studying for the RHCSA but at the same time I want to get started with the cloud. However, studying can only take me so far, and I feel like I'm in a bit of a rush to get started in my career. I went to my university's recent career fair yesterday and I noticed that many recruiters were more interested in cloud knowledge and DevOps tools rather than proficiency in Linux. This has left me wondering what I should focus on.

I've been working my way through a popular book on Linux Administration and have made it about halfway through. I'm now trying to figure out which of the remaining topics I can skim over and come back to later down the line, and which ones I should know for an interview. Here are the remaining topics in the book:

1. Boot Process, Grub2, Linux Kernel
2. System Initialization, Message Logging, and System Tuning
3. Storage Management
4. Local File Systems and Swap
5. Networking, Network Devices, and Network Connections
6. Network File System
7. Hostname Resolution and Time Synchronization
8. The Secure Shell Service
9. The Linux Firewall
10. Security Enhanced Linux
11. Shell Scripting
12. Containers

I would appreciate any advice on which topics I should prioritize and which ones I can come back to later.

https://redd.it/13h4zrv
@r_devops

If you want to exceel in your career, you MUST be able to write code

Hello /r/devops,

Let me preface, I expect getting downvoted to hell, but that's perfectly fine, we ain't after internet points :)

I have been following this sub for some time now and I have noticed a trend that seems to be a misconception to me.

In a lot of posts, people ask whether or not they should code and I thought I would share my opinion on the matter, hopefully to spark a discussion.

9 years ago, I started as a sysadmin performing the following tasks:

Network configuration and management (mainly Cisco)
Linux/Windows server management
Jenkins configuration and automation
AD Domain management
Virtual Machines management (Containers were not such a hot topic back then)
Monitoring (mainly with Nagios)

That said, things have evolved lately, containers kicked in, Clouds are the new girl in town and all other hot topics you can think of. We all have managed/manage these and are rather familiar with them. You might see where I am going, you might not, but the idea behind what I am saying here is that if you just manage *(*don't get me wrong, I am not saying it is easy) what I just mentioned, you have eveloved as a Systems Administrator, this evolution has been observed multiple times, i.e. the norm evolved as follows:

managing physical servers \--> managing virtual machines \--> managing containers

Now, for DevOps, there are a lot of discussions what this thing and so on, so I am not going into detail about that, but I will state the following - Systems Administrator != DevOps engineer.

IMHO (I want to emphaise on the "MY") , a DevOps engineer must be able to not only leverage tools like Ansible, Kubernetes, Terraform, etc., but to also understand them enough to debug their code AND extend them to their needs, whether it is extending an existing functionality (Ansible module, Terraform provider, k8s controller, etc.).

I am not here to brag even if it might sound like this, but rather show you that if you are able to code, you will excel in your career faster than you might think. Here are some stats for myself that I think helped/help me a lot into my career's development:

I am comfortably programming in Golang, Python, Rust, despite having never held a Software Development position
I used to actively contribute to Ansible
I actively contribute to Kubernetes
During my time at VMware, I have successfully extended a few Terraform providers, written two Prometheus exporters for OpenStack and developed numerous Ansible modules for vSphere automation

The few points I mentioned above helped me tremendously in growing my salary in 9 years from 9200$ \-> 142k$ per Year NET. (I live in Eastern Europe and that's why my initial salary was so low, it is still the average salary here)

As I said before, I DO NOT brag, but I want to show you how much being able to code can help you.

The last job I landed required me to do Distributed Systems Deign, Pair programming and required me to provide actual code contributions on GitHub (I am not sharing it here, because it contains personal info)

https://redd.it/13h6nk4
@r_devops

Have things become better since the "Phoenix Project"? I don't see any of these stories in real life anymore

I wonder if things are better now

https://redd.it/13h81e9
@r_devops

Create OIDC/SAML app in an IDP using a tool similar to IAC like Terraform, Ansible

Hi,
I am posting this question to the community as I am looking for some suggestions, helpful guides which can help me implementing the design to achieve the below scenario:


Scenario: We have to automate the application onboarding for OIDC/SAML app. hosted in secure auth to ForgeRock.


Design: Similar to any IAC tool where we declare the desired state using a yaml file, the same conecpt is said to be utilized. We would have a yaml file defining application details. Going through terraform registry, I found that there is no such provider defined for oidc/saml app onboarding by ForgeRock. Also, if we define a plugin for same we are restricted by the programming language (need to use Go for development). So, we need a kind of python script which can function similar to a provider in Terraform, reading through the desired application configuration from the yaml file and then making use of the rest api endpoint exposed by ForgeRock for creating the app.


Can anyone in the community please help me out here with any useful resources like any Github repo's ,opensource project, docs which I can make use of to give me a starting point about how this can be implemented?

https://redd.it/13h7tdi
@r_devops

ML Enthusiasts Club - read papers/books and do projects together

Hey folks,
I'm lucky enough to be running this super cool community where we all geek out over machine learning papers, dive into some epic books, and smash out projects in teams. We're already a gang of 1300 strong learners, spread across more than 40 dynamic groups. If this sounds like your kind of scene, give me a shout and I'll slide a Discord invite your way in a DM. Can't wait to welcome you aboard!

https://redd.it/13hav26
@r_devops

Project Team Lead or Dedicated IT Guy

I would like to hear your opinions about the decision that I am facing.

I recently started working at a large MNO that gives me the opportunity to smith my role into whatever I would like.

You wanna be a tester? Sure.

Oh, you wanna help with development? Done.

Hmm, so K8S interests you more? Start working with this colleague.

​

However, my supervisor came to me recently offering me to lead the dev team and be a quasi project/product owner. He is already doing this but it would free him up to for example clear obstacles that the org. puts in front of the dev team.

​

Now I am conflicted because A) I was never in such a position and I barely understand the environment after such a short onboarding period and B) I had in mind to first solidify my tech skills before even considering such a position since I am kinda still a junior. Also C) I am not sure which of these two career pathways would be the most 'bang for my buck'.

​

What is your opinion about this?

https://redd.it/13ha1q6
@r_devops

What tools or services do you use for your cloud infrastructure other than monitoring/logging/APM

Hey guys,

So I'd like to know what tools or services you use on your cloud infrastructure, other than the usual monitoring, logging and APM services like DataDog, New Relic, Elastic, Splunk, etc.

Recently I came across services and tools like Forward Networks, CloudMapper, Shoreline.

I am specifically looking for services for cloud security and runbooks.

Appreciate if you can share any services or tools that you recommend.

Cheers.

https://redd.it/13hduhs
@r_devops

Doing projects or taking another AWS certification


A month ago, I took the AWS Solutions Architect Associate certification and can reasonably pass SWD SysOps Administrator in two or three weeks.

While I have experience as a network engineer, I don't have any programming work experience. To move into Cloud/DevOps, should I pursue another certification or concentrate on working on projects and improve my coding skills/learn terraform?
If another certification wouldn't help much, I prefer to do something more useful like learning terraform and eventually doing a project.

Thanks for your time

https://redd.it/13hfh4t
@r_devops

History and Future of Infrastructure as Code

This [insightful article](https://www.endoflineblog.com/history-and-future-of-infrastructure-as-code) by [Adam Ruka](https://www.linkedin.com/in/adamruka) covers:

* What's IaC.
* First gen. tools: Declarative, Host Provisioning (Chef, Puppet, Ansible).
* Second gen. tools: Declarative, Cloud (CloudFormation, Terraform, Azure Resource Manager).
* Third gen. tools: Imperative, Cloud (AWS CDK, Pulumi, SST).
* The future: Infrastructure from Code (Wing, Dark, Eventual, Ampt, Klotho).

https://redd.it/13hi5bm
@r_devops

Just read the book "Investment Unlimited" about DevOps and Security. This book is written 10 years late.

The ideas and situations are common now. Most companies have implemented such security pipeline.

https://redd.it/13h9en5
@r_devops

Help! Confused about the relationship between Software Engineering and DevOps

For context, I am doing my very first internship this summer as a "Software Engineer" intern, but the team I'll be joining is the "CI/CD" team. If my understanding is correct, CI/CD is a major part of the whole DevOps idea, but after googling around, it would appear that DevOps responsibilities and skills are quite different from that of Software Engineers.

So now I'm confused as to what kind of work I'll be doing. I may just be confused in general too.

Could it be that my job title is simply a misnomer? Or in other words, is it possible to apply for a SWE position, and be offered a DevOps position, while the title remains unchanged? (Not that I care about my title, I am simply confused as to what my responsibilities will be)

Or could it be that there is significant overlap between SWE and DevOps, and that it's actually common for Software Engineers to work on DevOps? If so, what are the similarities between SWE and DevOps?

Or maybe this post doesn't make any sense at all? Am I just dumb? (I am very clueless indeed)

Any help and/or clarification would be much appreciated!

https://redd.it/13hktty
@r_devops

What sort of technical tasks should I expect in an interview?

I know that usually within the dev world you’d get asked to grind leetcodes, but in my experience (so far, only 1 interview) I’ve not been asked this sort of stuff and usually day-to-day in the cloud infrastructure world we don’t do too much programming anyway.

In the only in interview I’ve had (and my next one coming up) I have been told the focus of the technical task isn’t to see whether or not you can do it, but more to see HOW you attempt doing it, which does relieve some pressure - however I am super nervous and still want to experiment and prepare beforehand so I don’t look completely lost during the interview.

What sort of thing can I expect?

In my only DevOps interview so far (junior level) - my task was to create an SQS queue and a bunch of other stuff (like 10 bullet points) using Python & boto3, while using Git/source control. This was relatively easy as we were allowed to Google, use documentation, as well as pair program with another engineer who would help out (again - the aim being to see HOW we work, not whether or not we get the task done correctly).

My next interview is more for a senior role, again with a pair to work with during the task, and again being observed to see how I work, not how well I do the task - but again, I’m still super nervous and want to prepare by doing various tasks proper just so I can ease myself.

What sorts of things were you all asked to do during technical parts of the interview process and what advice could you give me?

https://redd.it/13hkl38
@r_devops

What are some good self-hosted CI/CD tools where pipeline steps run in docker containers?

What I like about Google Cloud Build is that every pipeline step runs in a Docker container. The only other CI/CD tool I have tried is Jenkins, and although I know that you can run steps in Docker agents, I just don't like Jenkins.

We have a Jenkins server with multiple agents, all running as VMs. It is being used by many teams across the company, and as the DevOps team, we are responsible for keeping all these agents configured properly using Puppet. It is a big burden because every team does things their own way. Some people never use Jenkins plugins and execute shell scripts, assuming that some packages are already installed on the agents. If these packages are not installed, they ask us to install them using Puppet. Different teams ask for different versions of packages, and some others manually add secret files to these agents to make their pipelines work instead of using Jenkins credentials.

Having stateless agents will relieve us of the burden of configuration. So, I'm looking for a tool where steps running in Docker containers are the only option. I don't want to just tell people to run Jenkins steps in Docker agents; I want this to be enforced because I know people won't listen, and they will continue doing what they have been doing, and they will keep blaming us for blocking them.

Now, I know that migrating from Jenkins to another tool might not be feasible, but I just want to learn what other options are available, and what we could have done in Jenkins to eliminate the overhead of configuration.

https://redd.it/13hmwsg
@r_devops

Sha2git.com brings code hosting to secure SHA-2 Git repositories

In the old days if you wanted to use the version control software Git with a SHA-256 hash function, rather than broken SHA-1, you were stuck using it locally. This posed a major problem, as Git repositories are meant to be shared, adapted, and changed by many! Even though we should have moved away from SHA-1 years ago Github, Gitlab, Bitbucket and many others had a monopoly on the hash function you choose, but now sha2git.com is a safe haven for SHA-2 repositories allowing the users to share code without broken hash functions.

https://redd.it/13hwkbs
@r_devops

Meaningless subreddit

Yesterday, I created a post regarding importance of coding skills in DevOps.

For once in the past few weeks, we have managed to create a meaningful discussion with both people agreeing and disagreeing on the topic. No insults, no harassment, nothing that violates the rules, but just something that people could find useful if searching for guidance on what technologies to pick up and how to advance in their career (even in different directions i.e. managerial or technical).

And ofcourse, the "mods" removed the post from the feed "due to breaking some rule", like always without any explanation.

WELL DONE! Keeping the community safe :)

P.S. I hope some day I have the oppotunity to interview any of you "mods" so I can belittle your existance, but I guess that is a long shot, most of you probably haven't heard of DevOps outside of this sub.

https://redd.it/13hzbh6
@r_devops

Why worry about Delivery & Deployment Security?

The way we develop, deliver and operate software has changed
The evolution in how we develop, deliver, and operate software has led to an increase in the speed and scale of software changes we see daily in many enterprises. Yet, these changes are also introducing new security risks and expanding the attack surface of your software supply chain.

Read the full article here - Why worry about Delivery & Deployment Security?

https://redd.it/13i0egi
@r_devops

Modernising IIS .net app deployments

Hi folks,

Currently our infrastructure is running traditional IIS server deployments with front end IIS servers connecting to backend database and application servers.

I know this is kind of an old fashioned way of doing things, so I'm wondering what would be the best way to modernise this and move to a sort of infrastructure as code or devops configuration while continuing to use IIS/windows servers for our .net applications.

Any suggestions would be appreciated!

https://redd.it/13i24n4
@r_devops

Volume types in Kubernetes

This image is an extract from one of our deployment.yaml files and I've obviously used dummy values for privacy. Apparently I'm only supposed to use either emptyDir, persistentVolumeClaim, configMap or secrets for volume types. I'm a noob to k8s so currently have no clue what any of that is, but the question is, how can I modify that yaml file to use one of the required volumes types?

https://redd.it/13i2d9b
@r_devops

Continuous Delivery - When do you tag?

I'm curious to know when do you tag for release? Do you tag after validation in a testing environment and then promote to staging and then production?

1. Development
2. Integration
3. Testing # I'd tag after validating here
4. Staging
5. Production

Do you even use tags?

https://redd.it/13i3fqk
@r_devops

What do you use for your pipelines?

I want something that works greatly in local and CI environments and is portable.

I've used GitLab CI and Makefiles and while they work, they have too many problems for me.

I've heard about Earthly and Taskfiles. What other alternatives do you recommend and why?

https://redd.it/13i6ewv
@r_devops