History and Future of Infrastructure as Code

This [insightful article](https://www.endoflineblog.com/history-and-future-of-infrastructure-as-code) by [Adam Ruka](https://www.linkedin.com/in/adamruka) covers:

* What's IaC.
* First gen. tools: Declarative, Host Provisioning (Chef, Puppet, Ansible).
* Second gen. tools: Declarative, Cloud (CloudFormation, Terraform, Azure Resource Manager).
* Third gen. tools: Imperative, Cloud (AWS CDK, Pulumi, SST).
* The future: Infrastructure from Code (Wing, Dark, Eventual, Ampt, Klotho).

https://redd.it/13hi5bm
@r_devops

Just read the book "Investment Unlimited" about DevOps and Security. This book is written 10 years late.

The ideas and situations are common now. Most companies have implemented such security pipeline.

https://redd.it/13h9en5
@r_devops

Help! Confused about the relationship between Software Engineering and DevOps

For context, I am doing my very first internship this summer as a "Software Engineer" intern, but the team I'll be joining is the "CI/CD" team. If my understanding is correct, CI/CD is a major part of the whole DevOps idea, but after googling around, it would appear that DevOps responsibilities and skills are quite different from that of Software Engineers.

So now I'm confused as to what kind of work I'll be doing. I may just be confused in general too.

Could it be that my job title is simply a misnomer? Or in other words, is it possible to apply for a SWE position, and be offered a DevOps position, while the title remains unchanged? (Not that I care about my title, I am simply confused as to what my responsibilities will be)

Or could it be that there is significant overlap between SWE and DevOps, and that it's actually common for Software Engineers to work on DevOps? If so, what are the similarities between SWE and DevOps?

Or maybe this post doesn't make any sense at all? Am I just dumb? (I am very clueless indeed)

Any help and/or clarification would be much appreciated!

https://redd.it/13hktty
@r_devops

What sort of technical tasks should I expect in an interview?

I know that usually within the dev world you’d get asked to grind leetcodes, but in my experience (so far, only 1 interview) I’ve not been asked this sort of stuff and usually day-to-day in the cloud infrastructure world we don’t do too much programming anyway.

In the only in interview I’ve had (and my next one coming up) I have been told the focus of the technical task isn’t to see whether or not you can do it, but more to see HOW you attempt doing it, which does relieve some pressure - however I am super nervous and still want to experiment and prepare beforehand so I don’t look completely lost during the interview.

What sort of thing can I expect?

In my only DevOps interview so far (junior level) - my task was to create an SQS queue and a bunch of other stuff (like 10 bullet points) using Python & boto3, while using Git/source control. This was relatively easy as we were allowed to Google, use documentation, as well as pair program with another engineer who would help out (again - the aim being to see HOW we work, not whether or not we get the task done correctly).

My next interview is more for a senior role, again with a pair to work with during the task, and again being observed to see how I work, not how well I do the task - but again, I’m still super nervous and want to prepare by doing various tasks proper just so I can ease myself.

What sorts of things were you all asked to do during technical parts of the interview process and what advice could you give me?

https://redd.it/13hkl38
@r_devops

What are some good self-hosted CI/CD tools where pipeline steps run in docker containers?

What I like about Google Cloud Build is that every pipeline step runs in a Docker container. The only other CI/CD tool I have tried is Jenkins, and although I know that you can run steps in Docker agents, I just don't like Jenkins.

We have a Jenkins server with multiple agents, all running as VMs. It is being used by many teams across the company, and as the DevOps team, we are responsible for keeping all these agents configured properly using Puppet. It is a big burden because every team does things their own way. Some people never use Jenkins plugins and execute shell scripts, assuming that some packages are already installed on the agents. If these packages are not installed, they ask us to install them using Puppet. Different teams ask for different versions of packages, and some others manually add secret files to these agents to make their pipelines work instead of using Jenkins credentials.

Having stateless agents will relieve us of the burden of configuration. So, I'm looking for a tool where steps running in Docker containers are the only option. I don't want to just tell people to run Jenkins steps in Docker agents; I want this to be enforced because I know people won't listen, and they will continue doing what they have been doing, and they will keep blaming us for blocking them.

Now, I know that migrating from Jenkins to another tool might not be feasible, but I just want to learn what other options are available, and what we could have done in Jenkins to eliminate the overhead of configuration.

https://redd.it/13hmwsg
@r_devops

Sha2git.com brings code hosting to secure SHA-2 Git repositories

In the old days if you wanted to use the version control software Git with a SHA-256 hash function, rather than broken SHA-1, you were stuck using it locally. This posed a major problem, as Git repositories are meant to be shared, adapted, and changed by many! Even though we should have moved away from SHA-1 years ago Github, Gitlab, Bitbucket and many others had a monopoly on the hash function you choose, but now sha2git.com is a safe haven for SHA-2 repositories allowing the users to share code without broken hash functions.

https://redd.it/13hwkbs
@r_devops

Meaningless subreddit

Yesterday, I created a post regarding importance of coding skills in DevOps.

For once in the past few weeks, we have managed to create a meaningful discussion with both people agreeing and disagreeing on the topic. No insults, no harassment, nothing that violates the rules, but just something that people could find useful if searching for guidance on what technologies to pick up and how to advance in their career (even in different directions i.e. managerial or technical).

And ofcourse, the "mods" removed the post from the feed "due to breaking some rule", like always without any explanation.

WELL DONE! Keeping the community safe :)

P.S. I hope some day I have the oppotunity to interview any of you "mods" so I can belittle your existance, but I guess that is a long shot, most of you probably haven't heard of DevOps outside of this sub.

https://redd.it/13hzbh6
@r_devops

Why worry about Delivery & Deployment Security?

The way we develop, deliver and operate software has changed
The evolution in how we develop, deliver, and operate software has led to an increase in the speed and scale of software changes we see daily in many enterprises. Yet, these changes are also introducing new security risks and expanding the attack surface of your software supply chain.

Read the full article here - Why worry about Delivery & Deployment Security?

https://redd.it/13i0egi
@r_devops

Modernising IIS .net app deployments

Hi folks,

Currently our infrastructure is running traditional IIS server deployments with front end IIS servers connecting to backend database and application servers.

I know this is kind of an old fashioned way of doing things, so I'm wondering what would be the best way to modernise this and move to a sort of infrastructure as code or devops configuration while continuing to use IIS/windows servers for our .net applications.

Any suggestions would be appreciated!

https://redd.it/13i24n4
@r_devops

Volume types in Kubernetes

This image is an extract from one of our deployment.yaml files and I've obviously used dummy values for privacy. Apparently I'm only supposed to use either emptyDir, persistentVolumeClaim, configMap or secrets for volume types. I'm a noob to k8s so currently have no clue what any of that is, but the question is, how can I modify that yaml file to use one of the required volumes types?

https://redd.it/13i2d9b
@r_devops

Continuous Delivery - When do you tag?

I'm curious to know when do you tag for release? Do you tag after validation in a testing environment and then promote to staging and then production?

1. Development
2. Integration
3. Testing # I'd tag after validating here
4. Staging
5. Production

Do you even use tags?

https://redd.it/13i3fqk
@r_devops

What do you use for your pipelines?

I want something that works greatly in local and CI environments and is portable.

I've used GitLab CI and Makefiles and while they work, they have too many problems for me.

I've heard about Earthly and Taskfiles. What other alternatives do you recommend and why?

https://redd.it/13i6ewv
@r_devops

Pivoting into DevOps from an Unrelated Profession

Hey folks,

I've spent the past 4 years of my career in Marketing. I have a Bachelor's degree in IT, but I got into Marketing right after getting the degree. My career in marketing is nowhere related to tech. I wish I was doing tech sales, but I worked in e-commerce. Over the past year or so, I've been doing a ton of online courses on Cloud/DevOps and have genuinely developed an interest in DevOps. I even recently got the AWS solutions architect associate certification.


I am trying to figure out how do I market myself as someone who is fit to work in Cloud Engineering/DevOps/SRE. More specifically, what should my resume look like since I cannot mention anything about marketing. I am completely fine with starting on the ground floor (Junior/entry level positions).

Please help me. Thanks very much!

https://redd.it/13i79sf
@r_devops

Anyone set up azure devops to link to Jira?

As title says, currently looking into the different plugins and apps that would let me link JIRA to code sitting ADO.

https://redd.it/13ib4em
@r_devops

I wrote an article about AWS MSK with external Kafka connect and schema registry.

Hello all, I'm working as a junior devops engineer. I wrote an article about connecting to aws MSK from Kafka connect and schema registry. Please give your views.

Also, I'm trying to connect MSK connector with AWS keyspace. It's asking for trust stor location. I don't know how how to pass the file to MSK connector and what path to give. If you have idea please help me.

https://link.medium.com/KqnZXJUbPzb

Thank you for your time.

https://redd.it/13ic4k5
@r_devops

Re: the coding post

/u/Nimda_lel basically put what I said 6 months ago into a more politically correct post. Great post nimda! People were salty at mine. Tl;dr - there are two tracks to “DevOps”. I’d recommend coming from the Dev side, and if you don’t, you should learn how to code. I would say scripting is probably not enough. Knowing how to work on and navigate an application code base and implement composable and reusable code is super important to knowing how to actually code. Don’t be a no coder. You will soon be automated away by an AWS abstraction. Good luck.

https://reddit.com/r/devops/comments/xrkdbn/devops_is_for_people_who_cant_code/

https://redd.it/13iefoe
@r_devops

How valuable is home lab automation when applying for Devops?

I've integrated several services at home and learnt a great deal messing around with things such as Prometheus, Grafana, Jenkins, Loki, Uptime Kuma, Pihole, OpenDNs, Containers.
I've taken full courses on Cisco CCNA online but didn't get the certificate because of cost. Currently learning about AWS and Kubernetes.
I barely use any of these at work as I work as a lab scientist, but I really want to get into Devops.

I'm in the UK and I feel like when I search for Junior Devops jobs they all require you to have worked in the industry or production environment. Will I even get through to the interview process if all I'm saying is that I have experience from playing with these services at home?

https://redd.it/13ie31y
@r_devops

Mac VMs with GUI for ui-tests

I believe this is the best sub to ask this in, since my google searches showed me some past results on this sub.

I run a Github Action which runs some UI-tests both native and web on a headful (with GUI) MacOS instance. The instances themselves need GUI for the frameworks that I use to have them use accessibility features (native).
I was using Hetzner's dedicated Mac servers service until I found out (today) they're no longer supported or offered by them. I believe they used the term end-of-life. They were closer to baremetal, anyway.

I'm looking for a cloud-based provider for MacOS VMs , since I want this to be scaleable in the future. Other things that came to mind:

* decent display resolution (not the AWS fixed to 1024x768 on m1 instances [crap](https://repost.aws/questions/QUQQLxZOjpT52SOL7ZvskA5w/questions/QUQQLxZOjpT52SOL7ZvskA5w/macos-ec2-instance-screen-sharing-display-resolution))
* preferably VMs, not baremetal, since I want to spin them up via API, maybe snapshotting for ease of provisioning
* API, of course
* preferably static IPs
* preferably non-block-storage, to avoid IOPS issues caused by disk intensive ops from other instances on the same compute
* preferably a way to backup up the system to allow for scratch install using the same resource

What I tried/went through and don't think it's a solution:

* AWS - fixed display size on m1, huge costs (you basically need 2 dedicated hosts minimum because of the long spinup times (+2 hours in some cases); 2 dedicated VMs with 90%+ uptime go above 10k$ / year
* Scaleway: their 1 machine per availability zone limit is weird and they only have the small 8 GB RAM flavour; haven't tried it tho;
* Hetzner: no longer offering this service
* Github Mac: no GUI, it's basically a build machine
* Azure: couldn't find anything, i'm guessing they merged with Github
* Macstadium: you basically rent mac minis, same as hetzner, but with worse customer support according to reddit
* Oakhost: no info on this, anywhere, but they limit traffic to 10TB which might burn faster that expected
* Macincloud: no info on this, just that they offer what other offer, but charge a bit more; doesn't seem to have API access
* MacWeb: same as MacInCloud, no API

Anyone else hit this?
Any suggestions, pointers would be highly appreciated.

Thanks in advance.

Apologies if this is not the correct sub.

https://redd.it/13ih8t9
@r_devops

Best DevOps courses in Pluralsight

I usually rely on Udemy for anything related to Microservices topics but now I got access to plural sight.

I want to see what Pluralsight can offer best courses within DevOps ecosystem?

https://redd.it/13ih9pv
@r_devops

SaaS-based SAST tool for enterprise code quality scanning?

We currently use SonarQube and are seeking alternatives. Cost is not a concern as we would like to evaluate all of the best possible enterprise-level tools on the market. One of our InfoSec requirements is that the tool supports SSO natively (otherwise we would consider something like SonarCloud). Our developer requirements are that the tool have good code coverage scanning capabilities and can integrate into CI/CD pipelines in Azure DevOps and GitHub.

A few of our developers have experience with Snyk Code and have recommended we evaluate this. I've also scoured Reddit for some alternatives and seems like Checkmarx might have a platform worth evaluating. Are there others we should be looking to evaluate?

https://redd.it/13ig8bz
@r_devops

How are companies distributing their workloads in a multi-cloud architecture?

Hi, I am a grad student interested to work on a devops project. I am interested in knowing how companies distribute their workloads in a multi-cloud setting. The way I am categorizing it as of now is as follows:

1. Run orthogonal workloads (business-wise) such as say all ML training workloads on GCP and OLTP workloads on AWS?
2. Take a more fine-grained approach such as say two active-active replicas that require strong consistency running on two different clouds? Note this strategy requires high availability guarantee.

A follow up question is where do you see multi-cloud is going? Towards #1 or #2. Also do you know how control plane management such as etcd is being done in multi-cloud today? Are there multi-cloud control plane coordination systems such as zookeeper? Or do you see value in it?

https://redd.it/13ilktq
@r_devops