Anyone know of an umbrella CLI for multiple cloud providers?

Does anyone know of an umbrella cli tool that allows me to manage machines at different providers? Working with various providers because of my clients. Would be nice if the basics were covered like creating machines, dns settings. Wouldn't mind if it shelled out to the underlying per provider clis when things get more complex.

https://redd.it/13nr8e1
@r_devops

How do you learn the implementation of mTLS? For example you have two flask microservices

How to implement mTLS to understand further?

https://redd.it/13nqfap
@r_devops

TeamCity Build Dependencies

Hello everyone,
I'm working on a project where I need to programmatically trigger a new build in TeamCity and use an existing, specific build as an artifact dependency. I'm currently using the REST API to interact with TeamCity.
From what I understand, TeamCity typically retrieves artifacts based on the artifact dependency settings in the build configuration (e.g., last successful build, last pinned build, build with a specific build number, etc). However, I'm looking to dynamically set a specific build as an artifact dependency when triggering a new build via the API.
Is there a way to do this directly through the REST API? Or is there another workaround to achieve this functionality?

https://redd.it/13nuypk
@r_devops

How is it possible to commit a docker container to an docker image?

I was reading this blog.

https://techtutorialsite.com/docker-commit-changes-to-containers/

Where the author commited a container into an image. I didn't understand that. Can you help me realize it? How is it possible to commit a container to an image?

I need to learn more about docker container and docker images, so if you've materials barring docs please share.

https://redd.it/13nyyfp
@r_devops

Any tool to "clean" helm chart values?

It's not that complicated, just asking if there's a tool that downloads all of a chart's dependencies and removes any key-value pairs in the parent values.yaml that already exist in the sub charts' values.yaml. I think that could save my team's repository tens of thousands of lines and headache

https://redd.it/13o0r8h
@r_devops

Why isn't azure popular?

My career so far has been spent working with Azure, however people seem to lean predominantly towards GCP and AWS. Personally I think Azure offers tons, but not in a place to actually comment about it vs it's competition

https://redd.it/13o0gz1
@r_devops

Abstraction of Cloud Providers

What do you think about the role of cloud providers - are they doing their job well?

Personally, I think that cloud providers should join forces and develop a uniform standard, which would eliminate the extreme lock-in effect of individual providers and enable easy migration to other cloud providers or diversification (the use of multiple cloud providers).

Personally, I haven't been through a migration from one provider to another, but I'm sure it's hell.

Have you guys been able to gain experience with this and perhaps develop best practices? For example, what were the biggest hurdles in migrating because you relied too much on the provider's services? Do you already know of projects that abstract cloud providers?

In a perfect world, migrating to a different cloud provider while using standard features should just be a different biller....

https://redd.it/13o1b8c
@r_devops

Testing with Chef, Different Outcomes

So I am using Chef, and I am converging a cookbook on an AWS instance that is shared. I have the exact same cookbook, using the exact same Chef configs when converging, yet I am getting a different error message from my coworkers(which have a separate error, but at a different place).(where it is not downloading something from a repository, which they are).

What are some potential reasons for this? I cloned the cookbook again to make sure I have the exact same cookbook, on the exact same branch. It is also converging on the exact same AWS instance, so it can't be anything to do with my local computer. Any thoughts?

https://redd.it/13o3ygg
@r_devops

What are some of the unsaid skills that a Devops Engineer should have including his Day to Day activities?

I am trying to enter into the Devops role so I just wanted to know about how things work in the organisation with DevOps Engineer's aspect ?!

https://redd.it/13o16yq
@r_devops

How good is your logging right now?

I recently stumbled across this logging strategies for security incident response post from AWS : https://aws.amazon.com/blogs/security/logging-strategies-for-security-incident-response/ . I'm just curious if anyone actually has logging this detailed set up. If so, are you a big org or a startup ? How did your org get to such a level of maturity and how long would you estimate it took?

https://redd.it/13o0c8n
@r_devops

Conditional Resources and Blocks in Terraform

How do you solve conditional resources when you use Terraform? I have faced many different situations which made me exhausted before.

I summarised all the methods I know and use in this article. I use conditional expression, count, for_each and dynamic blocks where I found them able to solve all my problems.

Terraform — Real Use Cases to Solve 95% of the Conditional Resources or Blocks Creation

Would love to hear from you if you have any other solutions.

https://redd.it/13o8zxd
@r_devops

Managing Data Residency - the demo

I explained the concepts and theory behind Data Residency in a previous post. It’s time to get our hands dirty and implement it in a simple demo.

Read the post

https://redd.it/13o038j
@r_devops

Rate this company's secret management process

theres this senior devops who made this process and I want you guys to rate this


We have a repo that contains all the configmaps and other ENV vars for all the apps in one repo something called configmap managements repo.


Each app has secrets, and we don't store them visibly in git, instead we have something called a gpg per secrets yaml file.


The actual secrets are stored in a VM, and to update the secret, we have to SSH into the VM, and update secret and encrypt the key and push the commit and create a PR with the new .GPG


Something like this


gpg --batch --yes --output blah.secrets.yaml --decrypt blah.secrets.yaml.gpg
gpg --batch --yes --outputblah.secrets.yaml.gpg --encrypt --recipient [email protected] blah.secrets.yaml


What do you guys think about this process?

https://redd.it/13ocfb7
@r_devops

Kubernetes on cloud practice

Is it economically practical to sign up to AWS and spin up ec2s to practice kube? For the folks who have done this can you please share the monthly cost for running small project.

https://redd.it/13odmqx
@r_devops

Format for projects in GitHub?

If I were to do display some Devops related projects (CICD/ IaC / etc.) in GitHub for employers to see, what kind of format and/or look would you be looking for? I am speaking mainly template wise. Have you seen a project portfolio that you liked and would replicate similar template?


Any recommended examples you may be able to show me? Would adopt to whatever is preferred, looks best, readable, etc.

Let me know, thanks!

https://redd.it/13oev7a
@r_devops

Optimizing ArgoCD deployments for multiple services

Current our team has been just connecting our gitlab repo to Argo and updating the targetRevision to a tag or a branch (one for dev, another for prod).

We are handling a new helm repo that has a bunch of microservices and this strategy seems not so great. Like if one service has a release, we would start work, get it out, then the next day we have another one. Tagging gets annoying because we have to create a new tag, update the argocd to a new tag. That's gets annoying and out of control real fast for small repeated changes. And using branches gets really bad due to MR conflicts.

Trying to find a better way to do deployments with 1 helm repo with multiple microservices for my team for the long run.

Using GitLab, helm (separate helm charts for the ArgoCD and the actual applications)

https://redd.it/13oehim
@r_devops

What should a DevOps engineer at least learn to get a job in 3 months as a fresher?

I'm fresher currently studying computer science and interested in DevOps.

I know the basics of Linux, docker, and Jenkins. I want to learn more.

What should I learn or give me a roadmap to get a DevOps job as a fresher?


edit: I'm currently learning from DevOps bootcamp by Techworld with Nana. If anyone knows this then can you please give feedback about whether is it worth to follow or not?

https://redd.it/13nwq5i
@r_devops

How to maintain/migrate DynamoDB tables over time with zero-downtime?

I have a serverless microservice application which relies entirely on DynamoDB for its data storage needs. Over the lifecycle of this microservice occasionally we will need to perform minor surgery on the data tables in the form of adding a new index, modifying the primary index, and in some rarer cases completely restructuring the tables in such a way that the current one needs to be replaced entirely.

With a normal SQL database I’m familiar and comfortable with various strategies to be able to perform such changes with zero downtime. But I’m not familiar what people do with NoSQL engines, in our case specifically DynamoDB.

I’m looking to you my fellow veterans with experience making and managing microservices backed by dynamodb with zero (or very little) downtime. What are some tricks, methods, nuances, and patterns we should follow or know about?

https://redd.it/13ohv11
@r_devops

GitHub Copilot X vs GPT-4 for DevOps work

I finally got my hands on the new Copilot X Chat feature, which is supposed to be powered by GPT-4. I use both Copilot and ChatGPT+ for my work since a while, and I was curious to compare new Copilot X with ChatGPT, by doing a small real task in parallel with both. From my experience, Copilot X is like 10-15% worse than GPT-4, but developer experience is nice. I recorded a relatively lengthy video with this comparison:

​

https://youtu.be/S4OhjYH2lEs

https://redd.it/13ojtm7
@r_devops

Do you use Ephemeral Environments?

Hi 👋🏼, I am an ex-SRE and co-founder of Qovery - a product that helps DevOps engineers to build their own Self-Service Infrastructure platform. One of the most used features from Engineering and DevOps teams is "Ephemeral Environments". Since it's an emerging concept - I wanted to know if you have already built your Ephemeral Environments system. What it looks like/What services do you use? (Kubernetes, ArgoCD, Others?) Do your Engineering teams have adopted it? Are you satisfied of the adoption?

https://redd.it/13okqqh
@r_devops

adding FIPS in pod securityContext

Is it possible to specify FIPS in a pod's securityContext?

https://redd.it/13ojpb1
@r_devops