Chef Berks vs Chef-Client distinction

So I was having some issues with some cookbooks due to depencies and am relatively new to chef.

In a meeting discussing these issues, there was a distinction made between Berks resolution and Chef's resolution(or more specifically chef-client) for dependencies being two different things, which was what was causing the dependency issue.

When they said Chef, I recall them stated meaning Chef-client, however I am still not sure what exactly Berks is, or rather the distinction made since.

Isn't Berks part of Chef anyway? I am a bit confused by the distinction.

https://redd.it/143pom4
@r_devops

Noob aspiring to become a devops Engineer

Hey y'all. Im a recent graduate from Industrial engineering, all my studies had very minimum coding usage and recently i decided to get into Devops as the jobs i get to do with my degree in Industrial engineering pays way more less. Can any one please tell me the blue print on how to learn devops and whats the future for devops.

Im kind of debating between Devops/Sap development/ Data Engineer roles.

Can some one please tell me me choosing which field has a better future.

Help a brother!

https://redd.it/143sg8q
@r_devops

Basic | How to Build Dynamic and Flexible Infrastructure with Terraform Functions

Examining Crucial Elements and their Applications for Effective Terraform Configuration

https://medium.com/devops-dudes/how-to-use-terraform-functions-to-create-dynamic-and-flexible-infrastructure-a8e5020e8a41

https://redd.it/143kpzc
@r_devops

Video: Kubernetes 1.27 Chill Vibes - WIIFM (What's In It For Me/You)

https://www.youtube.com/watch?v=ywpXXsJDpH0

https://redd.it/143duo2
@r_devops

Efficiently Release Features and Rollback Instantly with Seamless Operations

We are thrilled to introduce an open-source feature flags tool that simplifies the complexity of configuration and management, empowering DevOps teams. With this tool, developers can seamlessly integrate into the release DevOps workflow without needing in-depth knowledge of DevOps processes.

You can find the tool at: https://github.com/featbit/featbit

We invite you to explore this tool and leverage its capabilities to progressively release features and perform immediate rollbacks as needed, all while ensuring uninterrupted operations.

If you have any questions or need further assistance, feel free to reach out.

https://redd.it/143vr12
@r_devops

Why are companies caring less and less about linux skills these days? Do you think it's still worthwhile to learn?

Seems like most companies don't care about linux skills at all.

https://redd.it/143x53t
@r_devops

Sematext Monitoring Tool

Hello All

My current company is using a mix of New Relic and Splunk for log management, infrastructure monitoring, and apm. However, we are trying to switch from New Relic due to its cost. We are currently evaluating Splunk Observability but finding it lacks some infrastructure and apm metrics we want to see and the interface is not intuitive.

While doing some research on other solutions, I came across Sematext. It looks promising and I was wondering if anyone has used it before? If so how was it and is it worth trying out?

Thanks

https://redd.it/143xmo5
@r_devops

Prometheus: scrape pods from just a particular node?

Is anybody familiar with a way on how to scrape Kubernetes pods from just a particular node?

I’m trying to figure out have to have multiple Prometheus scrapers in a single cluster without scraping the same endpoints and duplicating metrics. My thoughts are to use a daemonset and have some pod scraping affinity.

https://redd.it/143arx9
@r_devops

Thoughts on CI/CD workflow for small team creating an online web application

I wanted to improve our CI/CD pipeline since right now we are a small team working a web application with a frontend and backend and we are doing everything pretty much manually.

The idea I have so far is have 2 persistent branches, main and prod.

* The main branch contains everything that we want to deploy next
* When we want to create a new feature we branch off main and once the feature is done and ready to be deployed is merged back to main using a PR request.
* Anytime something in the main branch changes our CI/CD pipeline (AWS CodePipeline) will build the docker image, run tests and deploy it to our staging server.
* After checking that everything works as expected in staging we can merge into production which does pretty much the same but deploys into production server/servers instead.
* If we have a bug in production we can create a hotfix branch where we fix the bug, this gets merged back into main to test it in the staging server and if everything works well the hotfix gets also merged into production (not sure about this part here since the fix will be tested in staging next to a lot of unreleased features, in this case staging is not a 1 to 1 with production)

If we want to avoid having the staging pipeline being triggered all the time (for example we are adding a lot of features and we dont need to see them yet in staging) we can implement a manual check in our pipeline that we have to click on to build and deploy into staging.

What do you think, does this sound like a good way of doing this?


In a different post someone suggested only having 1 main branch and "promoting" the stage build into production. But i have no idea how to do that.
Also, we have different AWS accounts for stage and prod, so not sure if that will even make it more difficult.

https://redd.it/1440toe
@r_devops

API Mock or testing with output to Prometheus

Hi, I am looking for API Mock or API testing, to write some small testing, login, some basic function or GET Requests in index and save the result to prometheus maybe.

i found k6s but they tell me that is not API Mock. Do you use any other tools ?

https://redd.it/14429bu
@r_devops

1 RabbitMQ, 2 ways of access

I would like to deploy one single instance of RabbitMQ on standard AMQP port in a Kubernetes cluster.

The special request is that it should only be needed user+password for internal Kubernetes requests, and it should use 2FA with user+password AND mTLS for public requests from outside Kubernetes.

Is this in any way possible? How could this be tackled? As far as I have read, you are only able to configure mTLS for all or for none...

https://redd.it/143aoe4
@r_devops

Best solution to not appear idle at work (VDI)?

I know there mouse usb and mouse software but what's the best solution that randomizes, is extremely configurable etc. On our vdi (vmware horizon) you'll appear idle on MS Teams pretty quickly.

Tia.

https://redd.it/143kvxw
@r_devops

Training/certification program Suggestions.

So i was recently reassigned to a devops department (move from application support) and my company wants to register me on a paid training program or certification program (in relation to devops) that includes real world projects not just dummy play ground
I am a bit lost on what to recommend
I have found these 2 udacity
And KodeKloud
But I don’t know how good any of these are

https://redd.it/1437mre
@r_devops

DevOps Online Training institute | DevOps Project Training

DevOps Engineer Roles and Responsibilities

A **DevOps engineer** works with both the development and operations teams to create and implement software systems. Therefore, they need to collaborate with software developers, quality assurance professionals, and other IT staff. A DevOps engineer’s main roles and responsibilities include:

· Write documentation for the server-side features.

· Develop, install, test, configure, and maintain IT solutions.

· Communicate operational requirements and development forecasts with everyone in the team.

· Develop plans and processes for improvement and expansion of the current technologies being used.

· Deploy updates automatically into the production environment using configuration management software.

· Perform routine application maintenance and troubleshooting measure to ensure the production environment runs smoothly.

· Perform gap analysis to identify performance enhancements, identify alternative solutions, and assist with modifications.

Programming Language and Linux Fundamentals

DevOps uses programming languages for developing and automating software. To become a DevOps engineer, there are several programming languages you need to learn in addition to specific DevOps tools.

The three most common languages used with the DevOps tools are Ruby, Python, and JavaScript. It's advisable to learn at least one of these programming languages to work with the DevOps tools.

It's also essential for a DevOps Engineer to know the fundamentals of the **Linux Command** Line Interface (CLI). The mandatory Linux skills that a DevOps engineer should have include:

· Linux shell - bash or ksh

· Linux commands - find, grep, awk, sed

· Networking commands - nslookup and netstat

### Source Code Management

The next milestone for a DevOps engineer is to learn source code management. This is essential for keeping your projects organized, regardless of the number of code sets you have. Learn at least one of these standard source code management tools:

· Git

· CVS

· Mercurial

For More Information about DevOps Training

Contact Call/WhatsApp: +91-9989971070

Visit: https://www.visualpath.in/devops-online-training.html

https://redd.it/141dcgk
@r_devops

Certificate Management - Renewals & Uploads to K8s Clusters (via Ansible??)

I want to see if anyone in the community cracked the code for submitting certs for renewals and uploading them to K8s Clusters (Ingress & ISTIO setups)?

So far I have been doing it manually but want to see if I can Ansible it in any way possible? Or any other configuration management toolsets.

​

Any recommendations por favor

https://redd.it/1446s9d
@r_devops

Transitioning to Cloud DevOps Pre-Sales: Seeking Advice and Insight???

Hey r/devops! I'm intrigued by transitioning into cloud DevOps pre-sales, where technical expertise meets meaningful projects. Any advice on pursuing this career path?


Key questions for discussion:


\- Essential skills for cloud DevOps pre-sales?
\- Recommended certifications or training programs?
\- Gaining practical experience when coming from a different background?
\- Differences between general pre-sales and cloud DevOps pre-sales roles?
\- Valuable resources, communities, or mentorship opportunities?



TL;DR: Transitioning to cloud DevOps pre-sales. Need advice on essential skills, certifications, practical experience, and resources.


https://redd.it/1447lxt
@r_devops

Improving on the "dev" side of DevOps

Aside from programming more on the job, which of these books are relevant enough to DevOps to be worth picking up? These happen to be the most recommended Software Engineering books:

Clean Code
Head First Design Patterns
Pragmatic Programmer
Refactoring
Designing Data Intensive Applications

 


And regarding DevOps books, I'm having a hard time deciding which ones to read and which to skip?:

Phoenix Project
Devops Handbook
Accelerate
Unicorn project
Google's SRE book and/or workbook

https://redd.it/1449u5k
@r_devops

Using CNAME abstractions to simplify DNS

Is anyone else using CNAME abstractions? I've been employing them to simplify our DNS configuration. Yes, obviously, there is an additional lookup, but with caching and TTLs the overhead is minimal.

For example, instead of doing this, which would require 3 updates to swap the ELB endpoint:

foo.mycompany.com –> myelb.blah.amazonaws.com
bar.mycompany.com –> myelb.blah.amazonaws.com
bas.mycompany.com –> myelb.blah.amazonaws.com

Doing this, where we only update one record:

gw1.mycompany.com –> myelb.blah.amazonaws.com
foo.mycompany.com –> gw1.mycompany.com
bar.mycompany.com –> gw1.mycompany.com
bas.mycompany.com –> gw1.mycompany.com

I wrote a small post on what they are and how I've used them, would welcome any feedback!

https://thebook.devrev.ai/blog/2023-06-11-dns-3/

https://redd.it/144dlck
@r_devops

What port is this pod listening on?

I kubectl exec into a single-container pod and see that nginx is running. I then run "netstat -tulpn" as root and it says that nginx is listening on port 80. Nothing else. Yet when I set my service's targetPort to 80, the site won't load. If I set the service's targetPort to 443, it loads.

Why is that? What am I missing? It seems like nginx is listening only on port 80, per netstat, and yet the service only connects to the pod on port 443. I must be misunderstanding something.

https://redd.it/144fjar
@r_devops

I recently joined a startup, but it wasn't what I expected.

Last year I began browsing for new roles after feeling like I had outgrown my previous company. My background consisted of mostly AWS with a bit of azure, terraform and ansible, with linux VMs. I found a startup nearby that matched what I was looking for in an employer and their job posting seemed to line up with my skillsets (this will come back to bite me later).

I went through a very small interview process and decided to take a risk and accept the offer that was given to me. They were looking for someone to steer the ship from a DevOps perspective, so it felt like a natural progression in my career - exciting!


Fast forward a little bit, I came to the depressing conclusion that they were actually a lot further 'behind' than I was anticipating. Through a mix of various azure contractors and developers who didn't know what they were doing, we now have three Azure environments that are a total mess. Windows VMs running a bunch of legacy applications that required GUIs to operate, various developers and leadership have *full* access on the tenant, undocumented infrastructure that has a fairly complex NSG to allow for these legacy applications to function, because their legacy apps have a GUI requirement, they use RDP to get to the VM, the list goes on.


And so it does. All of their applications are built manually, locally, then uploaded via an FTP. Their VCS is github free, and there has been an ask to 'automate their deployments', but seeing what is required in their build steps, we are putting the cart before the horse.

Then they're wanting to achieve SOC2, but from my experience we would fail so horribly in a SOC2 audit we would need to either punch out the due dates significantly or hire resources to help shore up a gap analysis that I am confident would be substantial.

On top of this, I am being asked for many different things from several people. No one really knows what my own priorities would be, but everyone wants to have a say in what projects are of highest priority.


Anyways I'm not sure what the purpose of this post was to be, maybe just a rant for now. I have seriously considered jumping ship and finding another position out there, but the other part of me wants to just stay here and be stubborn for success in hopes that I can achieve something.

https://redd.it/144epqh
@r_devops

Looking for a study buddy to start from scratch and crack devops roles.

Anyone who is looking to get started or transition into devops roles, let's learn together and crack roles. Would be great if someone who could mentor/guide us.

https://redd.it/144i8dk
@r_devops