Automating and Detecting Kubernetes attacks (Kubesploit C2 and NeuVector)

I just created a video that shows how c2 agents can get into k8s and perform various attacks. I also demonstrated how runtime security tools can help detect them.

https://youtu.be/A6VBhSzOMZ8?si=9i\_OmAioLrr-sorp

https://redd.it/1d65h7u
@r_devops

Multitenant or server clone

I made food ordering app for one restaurant chain in my country.

Now more and more restaurants are contacting me that they want similar service.

Since functionality is pretty much the same, my first thought was multitenacy (same code different databases using Laravel tenancy package).

But then I started getting different feature request from all the restaurants(especially on frontend).

So then I was thinking that I could just clone the DO droplet, and made somekind of CI automation for backend and separate projects for frontend (if needed - basic changes like logo, color and font would be in settings). Not ideal, but less work I guess (at leastn in short term - might regret later :))

https://redd.it/1d67x57
@r_devops

Mail service only providers ?

Might not be the best sub to post, but also who else could know answer to this ? I'm migrating few (20 to 30) web services to own server cause these are non critical and can go off for a week no issues, so I can save on monthly hosting costs. This is not issue, web services easy... mail services on other hand...

Do you guys have experience with commercial email only hosting's (on budget) ? Where I can point MX (other DNS EMAIL related) records and have my mails hosted there ?

Don't get me wrong, I can create my own email server, but I would like to avoid the headache with management, and what I fear is to end on some spam list (my IP) despite me not sending spam (personal mails only ) ...

https://redd.it/1d69fe5
@r_devops

Burnout in DevOps.. How you deal with it? ... I dream to quit and work as a layman next to the beach.

8yr in SWE, 5yr in DevOps. Burnouts are real

Many people envy engineers and say that we have great work, we are paid well, our jobs are secure.. we are lucky ones.

First of all our jobs are far from secure, my colleagues are getting laid off on weekly basis and its not even US, its "stable and secure" EU.

We are paid well, this is common misconception, yeah people in Valley are paid well, even not everyone in US is paid well, in other places like EU or Canada engineers are slightly above average. Another thing if you are in another field "In most cases" you get your degree and then... you work.

We on another hand have to deal with never ending stack that keeps increasing, it was Servers, then virtualization, then docker swarm, then k8s, now k3s is picking up, knative is another thing, you have to know cloud, better know all 3 cuz companies might use all of them, startups on AWS want their code in CDK with Typescript, another one wants that in Python, other ones use CloudFormation, another place uses Ansible, company next door uses Terraform ... i can keep going for hours..

Sometimes I wish just to quit do some basic work.. I used to love this, but now its.. another day, another feature implemented, wow we implemented argo instead of deploying via pipeline, I mean who give a f#uck, I certainly don't. My grandfather was taking over Berlin on a fuckin Tank in '45, another one was a governor making people lives better, what I will say and remember? I once reduced cost and implemented spot instances, or I wrote really neat terraform module?..

https://redd.it/1d6hjb8
@r_devops

Final Update: Glad I didn't go pet dogs

This should be the final update. I got a lot of support and help realizing that where I worked wasn't the norm from this sub.

I was able to force through a lot of changes that, while they didn't solve the root of the issue, made things less unbearable. At least enough to keep me from rage quitting while I kept looking.

And now, after several months of looking, I found a new role. Fully remote. Working for a university. First engineer onboarded for standing up a new, really cool project. This means I get to actually build something from scratch with no technical debt from legacy systems and bureaucracies. I get more vacation/paid holidays. And I've already met some brilliant people that I would have otherwise never encountered.

I'm still serving my 2 weeks at the old job, but I've basically already handed everything off. Might just take half days until my last day. Been spending the rest of my time writing out the architecture diagrams of how I want to build my dream serverless environment. IAC, automations, and pipelines everywhere.

And now I can just get dogs for the house and pet them while getting paid. It all works out.

https://redd.it/1d6izy1
@r_devops

A junior in college, starting network engineering internship tomorrow but want to work in cloud . Asking about certifications for summer

So I start tomorrow morning as a network engineer intern for a small company,

Most of my degree has been your typical CS stuff but I took a bunch of electives and I’m hoping this internship continues to round out my knowledge base of all the fundamentals of CS .

They pay their engineers well imo (80-110k) , suburban Illinois . But I do believe I want to go into cloud in order to use the rest of my CS knowledge as well . Namely programming.

Would aws certification be wise or Cisco devnet considering I’m in a networking internship role .

The job typically wants their engineers to have CS degree plus ccna but unless things go very well I can’t see myself staying very long . I feel like networking engineering, at least the old school way, doesn’t take advantage of all my skills . I believe cloud will. So that’s where I’m coming from .

https://redd.it/1d6js0b
@r_devops

Looking for specific Udemy Courses or other good learning sources

Hello everyone,

I am leaving my current position and have the opportunity to get more into DevOps. I already have some experience with it on the Dev side of things and know how software shipment works too.

We are currently planing to migrate our TFS to Git and use GitHub Actions in the future.
Also we are using Azure as our Cloud Service and current Pipelines.

So what I need would be some good courses about Azure DevOps and Git/GitHub Actions. I am planning in the not so near future to get an Azure certificate too.

I would be the first full DevOps Engineer in the company, just for info and need all the help I can get.

Are there any recommendations that makes the switch for me easier? Any courses you would suggest?

Thanks!

https://redd.it/1d6igay
@r_devops

What must I study to work in the area of data?

So I'm 18 years old and Brazilian. I'm going to start college in a few months, that being said, what must I study? At some point, I want to work outside my country.


https://redd.it/1d6n73b
@r_devops

Encryption of terraform state using OpenTofu

OpenTofu is an opensource fork of terraform. It now from v1.7 allows client-side encryption of terraform state in remote backend.

Lets find out how we can encrypt terraform state, also how can we change and remove encryption key using OpenTofu in this article.

https://linuxshots.navratangupta.in/encryption-of-terraform-state-using-opentofu-04fd9dd2f562


https://redd.it/1d6xoo0
@r_devops

How to sell this?


I made a tech for real time design to production. Its a cool technique and scales to design a designer tool, designs a developer tool, and can design to usable softwares too.

I'm trying to do something new in my learning pattern, I have a rough thought of putting this in a demo page. The first version, with a minimal feature, will be put on sale.

The payment is to let customer's do over postal, I receive it. After confirming the payment, I'll courier instructions to build this tool, with instructions to build other tools as a written copy.

I'm not sure about where to share this product page with. could you tell me where to put and the price for it?

Link to the demo - https://www.youtube.com/watch?v=KHpf8h0JMuo

https://redd.it/1d6y562
@r_devops

Help Needed: MongoDB Authorization Issue with Docker Containers


Hey Reddit,

I'm facing a problem with MongoDB authorization and would really appreciate your help.

Here's the situation:

- I have MongoDB 4.4 running as a Docker image.
- There's another Docker image that connects to this MongoDB container to run my application.
- When I enable authorization in MongoDB and use the URI:

  mongodb://<username>:<password>@mongoContainer:27017/<database>?authSource=admin
  

I can access MongoDB using the mongo shell without any issues.
- However, when my application tries to access MongoDB using the same URI, it throws an authorization/authentication error.

This is becoming a blocker for my application, and I need to solve it urgently.

Have any of you faced a similar issue? What steps did you take to resolve it? Could there be something I'm missing in the configuration?

To get a clearer picture and help me troubleshoot, here are a few questions:

1. Are there any specific settings or environment variables in Docker that I should be aware of when enabling authorization in MongoDB?
2. Could this issue be related to network configurations or Docker bridge network settings?
3. Is there a difference in how MongoDB handles connections from the mongo shell vs. an application?
4. What are the common pitfalls when setting up MongoDB authentication in a Dockerized environment?
5. Are there logs or error messages I should check that might give more insight into the authorization failure?
6. Could this be a version related issue, but if so how am I able to access it using the mongo shell?

Any tips, suggestions, or guidance would be immensely helpful.

Thanks in advance for your support!

https://redd.it/1d6x1ti
@r_devops

Integration Testing with GitHub Actions

So you write integration tests, what's next!?

Where do you execute the tests that require database, caching, etc.?

Do you offload that task to a CI somewhere?

You better.

If not, here's a write-up on how to do that with GitHub Actions, using the Fullstack FastAPI Template by the famous author Sebastián Ramírez Montaño (I always admire his work 🙌 ).

In this blog post, you will see a practical example of running integration tests inside the CI using the GitHub Actions services. These services help set up ephemeral containers for your application, which will then be torn down (to pieces).

If you enjoy automation, this blog post is for you.

Share it with your network if you enjoy the content.

<https://developer-friendly.blog/2024/06/03/integration-testing-with-github-actions/>

https://redd.it/1d6zw7m
@r_devops

How can DevOps be beneficial for software development companies?

Faster Time to Market - By automating processes and removing bottlenecks

Improved Collaboration - Closer collaboration between development, operations, and other stakeholders

Increased Reliability and Stability - Automation and monitoring in DevOps practices help detect and resolve issues more quickly

Cost Savings - By automating repetitive tasks and optimizing resource usage helps reduce operational costs

Enhanced Security - DevSecOps practices integrate security into every phase of the software development lifecycle

https://dynatechconsultancy.com/devops-services-solutions

https://redd.it/1d720vq
@r_devops

Best Azure Devops live Course online

Hi all,
I am a software engineer working in Accenture in India
I am currently working on azure infra with 2 years of experience and want to shift my career to azure devops and obtain a good package later on so i need some suggestions for some good online live courses for devops with azure which include placement program too(do suggest me which does not include also)
Also do suggest me some YT channels which are free of cost for devops with azure

https://redd.it/1d72zju
@r_devops

Switching role from QA to DevOps: Seeking Advice

# Hey everyone,

I am currently working as a QA Engineer (Manual + Automation) with 1 year and 7 months of experience at a single company. I am looking to switch my role to a DevOps engineer. To achieve this, I am currently learning Linux basics through Udemy and other online resources. I have also started applying for Linux/System Administrator roles.

Am I on the right path by applying for Linux Admin jobs now, even though I haven't completed any formal courses and am relying on self-taught knowledge? How challenging will it be for me to secure a Linux Administrator/ DevOps fresher job with my current background? Can anyone please guide me?

Thank you.

Ps: I am from India & I have a notice period of 2 months in my current company.

https://redd.it/1d73yq6
@r_devops

UPDATE: OneUptime - Write Synthetic Monitors in Playwright.

ABOUT ONEUPTIME:

OneUptime (https://github.com/oneuptime/oneuptime) is the open-source alternative to DataDog + StausPage.io + UptimeRobot + Loggly + PagerDuty. It's 100% free and you can self-host it on your VM / server.
OneUptime has Uptime Monitoring, Logs Management, Status Pages, Tracing, On Call Software, Incident Management and more all under one platform.


UPDATES:


We have launched Syntheic monitoring product. With the integration of JavaScript and Playwright, synthetic monitoring has become more accessible. The same code that has been utilized in your CI/CD pipelines can now be employed to monitor your user flow journeys!


Here's a quick 10 minute demo: https://www.youtube.com/watch?v=Ae5UG1zXURc


REQUEST FOR FEEDBACK & FEATURES: This community has been kind to us. Thank you so much for all the feedback you've given us. This has helped make the softrware better. We're looking for more feedback as always. If you do have something in mind, please feel free to comment, talk to us, contribute. All of this goes a long way to make this software better for all of us to use.


OPEN SOURCE COMMITMENT: OneUptime is open source and free under Apache 2 license and always will be.

https://redd.it/1d72ho2
@r_devops

Dev Container Advice - Standards in legacy projects

I was pointed to this community by a member of r/vscode

My team are exploring devcontainers across multiple repositories that are interdependent (legacy projects we're trying to enhance for better local development).

Devcontainers seem like an excellent solution, and we've managed to get a few working. However, I'm looking on advice on best practices with legacy projects, as the available documentation doesn't seem to cover standards or shared experiences of these - they're very much about setting up new projects.

Here are a few questions we have:

1. Cloning vs. Mounting Code: Is it better to clone the repository into the container or mount the local code into the container? Mounting seems preferable despite the performance hit.
2. Using Existing Dockerfiles: All our repositories have existing Dockerfiles. Should we use these Dockerfiles as the base for the devcontainer, or should we create new Dockerfiles in the .devcontainer folder, which feels redundant? However if we were to create new repositories, creating a new Dockerfile in the .devcontainer folder seems logical.
3. Pulling Production Images: We considered using tagged builds of our 'production' images from as the base for our devcontainers. However, we believe this would result in many pulls due to updated base images. Instead, we plan to set up a watch on specific files that impact the base container and create devcontainer-specific images to minimize pulls. Our root Dockerfiles include ARM-specific dependencies that we can't build locally, and this approach addresses that issue. Is this a good practice? Is this a good practice?

Apologies for the basic questions – we've only been exploring this for a week. Any advice would be greatly appreciated.

https://redd.it/1d773cf
@r_devops

Devops Professional Certificate Course under 10 days.

I was interviewing for a company and they have asked me to do a professional devops certification course before I join them.
Problem with that is that the one suggestion they've given in excessively boring and weird.
I want something that is hands on interesting and a Lil fast paced with actual work and not 2 guys chatting about devops topics where I need to nibble on parts of their conversation to make sense about devops

About me :
1. I'm a fresher so don't know jack shit about the field but somehow managed to clear all the interviews.
2. Previous experience of working as a Data analyst ( internship only )
3. The role I'm going to be working in is for data engineering.

Key Requirements :

1. Professional Certificate ( so udemy , Coursera etc won't do cuz would only get completion certificates and AWS and Azure ones are 3 to 6 months long )
2. Should be able to do it under 10 days ( that's the time I have before joining )



https://redd.it/1d73y2d
@r_devops

Stuck in DevOps role

I’ve posted on here before about my current position. I’m an associate DevOps engineer. Have been for a little over a year and a half. I make $61k and everyone says I’m way underpaid. (DMV btw)

But I only have an associates degree in cybersecurity and a year of digital forensics grunt work before I got into this DevOps role.

Everyone tells me on here I’m way underpaid and I’m being taken advantage of and my company is getting cheap labor.

But the thing is I’ve applied and applied and have been getting nothing back.

I know the job market generally sucks rn. But for DevOps some of these requirements are insane. The active secret clearance is what gets me. How are you supposed to have an active TS clearance if the company won’t sponsor you? Also clearances are EXPENSIVE, if you have one, why would you be jumping ship to another job??

8+ years of exp required
Must have bachelors with 4 years exp.

I’m only at an associates with a year and a half of DevOps experience.

My tech stack is Azure, K8s, PostgreSQL DB, Terraform, Azure Bicep, Debian, Ubuntu, Python, Docker, YAML, some node.js.

Kinda stuck here. What do I do?

I’ve got an AZ-900, studying up for the AZ-104. But even if I had AZ-104 I don’t think I’d have much better luck.



https://redd.it/1d7bjdt
@r_devops

DevPod vs VSCode devcontainer extension

What value does DevPod brings compared to the VSCode's devcontainer extension?

https://redd.it/1d7csns
@r_devops

TBD: Where do you draw the line between a long lived branch and a shorts lived branch?

So I am reading about Trunk Based Development and they talk about not having long lived branches.

I find the term subjective. For you, where do you draw the line between "long lived" and "short lived"?

https://redd.it/1d7cpz8
@r_devops