Malicious VSCode Extensions Uncovered, Beware my fellow DevOps Engineers

Malicious VSCode Extensions Uncovered: Millions of Installs at Risk! Beware my fellow DevOps Engineers.

https://www.bleepingcomputer.com/news/security/malicious-vscode-extensions-with-millions-of-installs-discovered/

https://redd.it/1dgy6wm
@r_devops

Projects for a fresher in Devops

Hi everyone,

I am a fresher and want to make a career in devops but my resume is not getting shortlisted anywhere even though I have necessary knowledge of the tools and their implementation (maybe not at pat with the industry standard but decent enough when you take my fresher tag into consideration).

I feel that maybe I need some decent projects for my resume but dont know what are the projects that need to be made. Eg. Creating a CI pipeline using jenkins is a easy job and maybe is not a resume worthy project. Also how do you keep your devops project running since the EC2 instances on active will start incurring charges specially a t2.medium for kubernetes. What do you guys say and what are those projects that got you into devops. Please share the project ideas so that my resume will shine the brightest in the room. :-)

Sorry if any of my query soundss stupid and Thanks in advance

https://redd.it/1dh25k4
@r_devops

Shifting develop workload to on-prem from AWS

As mentioned in the title we are thinking of moving our develop and testing environment to on-prem(cloud or physical), we will move the VPC and resources, will still keep using on-demand services like SQS, DynamoDB and SNS. I am looking for some resources to implement this, I want to know if anyone has tried this before? If yes, can someone guide me on this? or if there are blogs to do this, it would be really helpful.

https://redd.it/1dh84d8
@r_devops

KodeKloud subscriptions question

Hi everyone, what is the specific difference between the standard plan and the pro plan?

In the pro plan box, it says that "3 Cloud Playgrounds" are included, and this seems to me to be the only feature that differentiates it from the Standard plan. But exactly, what are the "3 cloud playgrounds"? I tried looking for information about it but to no avail

https://redd.it/1dhfgpq
@r_devops

Managed (paid) control plane for an Envoy based service mesh

Hello, we have a service mesh built using envoy sidecars and an xDS service we built. We would like to migrated to something managed so we don't have to do as much management. What are some options? It would be nice to keep using Envoy but not necessary. One constraint is that we don't use k8s, rather mainly EC2 VMs and containers on ECS. Thanks!

https://redd.it/1dhiy0i
@r_devops

xxToolbelt - Manage your scripts and snippets, share them and run programming languages as scripts

Take a look at this tool https://github.com/thereisnotime/xxToolbelt it might make your life easier by helping you manage scripts and also allowing you to execute compiled languages "as scripts" so you can code your tools in your favorite language but still have the easy usability of bash scripts.

https://redd.it/1dhk6yr
@r_devops

Devops certifications

Does company really ask you about certifications when you are applying jobs?

https://redd.it/1dhiw6r
@r_devops

DevOps jobs are for npc cucks anyway

Long lives the sys admins!

https://redd.it/1dhm069
@r_devops

SRE techlead looking to move towards k8s administration

Hey all - I have been in IT for \~12 years, and the last 7 or 8 of which have been with a cloud provider. I worked in a data center for a bit, ultimately making my way up the ladder to a techlead position in a team that manages the internal tooling for the company. The only certifications I currently hold are CCENT/CCNA.

I have a strong programming and debugging skillset (mostly Go + bash these days, with debugging a myriad of stuff like the forementioned languages and Python, Javascript, and Drupal, with C/C++ experience from college courses) and deal with deploying and maintaining services running on k8s through our CI/CD and "container services" UI. I do sprints, work with Jira, have familiarity with oncall, most stuff you'd expect from someone in this type of position...

The issue is, I am starting to get burned out in this role after years of doing it, and am looking to do something different.

I decided this past week that I am going to get my CKA in the next several months, and have purchased a few books along with a Udemy course and the voucher to help with studying. I don't actually have much (if any) experience with k8s administration, outside of the UI we created in house that makes it much simpler to interact with - but do have a good high level understanding of how it all works.

Do you think that I would be able to pivot to a different role, either internally or in a different company, doing k8s administration - with just a CKA, and good charisma / interview chops? If not, what else do you think I need to do so?

What kind of salary would I be realistically looking at in this role for a US based employee in a high cost of living area working remotely, knowing that I would likely be mid-level (or "senior" within my current company)?

https://redd.it/1dhol54
@r_devops

Need suggestions on how to transition from Network Engineer to Devops Engineer

I have around 6 years of work experience in Cisco networking/ TAC in Enterprise Routing/ Lan Switching and have good working knowledge on Cloud Services like Azure and AWS.

I want to move to Devops field. I have familiarity with Automation in Ansible , Puppet and have good understanding of Configuration management.

Please guide me whether I should prepare for any certifications.

I would like to know if anyone from networking background has switched to DevOps.




https://redd.it/1dhrlyq
@r_devops

Designing dev platform from scratch

Hi everyone, recently I joined a company as a software engineer and was told that i’ll be developing some in-house applications.

Turns out, the company has literally zero tech. Meaning no code repo, no pipelines. The only tech they have was previously done by a vendor to create their current application which is currently running on Azure AKS.

Long story short, I felt that before I can even do any development, a proper dev environment is required, meaning owning code repo, CI/CD pipelines till deployment (staging/prod)

I have roughly pieced out the picture and would appreciate everyone’s input on whether this is feasible.

Git repo - Gitlab. Even though i’ve never used gitlab before, it seems to be the best/easiest to conduct CI/CD.

In the gitlab-ci yml, Im thinking of having diff stages like testing, before building and pushing the image to a container registry.

The container registry I’m thinking of using Azure Container Registry since the company already uses Azure.

From there, I believe AKS can pull the image and deploy as a Kubernetes cluster.

As for the infra, Im thinking of using Terraform for proper versioning. Ive also read about K9 which helps manage the K8s.

So in short, if my understanding is correct, i can have tests, build image, push image to Container Registry, deploy and run the image as Kubernetes in AKS, all within the Gitlab-ci yml? If that is so, gitlab is really impressive.

Did I miss any crucial parts in this pipeline? Im not trained in this but I still want to give it a try, since it’s something useful too.

Would appreciate any inputs 🙏🏻

https://redd.it/1dht1pa
@r_devops

GCP VM: Ops Agent vs. Zabbix

Hey guys I am a Junior DevOps and I am the only DevOps in a company 🥲.

I have a GCP VM with the website on Drupal (PHP) inside. A client wants to monitor CPU, memory, and disk usage metrics on a VM and send notifications to the Slack channel if something abnormal occurs.

I am not familiar with GCP at all. I found that there is an Ops Agent tool in GCP and tools for Slack notifications but if I understand right Ops Agent collects a lot of metrics that we do not need to use and also it has not very clear pricing policy for it, so I don't know how much all the solution costs.

On the other hand, I know Zabbix a bit and how to configure notifications there. Also, it is a free solution if I just deploy another docker stack on the VM with it.

My question is: Is the solution with Zabbix inside GCP VM ok? Could such a solution cause problems in the future? Other possible problems?

Thanks for your help!

https://redd.it/1dhtfcb
@r_devops

Unlocking the Power of VictoriaMetrics: A Prometheus Alternative

So you run your application in production, what's next?
Do you monitor it?
Do you track the performance, the metrics, and the overall behavior of your platform?
You are most likely somewhere down the line with Prometheus.
But what if I told you there's a more performant alternative out there?
You heard of VictoriaMetrics? It comes with a bunch of features that make it a superior and deserving alternative to Prometheus. Might as well call it a competitor.
The truth is that VictoriaMetrics shines with its performance boost, long-term storage, scalability, etc.
This blog post covers most of the operational and productional aspects of the product.
Please share it with your network if you find it deserving.🙏

https://developer-friendly.blog/2024/06/17/unlocking-the-power-of-victoriametrics-a-prometheus-alternative/


https://redd.it/1dhsgrz
@r_devops

mirrord for Teams official launch

Hey everyone,



Today we’re launching mirrord for Teams, a Remocal cloud development platform. At its core is the mirrord OSS, which cuts down your iteration time by letting you run a local process in the context of a cloud Kubernetes cluster - thus skipping CI and deployment and running in cloud conditions right from your IDE or CLI.

mirrord for Teams adds collaboration, security, and governance capabilities which make it easy for organizations of all sizes to broadly adopt mirrord.

We’ve written more about the launch here: https://metalbear.co/blog/mirrord-for-teams-a-step-into-the-remocal-future/



And if you’d like to take mirrord for Teams for a spin, go here: https://app.metalbear.co 

https://redd.it/1dhw4ow
@r_devops

Why the process is so hard but satisfaction is low? (the follow up to my poll I posted recently)

IMPORTANT!!! I am not complaining. It's, kind of, research I conduct.

Updating a CV, preparation, many exhausting rounds of interview, writing cover letters, adjust CV to be ATS friendly - this is the process of finding a new job and usually it drag on weeks or even months.
Finally it's over.
You get an offer and sign a contract.
You meet your team.
Onboarding.
Your first task.
Wait... What's that feeling?
BAM!
Reality knocks you out.

The poll from this post https://www.reddit.com/r/devops/comments/1dewa7z/comment/l8f1ewo/?context=3 showed low level of satisfaction in 23-32 of 50 people.
Which proves the theory, that exhausting process is not equal high satisfaction.
It's really hard to fulfill all criteria; proficiency, interpersonal communication skills, creativity, creativity, ability to learn.
On top of that we don't know, "who" are these the most unsatisfied people, their level of seniority, country, and project domain.
I absolutely understand that.

Nevertheless, as I wrote in the first post "HR pipeline" is broken which affects engineers in the end.
Don't you feel, there is unfair distribution of errors and responsibility between the recruits/HRs and the engineers?

I love the question: "how many years of experience do you have in AWS/kubernetes/terraform/ansible ...?"
Let's say I was working with ansible for 2 years, but it was 3 years ago. Does it mean that I have 2 YOE with ansible? IMHO no. Knowledge become outdated without practicing.
Or sometimes when you ask for the project details and they tell you "kubernetes, openshift, swarm" or "puppet,chef,salt,ansible" or "python,go,bash,groovy"
It's a two-way road. The company and the candidate screens each other. If I ask for the details it means I want to understand what to expect. Most probably there is no strict requirements but, come on, it's the two-way road, don't wast my time.
If a candidate changes projects too often nobody blames recruiters.

And the cherry on top. Even if you have gone through the process till the very end, you can be turned down because you are too expensive compared to other less skilled candidate. Which means that your tech and soft skills, experience are less values than your cost.

In any event, I wish you join only the best teams, experience the highest level of satisfaction, avoid professional burnout, avoid overtime, and stay healthy and prosperous.

https://redd.it/1dhwyzu
@r_devops

Sometimes it's difficult to keep up with the latest tools and tech, so I wrote a tool to help

I decided to create a tool to curate news on cloud technologies and cybersecurity. By aggregating information from RSS feeds and Reddit, it identifies the most noteworthy and impactful updates in the tech industry! Feel free to check it out and contribute any cool feeds or subreddits to add!

https://github.com/RoseSecurity/CloudPulse

https://redd.it/1dhwsrf
@r_devops

Ajuda com tomada inteligente

Comprei uma tomada inteligente no ali , configurei pelo tuya e está tudo ok , o problema é que eu quero configurar ela para proteger o aparelho em queda de energia , onde moro a ingra elétrica não é boa e quando cai a luz ela vai é volta várias vezes isso detona os equipamentos eletrônicos, eu quero configurar a tomada pra ela demorar 20 min pra ligar depois que há uma queda de energia mais n consigo , usei a opção de cena e criei porém quando desligo o disjuntor ela sempre volta ligada na hora.

https://redd.it/1di0dhe
@r_devops

What does the term load balancer mean nowadays?

Load balancers, historically meant one thing: a hardware or a software component that simply handles balancing the load among different servers in a distributed architecture. Today, the meaning completely changed. The different cloud providers have 4 or 5 different load balancer implementations which are all used for different purposes such as TCP connection balancing, HTTP/s balancing, TLS termination, something called Gateway balancing, etc. etc. Isn't the term overloaded? For example, I don't even understand how we came to a definition that a load balancer must be able to do TLS termination. It just does not make sense when you simply think about the definition.

So, here is my question; if a new cloud provider popped up today and made an announcement "X Cloud now has Cloud Load Balancer", what do you expect them to have? What are the must haves of a load balancer? Would a simple Layer 4 load balancer suffice or everyone needs that Application Load Balancer for path based load balancing, Let's Encrypt integration, DDoS protection, etc.?

https://redd.it/1di1jcb
@r_devops

Email Security: Simplified SPF, DKIM, and DMARC

Email security can be confusing, but fear not! In this beginner-friendly guide, we break down SPF, DKIM, and DMARC—the secret weapons against spam and phishing attacks. Dive in, learn the basics, and let us know what you think! 

https://github.com/nicanorflavier/spf-dkim-dmarc-simplified

https://redd.it/1dhzu2u
@r_devops

eBPF in Observability Systems

Over the past few years, eBPF seems to have really taken off. Being able to attach programs to the Linux kernel really opens up a whole world of possibilities. As a DevOps Engineer I have really loved deploying Cilium to inspect K8S network traffic

As a technology, eBPF natural fit for observability systems and it has been adopted by a number of vendors already. This is the first of a two-part article looking at some general patterns of eBPF in observability and then going on to look at its implementation in a number of products.

I'd be really interested to hear other people's thoughts on eBPF both in general as well as in observability platforms.

Thanks!

https://observability-360.com/article/ViewArticle?id=ebpf-in-observability






https://redd.it/1di514i
@r_devops

Why are you managing your infrastructure? What was the most challenging part?

Additionally to in-premises, cloud providers count too (AWS, Azure, Digital Ocean, etc.)



In my case is because I wanted to save costs and have a means to deploy my application.

https://redd.it/1di4plq
@r_devops