Discovering DevSecOps

I wanted to get into DevSecOps but always wondered how was that different from a regular security perspective.

I created a short article for anyone trying to get into DevSecOps (Getting Into DevSecOps)

Also wondering why is this not just a part of DevOps and does it really deserve its own title?

https://redd.it/1e3ijpy
@r_devops

Is anyone else in jumpbox and/or MFA hell?

We MFA to login to our work PCs, MFA to get access to this, that, jumpbox here, jumpbox there. Oh the PAM tool has logged me out again. JFC. I spend half my day logging in to things.

https://redd.it/1e3m0as
@r_devops

How would you automate restoration of AWS RDS snapshot

We take daily snapshots of our AWS postgresql RDS database. In the event we want to restore our snapshot quickly is there a way we can automate this? We use Github Actions for our CI/CD pipeline and DB env vars are injected into Kubernetes pod on release in our CI/CD pipeline

https://redd.it/1e3mwgb
@r_devops

SchemaFlow - A database migration tool that bridges the gap between ORM migration patterns and SQL-first workflows.

One of the main frustrations that I have with modern SQL-first migration tools is that it quickly becomes difficult to understand a schema by reading the migration files directly. The true structure of a table could span multiple files meaning that reading its initial definition is not enough to understand its true structure.

ORMs alleviate this problem by separating the schema definition from the migrations themselves. This makes it very easy to understand a database schema by reading the code. However, for those of us who operate in SQL-first environments this isn’t a luxury that we have.

I set out to solve this problem with SchemaFlow (https://github.com/f-prime/schemaflow) and bridge the gap between ORMs and SQL-first workflows.

Hopefully some of you here will find it helpful!

https://redd.it/1e3obq1
@r_devops

How do you foster a DevOps culture in your organization?

Fostering a DevOps culture involves breaking down silos between development and operations teams, encouraging collaboration, and promoting continuous improvement.
In our organization, we prioritize open communication, regular feedback loops, and cross-functional training.
Implementing automation and CI/CD pipelines has streamlined workflows, while regular retrospectives help us learn and adapt.
How do you cultivate DevOps culture in your team?

https://redd.it/1e3p5n2
@r_devops

Would you consider a role where you were in office 4 days a week while rest of team worked remotely?

Currently looking a job where it requires me to be in office 4 days a week while the rest of my team are remote. They come in sporadically but not often.

My immediate line manager is also remote 100%.

Seems kinda fishy to me. Would you take it?

https://redd.it/1e3rfrr
@r_devops

WeAreDevelopers Berlin Conference is worth it?

I won the tickets for the WeAreDevelopers. They are worth 600€ or something. It will be in Berlin and I would need to travel to attend. I wanted to know if it is worth going, experiences and recommendations. I live in Switzerland so not exactly super close. I am looking for a job so my main interest is to check for a job and connect with people. Learn what people are using and so on. I just want to prevent myself from going to a BS conference with a lot of sales and motivational talks. Is this one, one of those?

Thanks and enjoy your day.


https://redd.it/1e3rto0
@r_devops

I have some questions about on call

Fellow DevOps guy here, these are my questions

1. What is your on call schedule?
2. How many calls/incidents do you have per day or per hour?
3. What steps do you take to reduce the frequency of incidents?
4. How to have peace of mind during on call?

Thanks in advance.

https://redd.it/1e3tivz
@r_devops

how to move internally within a company?

hey all, current in a cloud support engineer role working with cloud security products, i’m wanting to transition into devops over next 12-18 months but unsure how i would move internally or build the connections to do so!

i’ve solid pipeline, terraform and great K8/docker knowledge as is with some good fundamental aws knowledge too (learning everyday actively), actively building web apps built on devops build practices etc so keeping my personal projects up to speed for experience.

i’ve only joined my current place in the last 6 months but already want to move out of support to a more engineering role, how would i make the first steps into a more engineering role?

https://redd.it/1e3tf30
@r_devops

Scripting alternative to Make

Hi! Not sure if this is the perfect forum for this, but I don't want to wander around Reddit all day to try and find the perfect subreddit. Please do redirect me if I'm somewhere I shouldn't be.

Currently, at work, we use make for running various scripts that make really isn't designed for. For example:

"make db-dump" dumps the database to a file
"make db-load" loads the latest dump

and so on. The more commands we add, the more complex the system grows. We had to add a "list" command in order to actually see what our Makefile can do (through which the Makefile parses itself, from what I can understand). There's absolutely no support for --help, and sending parameters to a command is a nightmare.

Is there a good alternative to make for these types of use-cases? I.e. not building, but just running a group of bash commands?

https://redd.it/1e3v2e3
@r_devops

Free Review Copies of "Solutions Architect's Handbook 3rd edition"

Packt has published "Solutions Architect's Handbook: Kick-start your journey to becoming a solutions architect" by Saurabh Shrivastava.

As part of our marketing activities, we are offering free digital copies of the book in return for unbiased feedback in the form of a reader review.

Here's what you will learn from the book:

* Understand the role of a solutions architect and the skills required to become one

* Learn about different architecture patterns and how to select the right one for your project

* Explore various cloud computing concepts and services offered by major cloud providers

* Discover best practices for designing and implementing secure, scalable, and cost-efficient solutions

* Gain insights into data architecture, microservices architecture, and event-driven architecture

* Unlock the potential of cutting-edge technologies like large language models, generative AI, and deep learning innovations

* Enhance your solution architecture skills with practical insights from real-world scenarios

* Level up your soft skills with career-accelerating techniques

If you feel you might be interested in this opportunity, please comment below on or before 31st July 2024.

https://redd.it/1e3x24i
@r_devops

Operating Systems config with IaC

Hey guys, DevOps junior here. I would like to deploy VMs using some sort of IaC and to configure them dynamically. As part of creating Kubernetes cluster as a service on an on-premise, air gapped environment.

I know I can use ansible to configure the servers and change their configuration but I found using declarative manifest much more simple to use. Therefore I wondered if there is a platform that knows how to also configure a server (of some Linux distribution ) using IaC

Thank u guys in advance.

https://redd.it/1e3z438
@r_devops

Does this read like a DevOps resume to you?

anonymized resume:

https://imgur.com/a/5puugx9

I have roughly 13 years of experience split between development and testing, however the majority of my testing gigs have been focused on CI/CD and some server management. I'm attempting to make a break into devops and have been adjusting my resume as much as possible to open that door.

I have a day or two left on a course I'm taking for SAA-C03, after completing that and (hopefully) passing the exam, I'm going to start hitting the job applications hard. But thought I'd get some people's opinions before doing so. Please let me know if anything in my resume sticks out (for good or bad reasons).

Thanks!

https://redd.it/1e3y9h8
@r_devops

Looking for DevOps internships Summer 2025

Hi guys!

I'm an international student currently pursuing masters in computer science in the US. I have 3 years of experience in DevOps and Cloud in my home country. And I'm looking for internships in this domain for summer 2025

However I don't see any openings, compared to many software dev roles that have started opening. Any leads or information on how I can be effective and early in my job search for this domain?

https://redd.it/1e410mo
@r_devops

How does your team structure on-call pay?

Some of our customers I have been speaking to at Spike (I’m the founder) compensate for on-call hours (👏). Generally they count the hours on the calendar so we are building a csv export now.

But anyway, that got me thinking about how different teams handle on-call pay. In my experience, some companies pay per hour for being on call, while others do a weekly rotation with daily or shift-based pay. I’ve heard of variations where pay depends on the severity and criticality of the incidents.

What’s the general structure for on-call pay at your company? How much is it usually? Do you have any unique approaches or best practices for ensuring fair compensation?



https://redd.it/1e3yexm
@r_devops

Newbie on devops TeamCity


First, I want to clarify that I'm primarily a developer, not a DevOps professional. I'm experimenting with DevOps on my personal VPS. I have a Next.js app with a Dockerfile, and I managed to set up a TeamCity server and agent with docker. I've successfully pushed the nextjs image through git (github) and CI to docker registry.

Now, I'm unsure of the next steps. Should I use Docker Compose or Kubernetes? I'm trying to avoid Kubernetes if possible. Keep in mind, this is just a hobby project to try things out.

Any advice would be greatly appreciated!

https://redd.it/1e44dq0
@r_devops

Best way to secure a self managed DB

Im running a mysql db on docker in an ubuntu vm. All of a sudden I noticed that my db container does not contain my data again.

After much investigation, I found out my docker volume was compromised, I saw a table called recover_old_data, when I viewed the table, I saw "your data has been hacked".

Im using sshkeys and I disabled password auth to the vm, so I am lost, how the heck were they able to hack the db.


For those managing a self hosted db, what measures do you take to ensure things like this doesn't happen?

https://redd.it/1e46frk
@r_devops

Need Advice for DevOps Enginer

Hello everyone,

I'm pretty new to the world of DevOps, i'm actualy a sysadmin getting evolved into DevOps engineering job in my compagny.

I would like to know if you guys with much more experience than me, you have anything to give as advice for a young devops budy.

As sysadmin, im very familiar with red hat products like rhel, Ansible, OpenShift, Satellite and IdM.

Within my skills my im good at Storage stuff, we have some NetApp and PureStorage at work so thats cool . Pretty cool to work with.

I'm learning Kubernetes now and will probably go for the CKA to challenge my self.

I love IaC and devops concepts so this is why i went into this jobs. Im also familiar with ci/cd and all git stuff around there.

https://redd.it/1e46vit
@r_devops

Entering The Grid

I have 20 years of experience in IT, mostly architecture design around infrastructure to include storage, network and virtualization. I am capable of learning the tools of the trade (python, powershell, bash, terraform, etc.) and have dabbled in some. I've held many certifications all of which have expired as recently as last year. Including cloud certs.

I can't a foot in the door anywhere to get this kind of work. I am currently heavy into Enterprise architecture and deal with hundreds of data centers daily.

Are there companies hiring people like me that aren't incredibly versed in tools like I've mentioned?

https://redd.it/1e4ajx9
@r_devops

DevOps Playground On Old MacBook

I got 2023 M3 Max 36GB RAM 1 TB SSD
Had M1 8GB 256GB, traded
Also have 2019 Intel Mac 8GB 128GB

2019 was collect dust

I wanted to remotely manage a locally hosted kubernetes cluster for a variety of learning endeavors

ELK, kubectl, helm, ssh, OAuth2

Queue minikube

hadissues.jpg

Docker driver notgoodenough.jpg
Virtual box ‘’
Vm ware ‘’

3 days later…

Solution

1. Code api // can ai this
2. Dockerize it // can ai this
3. Test // cannot ai this
4. deployment.yaml // cat
5. service.yaml // cat
6. minikube start
7. kubectl apply -f deployment.yaml
8. kubectl apply -f service.yaml
9. kubectl port-forward // the key part 1 cat
10. sudo socat TCP-LISTEN:8081,fork TCP:localhost:8080 // cat socat
11. now can make requests to host device(intel mac) api from client (m3)



https://redd.it/1e4bu2g
@r_devops

I'm at a crossroads and need guidance. Software Dev or DevOps

Hello All! I'm at a crossroads and need guidance. At 37, I've dedicated many years to tech, moving from helpdesk to desktop and system admin roles. I took a significant pay cut for a role that promised development opportunities, but for 2.5 years, I've been misled and haven't touched any dev work. The company is heavily invested in Azure and C#. Now, I'm torn between learning C# or diving into DevOps, which is reportedly in high demand and better paid.

A new boss has given me the chance to work on programming. I'm weighing whether to stick with my original plan of learning C# or shift focus to DevOps for career advancement and a salary increase. With two children, I can't afford to make wrong moves. I'm seeking advice from those who have faced similar dilemmas. Your recommendations would be invaluable.

https://redd.it/1e4flun
@r_devops