Sonarqube Custom Code

Anyone here uses Sonarqube with their tech stack? Do you think it is worth the trouble to create your custom rules in it? Or just go with what they have.. for reference we plan to use it with java code check

https://redd.it/1e4q3db
@r_devops

Keycloak v25 improving performances

Hello everyone, I've written this article analyzing the performance of Keycloak v25. The previous version suffered heavy losses at the CPU level to increase the level of security, due to the hash algorithm. The new version has corrected this performance loss while maintaining high security.

To find out more, click here: https://cloud-iam.com/rkc25devops

https://redd.it/1e4ox3j
@r_devops

Best cost effective way to run a lot of heavy tasks?

Hi everyone, to give some context i have a browser based game where every day at a certain time a the game matches are processed, this process takes about 5 seconds to run per match and there will be about 1000 matches to process, so running them sequentialy like i'm doing right now would take a lot of time to finish. Fyi i'm using Amazon SQS to queue the matches then i'm polling the messages from a Fargate ECS task with a cron job.

Thing is even processing a single match takes the container CPU to 99% (i'm using the smallest vcpu possible to reduce costs). I'm wondering what is the best course of action and architecture to handle this, i've read something about running several tasks in parallel but this is really not my area of expertise so i don't know.

Let me know if you need more info, i appreciate the guidance.

Thanks!

https://redd.it/1e584th
@r_devops

Private Equity Firm Acquires Flexagon, Signaling Continued Interest in Salesforce DevOps

https://salesforcedevops.net/index.php/2024/07/16/private-equity-firm-acquires-flexagon/

https://redd.it/1e5aoct
@r_devops

Please help me with professional knowledge

Hii people,

After reading all your answers to my previous questions, (first of all, I'm happy that you took your time to answer my dumb questions) I understood that there is still a long way ahead before I master git/versioning. Like I said, I'm a solo developer and not so familiar with Git/versioning, and have had zero guidance on that matters. I read docs, and a few other online resources and yet there are still a few concepts I don't understand. I just want to know how professionals and tech-workers/software engineers does these things, since I've been brute-forcing the flow up until now, and I'm at that point where that won't work anymore.

Also, how often do you guys PULL, ADD, COMMIT and PUSH changes?

I ADD+COMMIT+PUSH only once for a branch and that too when I'm done with that branch. And since its only me who works on the repo and that I only have a single branch originating from main/master at any given instance, I never used PULL, REBASE, RESET, MERGETOOL, DIFF. Can someone please guide me through the mistakes I've been making using Git.

https://redd.it/1e5cev0
@r_devops

Need to move from Frontend to DevOPS after 2 years?

Hello there,



Current status:
I am Front-end developer for last 2 years. Mostly I work with react and Vue along with typescript.

Motivation to DevOPS:

- Server management, writing Linux commands, setting Docker, using git, I enjoy them

- I'm very insecure about my career as being a fr dev.

- Need to move to dubai from south aisa country. I want to learn strong technology with less competition having interest too in it.

- HTML_css less work. I hate frontend, by mistake I am in.

- Exposure to new skills other than just development

- need to start own small scale hosting company, so it can be helpful.

Cons:
- it's way more than just basics I know already. Like Jenkins, ci/CS, pipelines, kubernetes. Etc

- 4 months I have, I need to learn new tech and moved to new place. Is it enough time while maintaining 9 to 5.

- again junior, after spending. By the way Dubai companies still consider junior if experience is not inside Dubai. Outside experience is just 0. I've heard this. Not confirmed.



https://redd.it/1e5dnv6
@r_devops

Sonarqube coverage

Is there any way to configure quality gates in sonarqube so that if the code coverage is less than before, the build pipeline should fail?

https://redd.it/1e5e0et
@r_devops

Should I find a tutor?

I'm currently learning devops. While it's going good, I feel that is too slow. Also on internet the information you find rarely matches complexity of an enterprise project. I've been a developer for more than 3 years now, working on huge projects. So when I learn something on the internet it always feels like scratching the surface.
Should I get a tutor with experience in the field?

https://redd.it/1e5f7c3
@r_devops

GitLab explores sale

https://www.reuters.com/markets/deals/google-backed-software-developer-gitlab-explores-sale-sources-say-2024-07-17/

https://redd.it/1e5i7pe
@r_devops

I have built a visual node system for workflows and pipelines

Hey everyone,

For a few months I've been working on a hobby project and thought I'd share it with you. I call it Actionforge, a visual node system to build workflows and pipelines.

A bit of a backstory, I’m a software engineer and over the years I've noticed that many of my technical colleagues (those who aren't programmers) have a bit of a love-hate relationship with the programming ecosystem. Some of them like Python, but overall could never fully commit to it. Since my background is in 3D and VFX, where intuitive node systems are very common, I decided to bring this intuitivity to DevOps.

https://www.actionforge.dev

In a nutshell, you can build a graph using an editor and then run it everywhere.

The runtime to execute these graphs can be downloaded from the webpage. The runtime is a single binary (\~10MB), no installation, has no telemetry, and no internet is required. It runs on all platforms and architectures. It supports concurrent node execution, group nodes, port groups, streaming files from and to the cloud, and so on.

On top, if you're more into GitHub Actions, I have built a full GitHub integration, meaning instead of writing YAML files for GitHub Action workflows, you can simply click together a workflow with actions from the marketplace.

Happy to share all the nitty-gritty if you're interested.

https://redd.it/1e5kcr0
@r_devops

Top skills in demand for devops in west coast??

Hello!
I will be graduating from my master's in information systems in December, and I also have experience in Devops of 6 years. I am looking for jobs and want to move to California Bay Area / West Coast mainly due to the nice weather and relatively chill lifestyle. I am also looking to situate myself in areas with lower living expenses since I will be dealing with student loans.

While I have my hands dipped in a bunch of different cloud providers, devops tools and have been working on my skills in IAC, Kubernetes, Observability, monitoring and other tools. I am looking to highlight skills which are more likely to be picked up by companies in the west coast? I am looking for recommendations such as - `this area has companies in robotics so they are more likely to use GCP` etc. Any other advice, suggestions or wisdom are extremely welcome!

Reposting this after editting since I mixed up my east and west and some commenter was more focused on teaching me my lefts and rights. I'm just looking for some kindness guys.

https://redd.it/1e5m5m2
@r_devops

Is this job really worth the salary?

I'm UK based so can't speak for the rest of the world.
In the UK, I am seeing many DevOps jobs going for around the 50k - 60k mark. Some positions are even lower than this!
I know there are positions which rise higher than this, and senior roles can even go a good bit higher. But, my question is, do you guys think it's worth it?

I am just shy of 2 years into a DevOps role. Worked as a dev for a year before hand - very luckily managed to upskill and became a DevOps engineer. However, my salary is 36k, move from 34k as a developer. But the stress I feel as a DevOps engineer is x10 worse than when I was a developer.

I work in a consulting firm, so maybe this is part of it. But I have non-stop customers messaging me all day. Things are faulty here and then, and tickets are raised all over the place. Constantly meeting with clients to discuss SOW and updates on projects, etc. I know my pay will bump up, but even at 50k+ it seems like a whole lot of responsibility and knowledge you ned to know!

Comparing myself to my friends that are still part of the developer team, by no means are their jobs relaxed, but I feel like it's soo much more peaceful that the constant bombardment I am under.
Granted I know a lot of this is to due to me having to learn a whole bunch of new things and be there to answer questions over a whole range of topics. But I feel like when you compare what knowledge is expected of you compared to other professions which can get to 50k... it is quite wild.

https://redd.it/1e5m1dy
@r_devops

How does your org handle dozens of tool versions across dozens of repos?

I'm curious about how everyone handles versioning across multiple repositories in their organizations. At my company, we deal with a mix of third-party and home-spun container images, machine images, software packages, software libraries, Terraform providers, Terraform modules, Helm charts, Kubernetes CRDs, Crossplane provider packages, and probably a few other things I'm forgetting.

With so many moving parts, we're trying to nail down a solid approach to versioning. For instance, when we have a Dockerfile in a repo that downloads a specific version of a tool, is it better to keep that tool updated regularly or stick to the pinned version that's known to work?

Where do you all draw the line between "maintain this version and try to keep it up to date as much as possible to get security and bug fixes" and "this pinned version is working, so let's not mess with it until necessary"? We're struggling with finding this line because we have so many versioned tools, but only 6 people on our platform team to manage it all.

I'm really interested in hearing how other teams handle this. Do you have specific policies or best practices that you follow? Are there tools or methods that help you manage and track versions efficiently? How do you deal with dependencies and ensure everything remains compatible?


https://redd.it/1e5ohvf
@r_devops

Github actions reusable templates not really that usable ?

Hi all!

What am I missing ? I thought to make a reusable workflow and then use it a bunch of times, passing different inputs.

Of course, I would get those inputs from something like env vars or inputs to the workflow or any such thing. But that is not possible it seems because they somehow made it in a way that with the context of 'uses' none of those are available ? See this link: https://docs.github.com/en/actions/learn-github-actions/contexts#context-availability . Now am I using this thing wrong? I have used things like azure devops pipelines and others, each with their own quirks... but this seems very strange to me, unless I am just trying to use a hammer to drill a hole, in which case I would gladly hear where the drill is !

https://redd.it/1e5msj7
@r_devops

Terminating Elegantly: A Guide to Graceful Shutdowns

For applications deployed in orchestrated environments (e.g., Kubernetes), graceful handling of termination signals is crucial.

I prepared this repo to demonstrate how to do it in Go/Kubernetes to make sure there is no loss of requests/data - https://github.com/plutov/packagemain/tree/master/graceful-shutdown

https://redd.it/1e5sdp4
@r_devops

What was the most challenging bug you ever fixed?

What's the most challenging bug you ever fixed?

Share your toughest debugging stories! 🚀

https://redd.it/1e5pffl
@r_devops

I am so baffed

Can someone explain to me what devops is? I am starting a DEVops role this September which is a 4 year apprenticeship with uni but have nooo idea what DEVops is. I been reading the thread and see alot of different versions of what responsibilities they have. Is DEVops a support role like IT where you’re just a fixer? Am I working on the cloud using AWS? What the flip is a docker? Is DEVops a mix between being a support engineer and a cloud engineer? Any help would be appreciated!!

https://redd.it/1e60ae4
@r_devops

We have a "code sync up" meeting after our standup that I find useless..

Some of our devs want to discuss our code more and requested an additional daily meeting an hour after standup..

I kind of got a bit flustered and said something along the lines of..

- We're all senior+ devs here.. if you have an issue just bring it up after standup..

- Put a PR together and i/we can review your code and provide feedback

- 9AM - 10AM standup then 11AM code review standup killls my entire morning. What. the. fuck my dudes.. figure it tf out or gtfo..

- If we're all actually senior devs then we do not need an additional meeting to dive deeper into stories/code.. (honestly i got quite flustered and pushed this point lol)

..and yes i'm actively looking for an internal transfer.. love the company but this team is just odd

https://redd.it/1e5zvd9
@r_devops

Build server specifications

Hi everyone,

I'm planning to set up a new on-premise build server for our development team and could use some advice on the specifications. Here are the key details and requirements:

Project Details:

Type of Projects: A mix of C++ and C#
Number of Developers: Around 15 developers.
Build Frequency: Multiple builds per day, with CI/CD pipelines (AzureDevOps).
Expected Load: Simultaneous builds for different PR

Current Specifications:

vCPU: VM\_1 24, VM\_2 24, VM\_3 24
RAM: VM_1 24, VM_2 24, VM_3 16
OS: Windows Server

The 3 VMs works in a VSphere cluster under VMware. The pyshical machine is shared with testing and PO environments. We woulkd like to build a dedicated build server.

Currently the total build process of a PR takes 1 hour. Some application builds on VM\_1, some on VM\_2 and others on VM\_3


In my wettest dreams I'll love a docker configuration. Anyway, we would like to decrease the PR time down to 10-20 minutes.

Additional Information:

Budget: Open to suggestions, but looking for a balance between performance and cost-efficiency. They actually asked for 2 tiers: a mid-tier solution and a beefy solution.
Scalability: Should be able to scale with increased load in the future.
Other Requirements: Suggestions for backup solutions, redundancy, or any other considerations would be appreciated.

Any recommendations or experiences you can share would be incredibly helpful.

Thanks in advance!

https://redd.it/1e65bmf
@r_devops

Dependency Track not showing components (and vulnerabilities )for some SBOMs made with Syft

I'm using Dependency Track to monitor for vulnerabilities on multiple systems. I create an SBOM in CycloneDX 1.6 format using Syft and then import the SBOM into Dependency Track. The problem is that for some systems I upload the SBOM and the system accepts it without complaining that something is wrong but then nothing happens. The component list just stays empty and nothing is shown.

For other systems doing the same works just fine.

Any ideas what could be wrong?

https://redd.it/1e65jfu
@r_devops

9LPA TO 8LPA developer to cloud engineer Pune

Hi Friends. currently i have 9lpa as a front end developer 2.7yoe. I want to transition to Cloud/Infra role for Good Career in future.

I got opportunity to give interview for Cloud engineer 2-3yrs of experience. i aquired all the skillset that company needed.

Actual Company is big tech giant but Consultant telling that Budget is 8LPA.

Will this Lowering in Pay will make my Future better or i continue with Devlopment

https://redd.it/1e66mq5
@r_devops