Just published first version of Ansible for Kubernetes, my second book!

I'm excited to share that I just published the first early version of Ansible for Kubernetes ([blog post here](https://www.jeffgeerling.com/blog/2019/ansible-kubernetes-my-second-self-published-book)), and it's available on LeanPub—DRM free, with free updates forever.

I self-published my first book, Ansible for DevOps, a few years ago, and have been updating it regularly since. I hope to do the same with this book, and plan on adding another five chapters before reaching '1.0' status.

In the blog post, I discuss more about why I chose to write on Ansible + Kubernetes, and my timeline for completing the book (barring any more annoying health issues that have been hampering my writing in the past!).

https://redd.it/edbcm2
@r_devops

How we customize continuous delivery pipelines

The story of customization Jenkins declarative pipelines: [https://medium.com/@aatarasoff/how-we-customize-continuous-delivery-pipelines-4ff6a360000d?source=friends\_link&sk=4f56d725ba473443afa04f5afc5689cb](https://medium.com/@aatarasoff/how-we-customize-continuous-delivery-pipelines-4ff6a360000d?source=friends_link&sk=4f56d725ba473443afa04f5afc5689cb)

https://redd.it/edqz6o
@r_devops

Got first potential job offer for DevOps position, but it's remote. Should I accept it?

The title is self-explanatory but let me add more info.
I currently work as a net admin and from some time ago I started to learn more skills for a DevOps job.

Eventually started applying and got a potential job for a (junior)DevOps but with full remote work.
I honestly think it would be crippling for my first job as DevOps to be 100% remote.
Maybe after couple of years, I would go for full-time work from home but jumping to that from the start seems bad for me.

The company is well aware that this will be my first gig and they said it shouldn't be a problem for me. I will contact with the other team members through slack and should consider it.
I think it should be better to first start with the job in an office environment with the team, and after some time gradually start working remotely. Maybe once a week.

Thoughts, explanations, info? Thanks

https://redd.it/eds1el
@r_devops

DevOps: A simple example workflow pattern featuring Go, Docker, Kubernetes, CircleCI

Here is a quick video explaining through an **example** about a typical workflow along with what all types of **tools** that might be required in general in DevOps including very brief introduction on containerisation(Docker), container orchestration(Kubernetes), Auto-testing/deploying(CircleCI), Monitoring and Load Balancing.

This should be useful for a **beginner** to get a brief general overview.

[https://www.youtube.com/watch?v=9pVd2Fjbaew](https://www.youtube.com/watch?v=9pVd2Fjbaew)

https://redd.it/edryu1
@r_devops

Advice for Kubernetes infrastructure setup for a project.

I got a project to deploy to Kubernetes.

Project itself is Python Flask REST api and is split into multiple microservices.

My knowledge is not on some high level and this is my first time to work in a microservice based env, besides that first time actually doing something with Kubernetes.

With my limited knowledge this is a list of services from a docker-compose file:

\- Billing service ( Stripe ) ( links: rabbitMQ, Postgres )

\- User management service ( links: rabbitMQ, Postgres, Redis )

\- Video compression service ( links: rabbitMQ )

\- Video watermark service ( links: rabbitMQ, Postgres )

\- Rest api service ( links: rabbitMQ, Postgres )

\- Notification service ( links: rabbitMQ )

​

From these services my first guess is that some of them asks for more resources than other. Video services for sure.

​

Any advice on how to approach this in Kubernetes deployment?

https://redd.it/edsgnr
@r_devops

Android app for AWS Lambda

I'm sharing an Android app I've been working on that makes it easy to invoke AWS Lambda functions from an Android device. Link: https://play.google.com/store/apps/details?id=com.alexsci.android.lambdarunner
I've been using it to trigger release scripts and other DevOps helper Lambda functions from my phone. More info: https://alexsci.com/android-apps/aws-lambda-invoker/getting-started.html

https://redd.it/edtvja
@r_devops

Use Helm for deploying bespoke apps?

Do you guys use helm to deploy your own apps by writing private chart?

Or just use it to deploy the published apps from the repo?

https://redd.it/edm3lc
@r_devops

Forbid to push in production on Friday is a #DevOps anti pattern

More than just make Dev and Ops working better together, DevOps aims at delivering as soon as possible any developed and tested features to our users, get the expected value and having quick feedbacks.

Forbid to deploy on Friday is to lose 20% of time to deliver this value to your users. Sometimes, we even forbid it on Thursday afternoon or before Bank Holidays, thus forbid more than 30% of time !


More than lose this important time, we give the impression that we are not confident of our CI/CD pipeline, of our tests, maybe not even trust our teams. If you are not confident to deploy on Friday, why are you to do it any other day?


This rules implies than deploying is dangerous, risky. We should not FEAR to deploy in production.


If you believe you are #DevOps, you should be able to deploy any times, nights and days, even on Friday!

More details here : https://rochefolle.com/index.php/en/2019/12/08/devops-what-if-we-deploy-on-friday/

https://redd.it/edn3cz
@r_devops

Terraform Access Key/Secret and IAM best practices

I am creating a new IAM user/role that will be used from my CI server. This part is trivial.
When terraform creates this new resource, because I am using `resource "aws_iam_access_key"` it creates a new access key. Which I need, so that I can use it from my multi-account CI server. I want to know what the best practices are regarding the storage and retrieval of said key.

So for example, is it okay for it to be stored in terraform state?
Would I just retrieve this value from state when I want to add it to my CI server?

Would it be best to manually create these keys before hand? (I feel like this would defeat the purpose of IAM via IaC)


How are you guys handling this issue?
Any insight will be much appreciated !

https://redd.it/edeiw3
@r_devops

Have you replaced docker with another tool for containerizing images?

I couldn’t convince the Linux team to install docker on our build servers and we’re going with podman I think. Have you used podman or any other tool?

https://redd.it/edyuaf
@r_devops

📦 This project was design to allow anyone to drop a digital packaged in front of your digital front porch - all serverless.

A weekend project that I did out of necessity when working with clients. And it also showcase what type of interesting things you can do with Serverless :). Here is the URL: https://github.com/0x4447/0x4447_product_front_porch, and I'm open to questions.

https://redd.it/edwn74
@r_devops

High availability WordPress glusterfs question

Hey there,
I'm planning a higher availability WordPress setup. Right now my setup is one load-balancer, one mysql database.

Now I started building the lemp server, but decided to host the files on one or two glusterfs dedicated nodes. My question is, should I have all the WordPress files on each of the lemp served and just mount the wp-content folder via the glusterfs node or should I host the entire worldpress glusterfs and just have the lemp nodes read from it? What would you suggest?

Thank you

https://redd.it/edyl5u
@r_devops

Work for a junior DevOps role?

I was hired for a junior DevOps role and my manager is letting me choose what kind of things I want to work on. What kind of work should I focus on to level up my DevOps career and make myself productive for my company?

So far I created some Prometheus alerts, scheduled CloudWach events with a script to clean out unused AMI and volumes in AWS, and created some infrastructure for an application using Terraform.

Available work consists of creating PRB with Jenkins for various things, Kafka things, ElasticSearch things, Prometheus and AlertManager things.

https://redd.it/edviip
@r_devops

Upskill to DevOps or Python/JS?

I've saved up enough cash to give me 6-12 months out of work to upskill. My background is general IT (20 years), and I've done everything from roll-outs to integration to IT Management to building open source web development projects for NGOs. I love Linux the most, corporate Windows IT stuff the least. I'm average at networking, having to cram a full day on subnetting if I'm going to revise CCNA stuff, for example - I never remember it all.


I want to focus on DevOps or Programming now as I'm hitting the big four-o, and I would love to work remote full-time (I've done it before in short stints and currently do half the week remote). I want to self train rather than pay thousands for a rushed intensive bootcamp, only because I don't perform well in those kind of training camps.

https://redd.it/edxvkr
@r_devops

PSM: Serverless Configuration Management

Neiman Marcus open sources PSM for Serverless Configuration Management. I would love to know what you think!

https://medium.com/neiman-marcus-tech/psm-serverless-configuration-management-c681e93db37a

Https://GitHub.com/neiman-marcus/psm

https://redd.it/edh98i
@r_devops

What questions do you ask when you join a new firm?

So when you join a firm as a devops engineer, what questions do you ask to get to know the infrastructure? Apart from the techstack like cloud provider, docker, Jenkins, kubernetes, is there anything else that you should ask to get a in depth understanding.

Thank you and I hope this post helps new and experienced engineers.

https://redd.it/edb9bk
@r_devops

The Ultimate Guide to Building REST APIs with PowerShell

Hey everybody,

I wrote a blog post on how to create REST APIs with PowerShell and Universal Dashboard. I included examples for retrieving parameters, processing files, working with XML and dealing with all the types of HTTP Verbs UD supports.

If you have any questions, let me know. I hope it's helpful!

[https://ironmansoftware.com/the-ultimate-guide-to-building-rest-apis-with-powershell/](https://ironmansoftware.com/the-ultimate-guide-to-building-rest-apis-with-powershell/)

https://redd.it/edbbgv
@r_devops

Starting my first devops role in the new year. Just wanted to share.

I have been working as a system administrator for the last 18 months but teaching myself devops tools in my spare time.

I have also been building out Kubernetes in our dev environment at work, my manager wanted to explore whether it would be advantageous to the dev team.

I interviewed for some entry level devops roles in the autumn and after some negotiation am joining a startup to bring my slightly more ops focused knowledge to the team. I'm looking forward to filling in my knowledge gaps on the dev and process side of things.

I was brutally honest with the companies I interviewed with about what knowledge I had and did not have, emphasized that I was keen to learn and keep developing my skills. Seems to have paid off.

Very excited about it.

Any advice for hitting the ground as running as possible?

https://redd.it/ee43u9
@r_devops

Should I Move To A City With Jobs?

So ... I'm a senior engineer and currently work remotely for a company. The city I live in has zero tech. I'd have to look for a remote job or move if I leave my current company willingly or unwillingly.

I'm at the age where i'm looking to settle down. Get a girlfriend, dog, look to buy a small place, etc..

Debating to just terminate my current apartment lease (pay the $3000 fee) and move to a big tech city and start fresh. My current lease ends in 10 months, Maybe wait it out? Maybe start the jump now?

I like the current city I live in as well as the two tech cities I'm debating to move to, Not sure what to do...

Would love any advice from anyone that has maybe been in.a similar situation, because I have this fear of settling down in a city that has no opportunity for my skillset.

https://redd.it/ee7jq5
@r_devops

Need Assistance with Cloudfront Distribution Redirects

Hey guys,


Looking for some help with redirecting a request from one AWS bucket to another domain.


i.e [app.domain.com](https://app.domain.com) will return the user to an Cloudfront distribution with a html file that does nothing.
What's the best way to redirect that traffic to [domain.com/docs](https://domain.com/docs) ?


So far using Lambda Edge, redirecting the request using 302 and location headers would maintain the url [app.domain.com](https://app.domain.com) and show some of the content, but accessing any other content in that cloudfront distribution causes issues.


Any advice for more advance routing stuff?

https://redd.it/ee7oy9
@r_devops

container running on my ec2 insatnce cannot connect to my mongodb (atlas)

Hey,

​

so i have created a cluster on mongodb-atlas and peered it with my vpc.
i checked that i can connect from a server to the mongodb and it worked - yay.

now, the issue starts when i run my docker containers on a docker-swarm that runs on the same server.
it looks like the containers running on that instance are not WHITE-LISTED by atlas. this is weird because the entire VPC is whitelisted.
somehow the container doesn't associate with its private ip.
did anyone else encounter the same issue ?
any ideas on how i can solve it ?

https://redd.it/ee4wyj
@r_devops