What's your DevOps elevator pitch to non-tech family and friends this holiday season?

Title. Family Christmas party tonight so I have to be prepared.

https://redd.it/ef8g5m
@r_devops

Hosting Wordpress On Azure (Step by Step Tutorial)

In this [tutorial](https://youtu.be/api6HM4kpWc) we will deploy a WordPress blog on to an Azure App Service for Linux. Though there are many ways to deploy WordPress on Azure like deploying bitnami WordPress and WordPress for azure, we will go on traditional web deployment approach to have full control over the app resources on Azure.

Steps:
1 Create App Service (Linux) 00:19
2 Create MySQL Database Server 03:14
3 Access Secure Shell (SSH) 07:30
4 Deploy WordPress 09:20
cd /home/site/wwwroot
wget -c https://WordPress.org/latest.tar.gz
tar -xzvf latest.tar.gz
mv WordPress/* /home/site/wwwroot/
rm -rf WordPress
rm -rf latest.tar.gz
5 Connect Azure MySQL Database from MySQL WorkBench 10:15
6 Create a Database for WordPress Application 13:02
7 Configure WordPress Installation 13:42
8 Scale Up/Down App Service Plan 18:47
9 Configure SSL for WordPress on Azure (Important Step) 19:53
9.1 Enable HTTPS only Protocol On
App Service -⫸ Settings -⫸ TLS/SSL Settings -⫸ Under Protocol Settings -⫸ Switch HTTPS only flag 'On'
9.2 Install Really Simple SSL Plugin for WordPress
In WordPress admin dashboard, go to add plugins and install Really Simple SSL plugin
In Really Simple SSL Configuration click on Go ahead, activate SSL
In settings Enable WordPress 301 redirection to SSL

https://redd.it/ef62m2
@r_devops

Handling canary environment in k8s

Hey all,
How do you handle a canary environments in k8s?
I tried nginx-ingress(which I already use it) with it's canary option but I couldn't configure sticky session as well, I saw many issues on this.
So, how you do it?
I'm looking for a solution that will not require any code manipulation if that's possible.
I saw Istio but this is such a large solution for my simple problem.

https://redd.it/ef5a44
@r_devops

Devops Career suggestion needed !

Hello everyone
I want build my career in devops and currently a job based on Linux and monitoring is offered to me so should i go for it for the sake of experience so that i will no longer be a fresher
Because earlier i have applied for multiple devops position and got rejected because i had no experience in the field
( I'm RHCSA,RHCE, OPENSHIFT, ANSIBEL certified )
Or
Should i wait for right opportunity ?

https://redd.it/ef4sff
@r_devops

[Question] Authentication for third party applications behind a reverse proxy

Let's suppose that you have third party web applications, like Prometheus, that do not provide an authentication system. and you would like to have a dynamic authentication to access those resources behind a reverse proxy.

Nginx only supports static authentication from a password file (HAProxy does too). One solution could be to use an authentication system connected to your external different systems like OpenLDAP, JumpCloud,... and allows you to authenticate as described in \[this article from Nginx's Blog\]( [https://www.nginx.com/blog/nginx-plus-authenticate-users#ldap-auth-flow](https://www.nginx.com/blog/nginx-plus-authenticate-users#ldap-auth-flow) ).

​

Do you know tools that could do that? Is there a better way?

https://redd.it/ef4niv
@r_devops

How tech is devops?

I keep hearing that devops is a mindset and a culture but in practice it seems to be almost exclusively about tooling and coding and the application or approach to these in an end-to-end environment. (Just look at most of the content in this sub).

I’m an Agile Coach and I’m trying to skill up. I have a background (a long time ago) in C++. The devops-as-a-mindset thing, to me sounds like hijacking .. ie that mindset is actually no different to an Agile mindset. Is there a difference?

In terms of the technical side, I’m wondering how technical I have to become to sell myself as a devops practitioner or coach, and where to start.

I have no inclination to become a technician again but need a deep enough understanding to play a valuable role in that space.

Does it even make sense to “coach” devops though? If the cultural aspect is really just Agile (albeit in teams that span dev and ops) and the rest of it is basically tooling, then that latter part of it sounds like it’d be more about training than coaching...?

So... a few questions buried in there. Thoughts? What dy’all think of Agile Coaching in a modern devops environment? What advice would you have for an Agile Coach looking to skill up?

https://redd.it/ef1oo9
@r_devops

Credentials not set correctly terraform

I've just got into using terraform and ansible to deploy some cloud infra. I have an issue where regardless of the provider is use ( just testing so far) i get

>`Error: credentials are not set correctly`
>
>
>
> `on <empty> line 0:`
>
> `(source code not available)`

I'm using Terraform v0.12.18 on Ubuntu 1804

I've tried declaring my providers in a [provider.tf](https://provider.tf) file and variables in a [variables.tf](https://variables.tf) file

>`variable "linode_api" {`
`default = "TOKEN"`

`}`
>
>`provider "linode" {`
`token = "${var.linode_api}"`

`}`

&#x200B;

i've even tried hard coding the provider in the [main.tf](https://main.tf) with the token in the file. I know the above is bad security practice however it also throws the same error if use ENV variables

https://redd.it/ef3o89
@r_devops

Automatically list all your services (Zero Conf)

Hey guys, I made a dashboard with services autodiscovery! Might be useful if you use Traefik.

I hope you will find it useful:

https://ms-jpq.github.io/simple-traefik-dash/

The idea is that since Traefik already knows all about your egress, then why doesn't it list all the ones you can reach deterministically?

Simple Traefik Dash basically parses Traefik's routing syntax from its own API endpoint, and assembles a webpage from those.

You can also customize it a bit, but its all in all pretty simple.

https://redd.it/ef3au6
@r_devops

A Comparative Analysis of Kubernetes Deployment Tools: Kubespray, kops, and conjure-up

This 12-page report compares Kubespray, kops, and conjure-up across installation simplicity, configurability, scalability and distribution, supported cluster operations, performance, and debugging simplicity.

Download here >> [https://www.altoros.com/research-papers/a-comparative-analysis-of-kubernetes-deployment-tools-kubespray-kops-and-conjure-up/](https://www.altoros.com/research-papers/a-comparative-analysis-of-kubernetes-deployment-tools-kubespray-kops-and-conjure-up/)

https://redd.it/eeyhmg
@r_devops

Creating a log management system as College project.

I am in last year of my computer science engineering. There are different hackathon are taking place in my college, one of them is sponsored by different government companies where we have to choose and provide solution for there problems. I did selected a problem statement which involves designing a system for log management.
Bellow is the problem statement and description provided be the company:-

--------------------------------------------------------------
Problem statement:-
Creating Ability to Server Logs Management for Analysis & Report of Heterogeneous Servers .

Description:
Servers are the crux of our IT infrastructure and are often exposed to great risk. The servers are covered under the layer of firewall, but they are still vulnerable and require security measures. The major concern is the source of threat. Extensive usage of remote connectivity causes improper security and lack of monitoring measures on remote networking equipments. It is required to keep an eye on the wrong doers, the data thieves and their work pattern. BEML has about 30 servers housed in Datacentre in heterogeneous environment with OS HP-UX, Windows based servers. Outcome expected: Requirement of Server based Monitoring & Analysis Tools to alert the servers with Dashboard report on 30 heterogeneous servers available at our Datacentre.
-----------------------------------------------------------------

I did research and found solution like ELK stack, Fluentd, Greylog. Should I go with these solutions and create something different.
I am good at Linux(I am a Redhat Certified System Administrator), Python and AWS Cloud.

As different students across the country are participating in the hackathon there will be many who are working the the same problem statement as of mine, Please suggest me how I can design a efficient system which helps me to get myself selected within many.

Questions that are arising in my mind:-
1. Why would they choose my solution, if I am not creating something new and also I can't create something like ELK from scratch.
2. What if I choose ELK( let suppose) and some other student also chooses the same? ( As I realy don't have any idea how many students are working on the same project).

Please help me to design a solution for this problem statement.
Thanks

https://redd.it/ef14yk
@r_devops

lamp stack architecture

is it good practice to insall lamp stack on one machine? server / database / cache

or better use something like amazon RDS?

https://redd.it/eezfjh
@r_devops

What should i do to consider my self a DevOps engineer? Since i have no certificate yet

Hello Guys, i was a Android Developer/Java some years ago and in the last two years i'm into this DevOps world, so i managed some tools, i have knowledge at programming, deploying, testing, continuous integration, continuous delivery and some other tools.

But for some reason i'm a scared to say that i'm a devops engineer right now.

What kind of questions would you ask to define that i'm a DevOps engineer?

Some stacks/techs/programming languages i managed in a not so far time:

Android, Java, Flutter, Javascript, Nodejs, serveless, pwa, vue, shell scripts, groovy and some others

Some tools i managed in the last two years:

Jenkins, Gitlab CI, AzureDevops (recentely), ansible, packer, terraform, docker, grafana, CI concepts, CD concepts, AWS (ec2, groups, vpcs, amis and some other tools), sonarqube...


What questions would you ask to me to know if i'm a real DevOps engineer?


I know that certificates are cool, but what would you ask to someone with a cerificate?

https://redd.it/eewe4w
@r_devops

Recommended books for microservice architecture?

Hi all,

I'm looking for book/resource recommendations for architecting with microservices.

Given some set of functionality that my service needs to achieve, how can I best decompose it into microservices? What qualifies as a good design vs a bad design?

Design patterns for microservices are also of interest!

https://redd.it/eey3zg
@r_devops

I’m not a devops guy and I’m really struggling to understand the problem solved by secrets management from a devops perspective. What is the problem, with examples please?



https://redd.it/ehptbs
@r_devops

.NET project manager here. Having an impossible time hiring a devOps position. What am I doing wrong?

Hello all, as the post title states I am a .NET developer turned project manager for a cloud hosted IoT web application. The project is growing fast and I've been pushing to get a devOps person in house for a while and 6 months ago I was given the green light to hire one.

The problem is that we have received only 1 decent resume since the job posted. We are using all the usual job boards plus 2 recruiting firms. We have not posted a salary range but we are willing to go over 6 figures for the right guy. We aren't requiring an exam to interview and I think I'm asking reasonable whiteboard interview questions. (*for example*: Diagram a simple, three-tier web app, and then tell us how you'd write some custom monitors to track performance. *If they can do that I add on*: How would you handle 2x traffic growth over the period of a year? 10x growth? How would you help the dev team handle a page that tested well but has 30 second response time once deployed, and so on)

At a high level we are looking for someone to automate builds, automate some simple application testing, be responsible for our cloud environment, and provide direction when we are having cloud-related application issues (either through performance monitors or application telemetry). I'd be happy with a candidate that has 2 out of those 4. I am obviously not a devOps guy but I have worked on a team that had them in the past and they handled these responsibilities. Am I way off base with my expectations? Am I actually looking for a cloud engineer and a QA guy?

Any help is appreciated.

https://redd.it/ehoo2c
@r_devops

I'm beginning the Facebook interview process for the `Production Engineer`role. Graciously accepting any advice or study guides

So a Facebook recruiter reached out to me for a position on the PE Team. I haven't "properly" prepared for such an interview as I wasn't planning on even pursuing an interview at a FAANG for another year or so. I currently work as a DevOps Engineer at a startup with a lot of focus on AWS, Kubernetes/EKS, Terraform, Bash, and Gitlab CI, as well as a little Python.

I was provided with some study materials, but I was wondering if anyone here has interviewed for this position or currently works for Facebook that can also provide some insight and tips for acing this interview.

Also, if I do not do well in this interview, how does that persist in internal records and will I be able to interview at my "planned" time in the future after more studying, with a fresh slate?

https://redd.it/ehrjia
@r_devops

Terraform for loop issue

I have some terraform in which I would like to loop over an array and have it create a resource per item in said array.

&#x200B;

Below is my current code, the first part of creating the repos works as expected, my issue is the second part of the life cycle policy the repo name line I get an issue, I know that I need to input the value of the repo name however I'm unsure how to.

&#x200B;

resource "aws_ecr_repository" "repo" {
for_each = toset(var.repo_names)
name = "${each.value}"
image_tag_mutability = "IMMUTABLE"

image_scanning_configuration {
scan_on_push = true
}
}

resource "aws_ecr_lifecycle_policy" "repo_policy" {
for_each = toset(var.repo_names)
repository = "${aws_ecr_repository.repo.${each.value}}"

policy = <<EOF
{
"rules": [
{
"rulePriority": 1,
"description": "Keep last 10 images",
"selection": {
"tagStatus": "tagged",
"tagPrefixList": ["v"],
"countType": "imageCountMoreThan",
"countNumber": 10
},
"action": {
"type": "expire"
}
}
]
}
EOF
}

https://redd.it/ehps1e
@r_devops

Terraform & Jenkins

I'm on a mission to setup a pipeline in Jenkins for handling the Terraform/IAC for a specific application I have. I can't find anything real helpful on the internet outlining the steps for setting this up. I know there's a Terraform plugin for Jenkins, however it's outdated and doesn't support the "module" structure that the newer versions of Terraform support.

Can anyone point me in the right direction? I just need to setup a pipeline for init, plan, apply - however I'm also guessing I'll need to load the Terraform files to the agent since the plugin is outdated.

https://redd.it/ehge5c
@r_devops

Free DevOps Bootcamp on Twitch - T-Minus 7 days!!!

Happy Holidays all!

Just wanted to drop back in and remind you all that my free DevOps Bootcamp, called MASTERMND Academy, starts next Sunday on Twitch!

It's a 12 week course focused on learning the ethos and concepts of devops, so if you're someone who is looking to get into DevOps in 2020, check out the channel! The curriculum can be found at [https://academy.mastermnd.io/curriculum/devops/](https://academy.mastermnd.io/curriculum/devops/) and you can checkout the Twitch channel at [https://www.twitch.tv/mastermndio](https://www.twitch.tv/mastermndio)

There is also a Python bootcamp starting the day after this one if anyone might be interested in that.

Let me know if you have any questions!

P.S. I am running a stream on January 1st where we'll be setting goals and getting pumped for all the winning were all going to be doing this year.

https://redd.it/eherww
@r_devops

Cloud Engineer here....feeling lost on what I should do next?

Hi all,

I recently got hired as a Cloud Engineer (about 4 months ago) and have been super grateful as to how in the hell ended I up here. My role mainly has me programming automation and solutions regarding Cloud Security (governance and compliance).

However, being the goal-oriented person that I am, I have no idea where to focus my efforts and studies into now. I've just been feeling lost and frustrated, I hate not having something to strive towards.

So I thought it be best to ask those who have been in my position, or are currently working in the Cloud/DevOps realm as to what the possibilities in this field are. How do I find out what to aim for next? How do I find out what I should be doing?

Is there a certain position I need to be striving for? Are there certain skills I need to focus on acquiring? I find all these different disciplines (Security, networking, programming, etc) so I have no idea what to focus on. I guess I'm mainly motivated by what gives me the most money to better provide for my family.

I appreciate any advice and wisdom.

https://redd.it/ehfvhs
@r_devops

Wrong image being used?

I am using Helm to deploy to Kuberenetes which is running a Docker image from an ECR repo. This image is built uisng Jenkins in a simple pipeline. I've checked the Jenkins server and the code is as expected - ie right service name and port.

&#x200B;

When I check the describe on the pod for the effected service is show's it can't connect to port 8088 (the port the container should be on). The container that is actually running is a different micro service running on port 8086. I can see this by using kubectl describe pod <name> which also shows me the container uri, the ecr repo plus the tag both of which match with what it is should be pulling from.

&#x200B;

Service A and Service B use different ECR repos which should mean I can' have a cross unless I put Service A's repo name where Service B should be, which is not the case for me - I've checked and had others look too.

&#x200B;

I'm wondering in what cases could this issue come up where Kuberentes is running the wrong container yet manages to tell me it's running the right one?

&#x200B;

I've downloaded the container to my local and tested that it has the correct code as well.

https://redd.it/ehavey
@r_devops