Devops syllabus in my college. How good is it?

https://imgur.com/a/0VVO6am

Devops is an Honors subject in my department. This the syllabus of my previous semester. There are still 3 more semesters. How good is it?

https://redd.it/1iaaa3w
@r_devops

What branching strategies are best practice?

I've worked as a Devops Engineer for a small company for three years and for the most part it's always been just me working on projects.
I tend to have a main branch which is what is deployed to production.
I also have a branch called 'uat-testing'. Which in our CiCd just points to a different Kubernetes cluster with Argocd apps.
Whenever I do development, I tend to do this in a feature branch, or a development branch.

When I'm ready to deploy to UAT, I just checkout to uat and merge the chains in, push and Argo deploys.
Our QA team tests, then when happy, I checkout to main, merge, push, and Argo deploys.

I've just moved jobs, and I've been told that my git branch strategy is horrendous.
And I should be using tags. This is all new to me, so I'm looking for resources and advice.
What is the best practice for git branching strategies?
Is it completely dependent on your application, what you are deploying?
The example above was for deploying manifests into K8s

https://redd.it/1iaao9j
@r_devops

Managing PG roles and grants as IaC

Hey team,

So we use AWS RDS Postgres and we have Terraform using this provider: https://registry.terraform.io/providers/cyrilgdn/postgresql/latest

We have a monolithic setup, with a module for the whole infra including these roles and perms.

We’ve been executing everything locally, which means our devs have to port-forward to the DB and have the DB credentials locally.

We want to move to a CI/CD approach. However our self-hosted runners, which reside in a dedicated CI/CD account need network connectivity to the prod DB - which is sub optimal. They also have to have access to highly privileged credentials.

Broadly speaking I think our options are:
- Ditch Terraform for this particular use case in favour of another tool or pure SQL?
- Extract the Postgres logic from the monolith infra deployment into its own module
- Use private links or a VPN like Tailscale to connect between runners and the DB. Store the secrets in Secrets manager.
- Manage grants and permits as part of application migration?

There must be a better way! What do you do or have done in this situation?

https://redd.it/1iaau3f
@r_devops

Learning DevOps while self hosting services

Hi everyone! I'm a software engineer as a daily job. I recently started to rent a vps on which i want to install services and tinker things to learn things around DevOps role. As a starter i have setup a gitlab instance, and a runner. Now I'm looking around next steps that i could do to learn DevOps related things. I know my request is kinda blurry, but I am just not sure about what I could say to help you help me. Feel free to ask me anything that could help you guys direct me somewhere interesting. Thanks in advance!

https://redd.it/1iae2li
@r_devops

Some of the cost effective alternatives for Logging in cloud.

Currently, i am working on a project in AWS, i am using cloud watch to monitor logs but the costing is killing me my monthly average cost is coming out to be 1700$ and looks like this is just increasing every month. i am accumulating somewhat of 2000gb of custom logs and 112gb of vended logs and the main costing is of log ingestion to cloud watch. Please suggest me some alternatives for logging, i was thinking of considering third party services like dataDog. but, please suggest some other alternatives to help me reduce this cost by almost 50%

https://redd.it/1iafv0m
@r_devops

Anno - Automated Release Summaries

Hello, /r/devops!

I’m excited to share **Anno**, a GitHub Action that my company has just open-sourced after using it internally for the past six months.

We manage a number of services, including some in mono-repos, with multiple changes being deployed to production daily via CI/CD pipelines. Without explicit releases, it was often difficult and time-consuming to track what had been deployed for internal visibility or debugging regressions.

Anno helps automate this process for us:

* When a workflow run completes, it retrieves the code diff and commit messages since the last successful run.
* It summarises the changes and references any related PRs and Jira tickets it finds.
* Finally, it posts a detailed release message directly to Slack.

It's saved us many hours and made it far easier to keep everyone informed about what’s shipping to production.

**Check it out here:** https://github.com/thesolesupplier/anno

We'd like to add other features and integrations beyond Slack, and we’d love your feedback. Do you think this would be useful in your workflows? And what other features or integrations would you like to see?

Looking forward to hearing your thoughts!

https://redd.it/1iaha2c
@r_devops

Visual facilitator as side skill

Hello dear community!

Lately, I've decided to develop an old habit of keeping visual notes (sketchnotes) as a side-skill to my primary profession, that is cloud devops. Over the years, I've used sketchnotes for learning new stuff and also whiteboards and flip charts to communicate with others, avoiding cognitive overload and get to the point and collaborate.

I have seen some examples from visual/graphic facilitators online and it seems to me that this is what's close enough to what I'm seeking. Compared to the examples I am talking about, Instead of business context, I will be more in technical context.

Has anyone experience to this area and could kindly suggest any kind of course/training or practice to evolve this skill?

Thanks!

https://redd.it/1iah3tk
@r_devops

Terraform setup opinion

Hello everyone,

I’ve just started on a new project which has a setup that’s quite unlike anything else I’ve seen before and it’s already posing some challenges but at the same time I’m wondering whether it’s a common setup and perhaps I need to adopt it and practice it more.

Basically it goes like this.

On the generic stuff (company wide): there are a number of repositories each with a dedicated goal such as setting up basic networking (like VPC with subnets in AWS), security components, connecting an account with a shared central transit gateway for internal cross-account comms, etc. Each is deployed in sequence for a new account.

On the per project stuff: there’s generally one or more repos (usually one or two, rarely 3) that setup the project specific stuff like certificates, clusters (ECS, EKS, etc) or vms, databases, load balancers. Each project is built on top of generic stuff defined above and the practice is that when pre deployed shared stuff is needed, said state is imported via a naming convention and required dependencies (like subnet ids or vpc id) is read from remote states.

Now for what I find to be the crazy part: on the project repo(s), branches are also used for different purposes. For example, the main branch generally defines some basic project infrastructure and gets deployed separately. Then there are per-environment branches (that also use separate workspaces with appropriate names) that also import the state of the master.

This last bit is what I find almost unmaintainable since in order to get the picture of the project infrastructure I need to keep switching branches and track down what each environment branch imports. Often, the shared main branch components gets changed to fit one purpose while an environment branches has drifted in a way that when it’s deployed again, the changes from main cause issues with it.

To me it’s strange to say the least since for me a repo should define an application/project and a branch should reflect a different version of the same thing, rather than one branch being more like a foundation setup that’s also shared at the same time.

https://redd.it/1iacs2y
@r_devops

Is there a CI/CD awesome github repo with all the little things you can do to improve your CI/CD pipeline?

Is there a CI/CD awesome github repo with all the little things you can do to improve your CI/CD pipeline?

https://redd.it/1ianiu4
@r_devops

Need help with system design for debit card issuing system

I have this task:

Design a debit card issuing system using a 3rd party API that will handle card printing and delivering. Max amount of time for this is 40min.

Thing is I'm not able to find any similar examples which I could adapt for this use case. Most of system designs revolve around streaming services or social networks.

So I need help with system design for this.

Maybe someone with system design experience could direct me to some relevant resources?

Or simply draw this on excalidraw so I would have a good example? I can also pay for your time. DM.

https://redd.it/1iaoy6j
@r_devops

Cost effective way to simulate 1000 worker nodes for kubernetes

I want to test and benchmark some configuration related to k8s. I want to setup 1000(to start with) worker nodes with let's say 128mb ram and 0.5vcpu each. Creating them in cloud will be cost-prohitve. What are some of the best options to set this up?

https://redd.it/1iavsqp
@r_devops

How to use Chaos engineering in API management

I work in API management and I want to know how can I use Chaos engineering to test our resilience. We have deployed our APIs on kubernetes cluster.

https://redd.it/1iazp0t
@r_devops

Want to interview ppl who struggled to onboard cloud services. Giving out Amazon gift cards in return.

Hey r/devops!

We’re a small team working to simplify and automate the process of onboarding cloud services like AWS Kubernetes and Google Cloud SQL. Coming from developer backgrounds ourselves, we’ve all experienced the frustrations and roadblocks of setting up these services, and we’re passionate about making this easier for others.

To better understand the challenges faced by the community, we’re looking to interview people who have struggled with similar setups. Your insights will help us build a better solution.

As a token of appreciation, we’re offering Amazon gift cards for your time and feedback. If you’re interested, please feel free to DM us or leave a reply below.

Thanks so much for your help—your experience could really make a difference!

https://redd.it/1ib01hb
@r_devops

Need help with system design interview

I am senior android native app developer who needs help preparing for an upcoming interview, specifically system design stage which will be backend focused.

I am looking for an experienced backend developer or a software architect who could jump on a 1 hour call with me, share his screen, design a specific system on Excalidraw and teach me about required components, performance improvements, bottlenecks and etc.

Here is the feature I want to prepare for:

Using Excalidraw, design a debit card issuing system using a 3rd party API that will handle card printing and delivering.

Given amount of time for this in my interview will be only 45min. So I dont expect to design entire system, focus will be on core functionality for satisfying the defined requirements.

System will involve things like client, api gateway, databases, load balancers, cdn network, cache, sharding and adress other things like scalability, reliability and so on.

Structure is this:
1. Define functional and non-functional requirements
2. Draw high level diagram
3. Define entities (tables)
4. Define apis (parameters, requests, responses)
5. Do a deep dive (satisfy non-functional requirements, improve performance, identify and fix bottlenecks and etc.)

https://redd.it/1ib2csw
@r_devops

For those shops that are moving AWAY from the cloud to self-hosting, what certs do you think would be most relevant?

I'm thinking RHCE, CCNA, and the like.

https://redd.it/1ib5xoo
@r_devops

Containerization Of Dotnet Core Sultuion

I am a backend engineer, I have a good experience with Dockerizing projects in general but im not a DevOps or networking specialist. I was put on a solution that consists for more that 20 Web APIs and Cloud Functions. The solution is deployed to Azure via pipelines on AzureDevOps.
The Idea now is to make the solution cloud agnostic for future migrations to other cloud providers and make is easier to deploy.
The basic plan is to:

\- containerize each project
\- use container store (in my` case Azure Container Registry)
\- use kubernetes (in my case AKS)
\- maybe using some IaC?

Any thoughts, advices, best practices for my case? i would appreciate any help

https://redd.it/1ib6fpg
@r_devops

GitLab package registries

Hey everyone,

So I want to create a local registry on our on prem gitlab. I am wondering if any of you guys used any tools to somehow automate it. Manually doing this would take weeks as we need npm, php, java packages. almost every dependency has other dependencies so it is kinda difficult to get them all.

https://redd.it/1ib89wq
@r_devops

Got a devops engineer position, what should I learn first to not look like a bumbling fool?

Hello, I'm a new CS grad and I've landed a DevOps engineer position. I have a lot of development knowledge from classes but the only thing I know from the operations side is a simple yml with github actions and basic docker use. I do know the basics of linux command line as a user, but have never used RHEL.

What should I learn first so I don't look like a bumbling fool on my first day? Thank you.

https://redd.it/1ib9b9k
@r_devops

Learning AWS feels overwhelming

Background:
I completed my undergrad so to specialisation in the Cloud 3 years back. After college, I started working in a blockchain company where I am a part of the private blockchain team.

The work is usually stagnant with very small scale projects, mostly POCs. Some CICD pipelines, managing a kubernetes cluster and all.

Issue:
For the past 3 months, I’ve been preparing for the AWS Certified Solutions Architect certification using the course from KodeKloud. It is a 50 Hours course and it’s quite overwhelming.

I do have hands on knowledge working with EKS and EC2 but not much other services. I’ve been looking to move into a more cloud specific role for the past few months but I can’t muster the courage to apply.

What are the must have skills that are good enough for you to start applying for positions. Also, what is the depth of knowledge expected at this level ? Right now, I take my sweet time doing a deep study of the service, it’s use case and a small case implementation but that takes a lot of time and I’m skeptic if that is just pushing my certification away.

Any help would genuinely be appreciated.

Thank You

https://redd.it/1iba5ws
@r_devops

Future of the DevOps role, and perspectives of employment as one in your 60s

So, I'm currently in my 40s. I'm not a star, don't have a good diploma or stellar work experience, a selection of valuable certificates - I'm your Average Joe of IT industry. I've been in IT for about 20 years or so (though half of my experience is hardly relevant as of now). I like it, but not love it. It's okay I guess, and I like the pay (which is probably laughable to most of you, but I'm a resident of a 3rd world country working remotely, so it's more than enough for me).

I'm also one of those guys who won't retire in your 50s - I'm most likely will have to work up to my 70s, to pay my bills and have some savings (elderly don't enjoy that much social benefits around here)

So the least I could do is to ensure it will be some cozy and not so soul-wrenching office job. DevOps (my current role) would be fine. But with the latest turns of events, I'm kinda terrified and desperate. I'm starting to doubt I'll have much chances to stay in the industry starting my 50s (so in about 10 years).

First threat is ofc the rise of AI. My estimation is that it will take much more time for it to take my job than a job of a junior/middle software engineer (troubleshooting some crappy, non-standard environments full of issues over remote desktops while talking to a bunch of foreigners with their specific dialects of English isn't that easy to automate :) ), but it's still a very much threat and will shrink the job offers (especially taking into account some of those programmers who won't find a job will try to switch to parallel fields of expertise).

Another one is ageism, which is very much a thing and already rearing its ugly head when you turn 40s in that industry. Actually, I don't even know if it's possible to even keep a job in IT when you are, say, in your 60s - while not being some kind of super-star lead engineer or departments head. Like, just staying your average IT working bee, just with a lot of experience. I was wondering if somebody could share their thoughts on that one, as it worries me even more than AI taking my job does.

Not sure what my final question is. Perhaps I just wanted to learn thoughts of others on the matter? I'm too confused to come up with a better one, so hopefully it will spark a productive discussion on itself. Cheers!

https://redd.it/1ibbib1
@r_devops

A little confused about the career trajectory

I come format. Development background, i have been a we developer for the most part but i recently landed my first ever internship, the thing was I went in for the role of a web dev, but since I had some knowledge about AWS, the CTO offered me an opportunity to be a devOps intern and even offer me a full time position if I do well. I was given every resource to learn just enough to get started and i did and I have even started contributing to the company. I am actually happy and greatful for the opportunity, i am liking devOps a lot tbh. But, I read in this subreddit that devOps is more often a position offered to experienced people who eventually switch to it over the years and I was wondering if i would wanna switch organizations 1-2 years down the line, would anyone even hire me? Wouldn't more experienced guys be preferred over me every single time even if i meet the technical and analytical skill bar?

Any help and advice is very much appreciated!

https://redd.it/1ibd0k3
@r_devops