Advice and Resume Roast

Hello all, i would appreciate if you can all give me some advice. I am trying to break into Devops, Sysadmin or similar roles.

I have years of experience as a web developer (PHP, MEAN Stack) and managing Ubuntu web servers on platforms including AWS, but no formal DevOps experience.

To break into Devops, i acquired Comptia A+, AWS CCP and Sysops certifications recently. I have also made demos to show possible employers. Demos are mainly of Terraform and Ansible.

Resume (one page for ATS): https://drive.google.com/file/d/1eFTnJmbau

Demos: https://github.com/umarbkh/AWSdemos

I am not sure what else i can do other than certifications and demos, every job post requiring a senior experienced professional is very discouraging and i feel like i wasted my time and effort. I have applied to hundreds of postings on Linkedin and directly, not a single interview.

https://redd.it/1ikikc4
@r_devops

Is the CKA Certification Worth It?

I am a student pursuing engineering in AI and currently in my final year. I love working with servers, exploring different distributions, Linux, and IT-related technologies. I have been preparing for a DevOps role, and now I have secured an internship as a DevOps Engineer at a very small startup.

However, my boss suggested that I go for the CKA (Certified Kubernetes Administrator) certification. I realized that preparing for this certification will take almost six months, and it is quite expensive.

So, my question is: If I focus on the CKA certification instead of grinding DSA coding questions for a decent job, will it be worth it?

https://redd.it/1ikjk2c
@r_devops

Wanting to switch to Devops

Hello,

I’m 28 and currently working remotely as a Cloud Engineer. While the job pays decently, it doesn’t match the income I was accustomed to from contracting overseas, though I understand those numbers are harder to achieve in the U.S.

In my free time, I day trade, which brings in a solid side income. However, I feel like I’m not progressing in my career and want to transition into DevOps. I started self-studying Docker last week and have a beginner-level understanding of it so far.

I’d appreciate any insight and guidance on how to break into a DevOps role and what skills I should focus on learning.


https://redd.it/1ikjto8
@r_devops

I’m Writing DevOps Books – Ansible Done, Terraform Next! Looking for Proofreaders!

📕 Hey folks,

I've been deep into DevOps for years, and for the past six, I’ve been taking notes with the goal of writing an Ansible book.

I finally did it - The Tao of Ansible is out! It's a concise, \~100 page book with a clean, no-nonsense approach to learning Ansible. Plus, it has a pretty sexy cover.

You can check out its Reddit post here and grab a copy on Amazon here.

It’s designed so you can go through it in just a few days to a week and get a solid grasp of Ansible.

👉 Up next: The Tao of Terraform. I’m currently looking for proofreaders. Same style—straightforward, easy to read, and practical. If you’re interested, your name will be credited in the book. Just DM me with your GitHub username and a way to contact you so we can discuss further.

You can find its Reddit post here.

🙏🏽 If you decide to pick up a copy, you'll get a good-looking, useful book - and you’ll also be fueling my late-night writing sessions with some quality Arabica coffee.

Appreciate the support!

https://redd.it/1ikjn0g
@r_devops

CKA 2025 Exam changes - killer.sh

I scheduled my CKA for the end of the month, but read this week that the 2025 exam changes with come into effect on 18th Feb.

As such I’ve bought my exam date forward to next week to be tested on the old syllabus, which I’ve been studying against.

My question is around killer.sh. I already used one of my sessions.

Does anyone know if I activated the second killer.sh session after Feb 18th, when the new syllabus becomes into effect, the question pool would based on the new changes, or the I’d just get the same questions as the first session? 

I was thinking it might be a better use of the second session if I get the new questions, in the event that I fail and need to retake on the new syllabus.

https://redd.it/1ikkzoc
@r_devops

My open-source project makes bootable OS images from Docker Containers. Can this be valuable somehow?

I made an open-source project PockerISO a few years ago where I use Hashicorp's Packer to create bootable ISO images for Ubuntu, Debian, Alpine using Docker Containers.

Recently I bumped the versions to Alpine 3.21, Debian Bookworm and Ubuntu 24.04.

This was just a hobby project, so never intended it to do anything hardcore.

However, I do tend to note that the ISO images are lighter and don't trawl in may bloated software (snap from Ubuntu etc.).

I am aware of other projects that do something similar like linuxkit and maybe Flatcar too i.e., use containers to build ISO images.

Any opinions, feedbacks, suggestions on if it might be worth looking into it more or can I let it float in the ether of many Side-Project OS repos?

https://redd.it/1ikmnh4
@r_devops

How do you keep track of "inventory"?

Hello,

I am facing this problem again and again, in different companies with different teams.

How do you keep inventory of resources. For example what Kubernetes clusters are there, what is deployed on the said clusters, what versions are the tools on it(e.g. nginx ingress, argocd). What RDBMS are currently running for which project, what version are they, should they be updated any known CVEs and others of this fashion (pet service running on VMs is a broad category)

What I do is write this down in Confluence/Sharepoint generally including information about why the services is deployed, how can it be reached(IPs/DNS), notes about patching (incl. version, next patch time etc..) and links to other documents about the system(i.e. playbooks during incidents, compliance documents). But this whole thing has always costed me a lot of time.

Solutions like SnipeIT aren't very useful in this context at least for me.

https://redd.it/1iko0pp
@r_devops

which Project Should I Choose?

Hey everyone! I'm planning to start a new project and I'm torn between these two ideas:

1️⃣ A complete, secure, and automated Kubernetes platform with:
✅ GitOps (ArgoCD, Terraform, Helm)
✅ High availability (HA) and resilient storage (Ceph, Velero)
✅ Security-first approach (Vault, mTLS with Istio, strict RBAC)
✅ Observability stack (Prometheus, Grafana, Loki, Jaeger)
✅ Hybrid support (containers + KubeVirt for legacy VMs)

2️⃣ A DevSecOps-focused project for securing and optimizing microservices deployment across multi-cloud/multi-cluster setups:
✅ Security automation (SAST/DAST with Trivy, Snyk)
✅ Centralized observability (Prometheus, Grafana, Loki, Jaeger)
✅ Automated deployments (ArgoCD, Helm)
✅ Network security & policies (Calico, Cilium)
✅ Secure CI/CD & Canary deployments

I’m looking for something challenging yet practical, ideally open-source friendly. Which one do you think is more valuable? Or if you have any suggestions for a better idea, let me know! 😊

https://redd.it/1ikp2dd
@r_devops

About SSL certs in K8S

We are offloading SSL on ingress. Security team says that do not keep ssl certs in secrets . We are keeping certs in secrets for ingress.
In fact security team wants to put certificate nowhere just in memory

I thinks keeping certs in secret is best we can do

What do you guys think ? How are you managing certs ?
Is security team asking too much ?



https://redd.it/1ikq0os
@r_devops

Acquired by a company 10x bigger with a different cloud

We use GCP in my shop, with which I feel pretty familiar after several years of managing.

The acquiring company uses AWS, which I can fumble my way through resource-wise since there's a lot of similarities, but I'd rather not just sloppily learn on the job when I'm integrated into a new team that's been doing this for years. Obviously, ramp up time will be necessary. I just want to minimize it.

Are there are relevant certs, courses, or projects for learning AWS as an old hand at GCP?

Perhaps a more juicy question that's less google-able - any advice for merging two sets of SRE culture, tooling, etc. like I'm about to? We're probably going to adopt 90% of their practices into our product, but I hope we can preserve some of the good stuff we have (like Nix as our dev env/build system 🤞)

https://redd.it/1iks97o
@r_devops

hi guys, do you maybe use somekind of a ticket estimation tool?

Hi guys, do you maybe use a ticket estimation tool? Cause I remember using it when I was working as an python developer. But never used it in a devops role before.


Thanks,

Tom

https://redd.it/1ikskmo
@r_devops

How to reduce the cost of traffic from America?

I have a server in Germany on GCP with a large number of pages, everything that could be transferred to CDN from images to style files.



Google often bypasses our site and thus generates a lot of traffic, which is why the bill at the end of the month has risen quite a bit, about 30% and I would like to ask you about a possible loophole or something else



The only way I see so far is to buy a second similar server and place it in America and make it take the nearest server in DNS, thereby minimizing the cost of traffic, but maybe there is something else that I don’t know about, please tell me

https://redd.it/1ikuij2
@r_devops

CI/CD tool to extract SQL queries

Hello, I'm looking for a tool to integrate in a pipeline that would extract the SQL queries from files in certain folder to separate file.

I'm working with Salesforce and Apex langues, and queries are looking like that:

List<Account> accounts = [SELECT Id, Name, Category__c FROM Account WHERE Industry = :industryParam];


String query = 'SELECT ProjectId__c from Project__c', nameToSearch = 'pp2';
List<sObject> projectList = Database.query(query + ' WHERE Name__c = :nameToSearch');

It probably is doable with some complicated regexes, but I'm wondering if there are dedicated tools for it.




https://redd.it/1il5b4e
@r_devops

I have a 45 technical assignment + interview coming up for a devOps/are intern position. What could that technical assignment potentially be?


45 minute interview*

Responsibilities of the role are:

1. Contribute to our production infrastructure (AWS, Kubernetes, PostgreSQL databases, Terraform, Helm)

2. Help triage and fix high-risk security and privacy issues in infrastructure and application components

3. Help implement security enhancements to our SDLC. Think continuous security monitoring: static code analysis pre-deploy (iroh.js, snyk.io, etc.), post-deploy (Zap), binary authorization, package signature, Terraform (tfsec)

4. Improve our data repositories (db, warehouse, lake) posture: engine upgrade, zero-downtime migrations, privacy taggings.

They’d also like an ideal candidate to have with experience in any of AWS, Datadog, Github Actions, k8s, with bonus points for knowing any of Terraform, Python, GNU/Linux, Burp Suite, and as a DBA (PostgreSQL).


https://redd.it/1il8nrn
@r_devops

What’s the current state of internal facing runbooks for other business units?

I'm trying to find a product that does runbooks in a way that exposes them as little automation jobs that are neatly exposed to nontechnical internal people like customer support. The UX should be dog simple from the user POV. Navigate to a given runbook, fill in some details like maybe some text boxes/dropdowns with dynamic values, maybe upload a file, then hit run as the runbook does its thing. The tools I've most experienced are either limited in expressing those UI options or only give a very shallow "runbook" experience like expecting the user to supply terraform code themselves. It should go without saying that audit logs for everything are a must.

Is there anything out there like that? I would be over the moon for meta-runbooks (a runbook for batches of other runbooks). Thanks

https://redd.it/1il9tpj
@r_devops

Security scanning during CI/CD flows

Hello all!

In my organization we are keen to buy SaaS solution for security scanning of our code to catch up all problems with packages, code etc. I am not interested in code quality, i am interested in code security only.

I found solutions like:

\- Sonar Qube
\- Klocwork
\- Qodana
\- Data Dog Application Security
\- Prisma Cloud

Wanna try and compare security reports from all of these tools. Do you have any other recommendations? In my organization we are coding in .NET, Python, Terraform and Bicep. Over 2mln lines of code right now. Any advice of the tooling? To be honest, Sonar Qube looks most interesting (and i have some experience with it) but maybe they are some competitors on the market that covers security well?

https://redd.it/1il9qrx
@r_devops

Tech live vs traveling


Hey everyone,

I recently started working as a DevSecOps intern at a fintech company, and I’m really excited about diving deeper into the DevOps world. At the same time, I love traveling alone, meeting new people, and experiencing different cultures. I speak fluent English, Portuguese, and some Spanish, which makes it easier to connect with others.

Looking ahead, I want to balance my background in Computer Science with opportunities in the commercial world. Maybe something that allows me to work internationally while leveraging my technical skills.

For those of you with experience in DevOps or similar fields, do you have any recommendations? What paths should I explore if I want to combine tech, business, and international opportunities? I’d love to hear your insights!

Thanks!

https://redd.it/1ilcg2u
@r_devops

My first Kubernetes Operator: Kubeconfig Operator


I'm trying to break from DevOps into jobs that involve more development. Currently, operator development seems like the obvious thing.

Recently, I read a post by the Reddit engineer u/keepingdatareal about their new SDK to build operators: [Achilles SDK](https://www.reddit.com/r/RedditEng/comments/1gp11ui/open_source_of_achilles_sdk/). It allows you to specify Kubernetes operators as finite state machines. Pretty neat!

So I decided to use it to build a [Kubeconfig Operator.](https://github.com/klaudworks/kubeconfig-operator) It is useful for anybody who quickly wants to hand out limited access to a cluster without having OIDC in place. I also like to create a "daily-ops" kubeconfig to protect myself from accidental destructive operations. It usually has readonly permissions + deleting pods + creating/deleting portforwards.

https://preview.redd.it/ax5miv42q3ie1.png?width=1954&format=png&auto=webp&s=53e3fdfbf6836bf9ffa65167b3726f79efda8e4c

Unfortunately, I can just add a single image but check out the repo's [README.md](https://github.com/klaudworks/kubeconfig-operator) to see a graphic of the operator's behavior specified as a FSM. Here is a sample Kubeconfig manifest:

apiVersion:
kind: Kubeconfig
metadata:
name: restricted-access
spec:
clusterName: local-kind-cluster
# specify external endpoint to your kubernetes API.
# You can copy this from your other kubeconfig.
server: https://127.0.0.1:52856
expirationTTL: 365d
clusterPermissions:
rules:
- apiGroups:
- ""
resources:
- namespaces
verbs:
- get
- list
- watch
namespacedPermissions:
- namespace: default
rules:
- apiGroups:
- ""
resources:
- configmaps
verbs:
- '*'
- namespace: kube-system
rules:
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
- list
- watchklaud.works/v1alpha1

If you like the operator I'd be happy about a Github star ⭐️. The core logic is already fully covered by tests. So feel free to use it in production. Should any issue arise, just open a Github issue or text me here and I'll fix it.

https://redd.it/1ild9uh
@r_devops

Best course\practices for devops beginner?

Hi guys, im a CS BSc graduate, and i've decided that development, tho is fun, is not AS fun as deployment and i rather change my direction to the Devops proffesion. Since the market in Israel, where i live, is really tough for juniors, so i've decided to enter a program that will train me in some sort of a bootcamp, then in the middle of it, they are applying me to starting devops positions (and before u guys say its a scam and i wont find a job, you should know that they get their profit from my salaries, so no job = no money for them, which means its basicly in thier intrests).

So in order to prepare for this 6 months bootcamp, i'd like to start and do like a udemy course or some other training, what would you recommand me to do? i have lik a month and a half and alot of time to spend, so dont spare the hard part, im here to learn!

thanks alot and sry if i was talking too much, cheers and have a great week!

https://redd.it/1ilcce7
@r_devops

Cloudtrail logs view

What are the ways do you view Centralized CloudTrail logs in S3 bucket?

We have bunch of AWS accounts and we have enabled Centralized CloudTrail and they are shipped to S3 bucket.
How you guys check Cloudtrail logs shipped to S3 bucket.
I know We can query via Athena , but its seems taking lot of time . Any way it can be optimized ?

or any opensource tools you use



https://redd.it/1ilfc4s
@r_devops

Has anyone used Antimetal for cost analysis

My boss is pushing it a bit so I've booked in a demo. I was wondering if anyone here has tried it successfully or otherwise. To me it doesn't seem like it provides much more than the basic cost analysis tools in AWS.

https://redd.it/1ili0s7
@r_devops