How do I deal with an annoying, entitled coworker who won’t leave me alone making my job hell?

Hello Everyone,

I’m a DevOps engineer, and I have this coworker who’s driving me insane. He’s lazy, clueless, entitled, and somehow managed to land this job by lying about his skills. He didn’t even study CS—he just jumped into tech because he couldn’t find a job in his original field.

# Here’s why he’s unbearable:

Acts like he knows everything but actually knows nothing – He argues about tech he clearly doesn’t understand, contributes almost nothing when we get tasks, and instead of actually working, he just asks me to share my screen so he can "learn" while I do everything.
Cheap and hypocritical – Constantly shits on my certifications, saying stuff like "certs are useless," "why do you even study for those?" or "how many certs do you need?"—yet he spends his time desperately trying to get free vouchers instead of actually learning.
Nosy and gossipy – He constantly talks about other people’s business, telling me what’s going on between seniors, managers, and other teams. It’s unprofessional and just plain annoying.
Brings up religion, politics, and other cringe topics – He thinks he's funny, but he's not. I have zero issues with anyone else in my team or even other teams, but this guy just won’t shut up about irrelevant stuff.
Procrastinates and leeches off me – He acts like he’s doing me a favor by doing his own job – He pretends that his assigned tasks are somehow helping me, even though they’re his responsibility, not mine. Then, he uses that as an excuse to ask for my help whenever he’s busy wasting time on irrelevant crap. I don’t get paid to do his job for him. To make it worse, he constantly lies about what he’s done, taking credit for things he barely contributed to or didn’t even work on.
Doesn’t take a hint – I stay polite and professional, yet he constantly complains that I’m "too strict" with him, even though I treat him like any other coworker.

I genuinely enjoy my job, have great relationships with my seniors and other departments, and help out wherever I can. But this one guy is making my work life miserable.

I don’t want to babysit him, and I don’t want to cause drama, but he’s seriously pushing me to my limits. The job market isn’t great, so I can’t just leave right now.

# How do I get him to back off without making my work life hell?

Has anyone dealt with a coworker like this before? Would appreciate any advice on how to handle this situation.

https://redd.it/1j49b5v
@r_devops

Failing in devops role

I have over 10 years of experience. Started a application consultant then moved to cloud infra migration projects. Due to the demand of upskilling and sudden shift i learnt k8s, terraform, devops by myself. Got deployed to a devops project. But here everything looks like a mess or i feel like am unable to keep up.

Random tasks got assigned, for eg, need to do a modifications for a cloud service which am not familiar,when asked the team about how the workflow of the services, nobody knows it. The guy who implemented it had left the team is the reply i got. Another one is related to some issue in the CI which i don't know hot to debug it. The team am working is not corporative. They will assure you that we will help each other but the next day they will question us only like why it got delayed.

I feel like i don't have the skill, i am thinking of moving to a cloud architect role or customer sucess role as I had good background in cloud transition projects.

https://redd.it/1j4ausq
@r_devops

Automating VM creation

Hi,

I want to use Vagrant with KVM/QEMU to automatically create VMs with different hardawre emulated and open a browser on them when they boot. I would like to not have to go through the system installation every single time a new VM is set up. What would be the correct way to do it? I have come across Veewee and it looks like it can take any iso file for a template, would it work if i were to set up let's say debian 12 manually first and convert it to an iso file? I am also worried about internet connection since I don't think a new IP would be assigned from KVM's DHCP when i bring up a second VM.

https://redd.it/1j48i5b
@r_devops

Deploy to VPS without SSH

I am using Terraform and Docker Swarm to deploy my application stack on a VPS.

I'm looking for a way of doing that from my pipeline, but I don't have an SSH key as the server might not exist yet or the SSH (private) key changed since the last deployment.

Is there a way of using Terraform ONLY to execute code remotely without having it create a whole new server or is there another way in which I can deploy my application stack from GitHub Actions without knowing the servers SSH credentials?

The trigger for a deployment to the test environment is a merge to master, by the way. I was thinking something that triggers a `docker stack deploy` from my GitHub action, but I cannot find anything that triggers this remotely.

PS: I'm not a fan of pull-based approaches like Watchtower polling for the newest image. I prefer deploying from my actions when I merge :)

https://redd.it/1j4e1l3
@r_devops

What are some of the most advanced things you have learned in the last 5 years?

What are some of the most advanced things you have learned in the last 5 years? I am interested to learn what I might be able to learn on my own in the coming years. Feel free to share.

https://redd.it/1j4gjb8
@r_devops

Get your Free AWS Practitioner & Assosiation Certifications Exams

For those who still don't know...

How to Earn a Free AWS Certification:

1 Join AWS Educate: Sign up for AWS Educate => AWS Educate

2 Earn an AWS Educate Badge: Complete a course to earn an official AWS badge. Fastest option: Introduction to Generative AI (1 hour).

3 Get Invited to AWS Emerging Talent Community ( AWS ETC): Once you earn your badge, you'll get an email confirmation and an invite to AWS ETC

4 Earn Points to Unlock Your Free Exam Voucher: Earn points by completing activities like watching tutorials and quizzes.

4,500 points = Foundational certification
5,200 points = Associate-level certification

-> You'll Earn about 2,000 points on Day 1 and 360 points every week.

5 Complete AWS Exam Prep:
Finish an AWS Skill Builder course and pass the practice exam.

6 Claim Your Free AWS Exam Voucher!
Use your points to unlock a free certification voucher.

Time required: 45–60 days, 10–15 minutes per day.

https://redd.it/1j4jfsn
@r_devops

What are the small but useful CI/CD improvements you've made?

What are the small but useful CI/CD improvements you've made? Sometimes, I want to make a small change to improve the workflow, so I am trying to do the little things that can make a big difference instead of wasting time doing something drastic that will take a long time and may break things.

https://redd.it/1j4jmza
@r_devops

Am I on the right track?

Ive made it my goal since last year to try to break into the devops and cloud space( im a networkk guy by trade but ive grown bored of it). At work ive been trying to get involved with some more cloud related projects but its been hard since theres a lot of chefs in the kitchen.. Here's some of the things i've implemented:

1. Created a Lambda function that keeps track of all ec2 instances in all accounts (over 20)and stores them a csv file in an s3 bucket.includes info such as assocated tags, cpu, state, etc..

2. Deployed Network Infrastructure via Terraform(vpc, network sdwan appliance, tgw, route tables , etcc)

3. Lambda function using python that exports all findings in security hub and uploads them to customer s3 tenant account.

4. Created a CI/CD for each lambda function. deploys all of the infrastructure needed as well using terraform.

Im planning on creating some lambda functions that remediate certain security findings as well such as automatically setting up tag with iam name on any ec2 instance that is spun up.

Any ideas on what else i should be trying to do ? Im also actively studying for the RHCSA certification and knocked out the AWS SAA cert late 2024.

https://redd.it/1j4kaox
@r_devops

Anyone here run a business?

Im working on starting a type of service model where I just provide terraform to build out the infrx required for teams. mainly targeting small to mid-sized consultancies and IT departments with.


Curious on
A. Is this something that would be useful
B. how to find clients

Im currently posting on youtube and trying to drive traffic to my website (not going to link as I dont want this to be perceived as promotional)

https://redd.it/1j4jymm
@r_devops

Does DevOps engineer write application code?

Hi, I'm a software developer with around 4 years of working experience. Recently, I was trying to get a DevOps role because I like the cloud and managing the deployment process, but at the same time I don't want to quit writing application code because I want to gain more experience in developing apps and managing databases etc...
So do you think that DevOps roles are suitable in my case or should I just focus on backend roles?

https://redd.it/1j4of6z
@r_devops

How to Import an Existing Kubernetes Cluster into Rancher | Step-by-Step Guide

Already running a Kubernetes cluster? Learn how to import it into Rancher for centralized management and better visibility! Whether your cluster is on Minikube, the cloud, or on-prem, this step-by-step guide will walk you through the entire process.

🔹 What You'll Learn:
✅ How to verify your Kubernetes cluster before importing
✅ How to use Rancher’s import feature
✅ How to deploy and test a workload after importing

Watch video at https://youtu.be/agiHe8Lrw9k

https://redd.it/1j4qi6i
@r_devops

Stuck at SSH in 'vagrant up' using Vagrantfile. Any clue, anybody? (I am setting up the cluster by following Kubernetes the hard way by Mumshad).

Thank you in advance

https://redd.it/1j4tw0z
@r_devops

Rough/Ballpark Cost Estimate for the following?

I want to make a proof of concept (<5 users):

* 2 cheap AWS pods for a React Frontend (kubernetes)
* 2 cheap AWS pods for a Spring Backend (kubernetes)
* Any cheap AWS SQL database
* A way to deploy to each via a Jenkins pipeline
* An Okta setup for <5 users

The goal is to have this semi boiler plate for future projects - but want to give my boss a rough cost estimate before starting

https://redd.it/1j4w6pe
@r_devops

A microblog on abstraction debt in infrastructure as code

This article serves as the starting point for a microblog series exploring the challenges of managing Infrastructure-as-Code (IaC) at scale. The reflections here are solely my own views, based on my experiences and the lessons learned (sometimes the hard way) when building and maintaining large-scale infrastructure. This first entry lays the groundwork for the complexities, trade-offs, and regrets that come with designing IaC solutions.

https://rosesecurity.dev/blog/2025/03/06/the-abstraction-debt-in-iac

https://redd.it/1j4yker
@r_devops

PSA: microdnf needs -y in ubi9 and above

Fuck, fuckety fuck Fuck! FUCK
I spent an entire afternoon trying to find out why the fuck my build pipeline timed out and chased so many red herrings—looking at auth and fucking firewalls and what have you.

All because micro-fucking-dnf was waiting for "Is this ok y/N:" and that piece of shit Azure DevOps decided to not show that but instead

> ##errorThe operation will be canceled. The next steps may not contain expected logs.
> ##errorThe operation was canceled.

Fuck!

https://redd.it/1j4zg21
@r_devops

Configuration antipattern?

I work in a infrastructure team and am currently working on a project where a dev team has built out a load of pipeline templates and infra templates for previous things they deploy. We are attempting to reuse these where possible.

However, when I came to use these there's pretty much no documentation and they are stored across a few different repos for different aspects.

The main frustration is that everything is parameter/configuration driven. You are required to plug endless config files into stuff for example the resource names, permissions to be applied, entra ID details for app registrations and tons of other random garbage all over the place.

My question is, is this amount of configuration manually input instead of being spat out my infra deployments an antipattern in some way? The amount of manual work to get a working deployment is insane.

https://redd.it/1j4z4he
@r_devops

Gitlab runner returns - "Error: failed to resolve feat-interim-xxxxxxxx: not found". Any ideas?

Hi there I have a pipeline with an image being built with Kaniko (I know it isnt being currently updated and supported) and when I use the "oras attach" command then I get the above-mentioned error. I am just trying to attach some provenance and attestation to the image. The runner is expecting registry/image:tag, which is defined in the variable I used, but it wont resolve. Any ideas on what might be happening here?

https://redd.it/1j52p0m
@r_devops

Containers via Powershell

Hello Devops Community, Just stuck my head with this thing , Here me out

We're working on centralizing our application logs and traces using OpenTelemetry and have decided to deploy a dedicated OpenTelemetry container app within our Azure Container Apps environment. We're aiming for an Infrastructure-as-Code (IaC) approach for this deployment and have chosen PowerShell for now, primarily due to our existing familiarity and the recent changes to Terraform's licensing. We're not yet proficient in Bicep.

Our deployment plan involves the following steps:

1. **Pushing the OpenTelemetry image:** We'll push our custom OpenTelemetry image to Azure Container Registry (ACR).
2. **Creating the Container App:** We'll create the Azure Container App resource.
3. **Configuration via Azure File Share:** Our OpenTelemetry container requires configuration files (config maps). We plan to store these in an Azure File Share within a Storage Account and mount this as a volume to the container app.
4. **Post-Creation Volume Mount:** Due to limitations in mounting persistent volumes during initial Container App creation, we intend to:
* Download the generated Container App YAML configuration.
* Modify the YAML to include the volume mount referencing the Azure File Share.
* Update the Container App with the modified YAML.

We can do via Azure CLI commands to accomplish this, but we're exploring whether this workflow is feasible or If PowerShell is better ?

The problem with powershell is we are not sure how to pass entire container proerties with all ingress, mount, config mapping, etc

Do you have any suggestion or resource for this task ? Meanwhile I will share my dummy script for your review

Note : I m open to criticism as I m new to Devops side of things and If this is not right sub I can move this to another sub

#Use this CLI code if we dont want dapr
az containerapp configmap create `
--name $configMapName `
--resource-group $resourceGroupName `
--environment $environmentName `
--secrets "otel-collector-config=$collectorConfig"
​
# Define Container App Properties
$containerAppProperties = @{
Location = $location
ManagedEnvironmentId = (Get-AzContainerAppManagedEnvironment -ResourceGroupName $resourceGroupName -Name $environmentName).Id
Configuration = @{
Ingress = @{
External = $false
TargetPort = $targetPort
}
Registries = @()
}
Template = @{
Containers = @(
@{
Name = $containerAppName
Image = $containerImage
Ports = @(
@{
ContainerPort = $targetPort
Protocol = "TCP"
}
)
Env = @(
@{
Name = "key"
SecretRef = $secretName # Reference to the secret in Key Vault
}
)
}
)
}
}
​
# Create Container App
try {
New-AzContainerApp -ResourceGroupName $resourceGroupName -Name $containerAppName -Property $containerAppProperties
Write-Host "OpenTelemetry Collector Container App '$containerAppName' created successfully."
}
catch {
Write-Error "Failed to create OpenTelemetry Collector Container App: $($_.Exception.Message)"
}




https://redd.it/1j53zf0
@r_devops

how do you actually stay on top of configuration drift?

so i've been thinking a lot about config drift lately, especially in fast-moving environments where infrastructure changes constantly. even with IaC and automated policies, things always seem to slip through... manual tweaks, unexpected dependencies, or just plain human error.

i came across this article that breaks down some solid strategies for controlling drift, but i'm curious - what’s actually worked for you in practice? do you rely more on automation, strict policies, or just accept a certain level of drift as inevitable?

would love to hear how different teams approach this.

https://redd.it/1j56676
@r_devops

Opsgenie is shutting down! Here are 5 open source alternatives to switch to

Hi,

In their recent blog post, Atlassian announced they'll be shutting down Opsgenie on June 4th, 2025. There's currently a heated discussion about this on Hacker News for anyone interested.

If you're affected by this change, I've compiled some of the best open-source alternatives to Opsgenie:

https://openalternative.co/alternatives/opsgenie

This is by no means a complete list, so if you know of any solid alternatives that aren't included, please let me know.

Thanks!

https://redd.it/1j572gh
@r_devops

Teleport Application | Hashicorp Vault UI | Expose issues

Hi!

I'm trying to use teleport to expose the hashicorp vault ui we have on our Kubernetes cluster.

I'm receiving a blank page with 500 errors when I try to access them. This is my kube-agent config


...
app_service:
enabled: true
apps:
- name: vault-dev
uri: https://develop-vault-server-active.vault.svc.cluster.local:8200
labels:
env: develop
service: vault
rewrite:
headers:
- 'Host: develop-vault-server-active.vault.svc.cluster.local:8200'
...

Kube-agent logs


2025-03-05T11:19:26.510Z INFO [KUBERNETE] Starting Kube service via proxy reverse tunnel. pid:6.1 service/kubernetes.go:257
2025-03-05T11:19:26.575Z INFO [APP:SERVI] Cache "apps" first init succeeded. cache/cache.go:1152
2025-03-05T11:19:29.618Z INFO [APP:SERVI] All applications successfully started. pid:6.1 service/service.go:6224
2025-03-05T11:19:29.618Z INFO [PROC:1] The new service has started successfully. Starting syncing rotation status. pid:6.1 max_retry_period:4m16s service/connect.go:642
2025-03-05T11:22:09.831Z INFO emitting audit event event_type:app.session.chunk fields:map[app_name:vault-dev app_public_addr:vault.dev.teleport.xxx.co app_uri: cluster_name:teleport.xxx.co code:T2008I ei:6.65831065482e+11 event:app.session.chunk namespace:default private_key_policy:none server_id:21235eb8-04a9-400d-85a1-c58792a0f5f8 server_version:17.2.2 session_chunk_id:60b98e63-6fa4-4864-9293-e5a9e35eb0c3 sid:8671e5e0d3b649b50dc0d77860af90de88912c7d4b5addeff76f6599e740ed64 time:2025-03-05T11:22:09.831Z trace.component:audit uid:8396daf7-5fd3-44ae-b465-10a3b4e62382 user:username user_kind:1] events/emitter.go:287
2025-03-05T11:22:09.842Z INFO [APP:SERVI] Round trip: GET , code: 307, duration: 10.831033ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.888Z INFO emitting audit event event_type:app.session.chunk fields:map[app_name:vault-dev app_public_addr:vault.dev.teleport.xxx.co app_uri: cluster_name:teleport.xxx.co code:T2008I ei:6.0885849394e+10 event:app.session.chunk namespace:default private_key_policy:none server_id:21235eb8-04a9-400d-85a1-c58792a0f5f8 server_version:17.2.2 session_chunk_id:9862c82f-32e5-4c4a-87cd-dd4648dd3c38 sid:063e3000708b3f2fdebe6610a068ef36daf56cf5103e63d3df7689ce3e8e43f2 time:2025-03-05T11:22:09.886Z trace.component:audit uid:b8afdde3-43ad-4cb8-9d93-a3d234d2d169 user:username user_kind:1] events/emitter.go:287
2025-03-05T11:22:09.902Z INFO [APP:SERVI] Round trip: GET , code: 307, duration: 16.153207ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.928Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 4.198207ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.994Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.837296ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.228Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.695592ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.238Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.327523ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.241Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 3.076735ms tls:version: 304, tls:resume:false, tls:csuite:1301,