What are some of the most advanced things you have learned in the last 5 years?

What are some of the most advanced things you have learned in the last 5 years? I am interested to learn what I might be able to learn on my own in the coming years. Feel free to share.

https://redd.it/1j4gjb8
@r_devops

Get your Free AWS Practitioner & Assosiation Certifications Exams

For those who still don't know...

How to Earn a Free AWS Certification:

1 Join AWS Educate: Sign up for AWS Educate => AWS Educate

2 Earn an AWS Educate Badge: Complete a course to earn an official AWS badge. Fastest option: Introduction to Generative AI (1 hour).

3 Get Invited to AWS Emerging Talent Community ( AWS ETC): Once you earn your badge, you'll get an email confirmation and an invite to AWS ETC

4 Earn Points to Unlock Your Free Exam Voucher: Earn points by completing activities like watching tutorials and quizzes.

4,500 points = Foundational certification
5,200 points = Associate-level certification

-> You'll Earn about 2,000 points on Day 1 and 360 points every week.

5 Complete AWS Exam Prep:
Finish an AWS Skill Builder course and pass the practice exam.

6 Claim Your Free AWS Exam Voucher!
Use your points to unlock a free certification voucher.

Time required: 45–60 days, 10–15 minutes per day.

https://redd.it/1j4jfsn
@r_devops

What are the small but useful CI/CD improvements you've made?

What are the small but useful CI/CD improvements you've made? Sometimes, I want to make a small change to improve the workflow, so I am trying to do the little things that can make a big difference instead of wasting time doing something drastic that will take a long time and may break things.

https://redd.it/1j4jmza
@r_devops

Am I on the right track?

Ive made it my goal since last year to try to break into the devops and cloud space( im a networkk guy by trade but ive grown bored of it). At work ive been trying to get involved with some more cloud related projects but its been hard since theres a lot of chefs in the kitchen.. Here's some of the things i've implemented:

1. Created a Lambda function that keeps track of all ec2 instances in all accounts (over 20)and stores them a csv file in an s3 bucket.includes info such as assocated tags, cpu, state, etc..

2. Deployed Network Infrastructure via Terraform(vpc, network sdwan appliance, tgw, route tables , etcc)

3. Lambda function using python that exports all findings in security hub and uploads them to customer s3 tenant account.

4. Created a CI/CD for each lambda function. deploys all of the infrastructure needed as well using terraform.

Im planning on creating some lambda functions that remediate certain security findings as well such as automatically setting up tag with iam name on any ec2 instance that is spun up.

Any ideas on what else i should be trying to do ? Im also actively studying for the RHCSA certification and knocked out the AWS SAA cert late 2024.

https://redd.it/1j4kaox
@r_devops

Anyone here run a business?

Im working on starting a type of service model where I just provide terraform to build out the infrx required for teams. mainly targeting small to mid-sized consultancies and IT departments with.


Curious on
A. Is this something that would be useful
B. how to find clients

Im currently posting on youtube and trying to drive traffic to my website (not going to link as I dont want this to be perceived as promotional)

https://redd.it/1j4jymm
@r_devops

Does DevOps engineer write application code?

Hi, I'm a software developer with around 4 years of working experience. Recently, I was trying to get a DevOps role because I like the cloud and managing the deployment process, but at the same time I don't want to quit writing application code because I want to gain more experience in developing apps and managing databases etc...
So do you think that DevOps roles are suitable in my case or should I just focus on backend roles?

https://redd.it/1j4of6z
@r_devops

How to Import an Existing Kubernetes Cluster into Rancher | Step-by-Step Guide

Already running a Kubernetes cluster? Learn how to import it into Rancher for centralized management and better visibility! Whether your cluster is on Minikube, the cloud, or on-prem, this step-by-step guide will walk you through the entire process.

🔹 What You'll Learn:
✅ How to verify your Kubernetes cluster before importing
✅ How to use Rancher’s import feature
✅ How to deploy and test a workload after importing

Watch video at https://youtu.be/agiHe8Lrw9k

https://redd.it/1j4qi6i
@r_devops

Stuck at SSH in 'vagrant up' using Vagrantfile. Any clue, anybody? (I am setting up the cluster by following Kubernetes the hard way by Mumshad).

Thank you in advance

https://redd.it/1j4tw0z
@r_devops

Rough/Ballpark Cost Estimate for the following?

I want to make a proof of concept (<5 users):

* 2 cheap AWS pods for a React Frontend (kubernetes)
* 2 cheap AWS pods for a Spring Backend (kubernetes)
* Any cheap AWS SQL database
* A way to deploy to each via a Jenkins pipeline
* An Okta setup for <5 users

The goal is to have this semi boiler plate for future projects - but want to give my boss a rough cost estimate before starting

https://redd.it/1j4w6pe
@r_devops

A microblog on abstraction debt in infrastructure as code

This article serves as the starting point for a microblog series exploring the challenges of managing Infrastructure-as-Code (IaC) at scale. The reflections here are solely my own views, based on my experiences and the lessons learned (sometimes the hard way) when building and maintaining large-scale infrastructure. This first entry lays the groundwork for the complexities, trade-offs, and regrets that come with designing IaC solutions.

https://rosesecurity.dev/blog/2025/03/06/the-abstraction-debt-in-iac

https://redd.it/1j4yker
@r_devops

PSA: microdnf needs -y in ubi9 and above

Fuck, fuckety fuck Fuck! FUCK
I spent an entire afternoon trying to find out why the fuck my build pipeline timed out and chased so many red herrings—looking at auth and fucking firewalls and what have you.

All because micro-fucking-dnf was waiting for "Is this ok y/N:" and that piece of shit Azure DevOps decided to not show that but instead

> ##errorThe operation will be canceled. The next steps may not contain expected logs.
> ##errorThe operation was canceled.

Fuck!

https://redd.it/1j4zg21
@r_devops

Configuration antipattern?

I work in a infrastructure team and am currently working on a project where a dev team has built out a load of pipeline templates and infra templates for previous things they deploy. We are attempting to reuse these where possible.

However, when I came to use these there's pretty much no documentation and they are stored across a few different repos for different aspects.

The main frustration is that everything is parameter/configuration driven. You are required to plug endless config files into stuff for example the resource names, permissions to be applied, entra ID details for app registrations and tons of other random garbage all over the place.

My question is, is this amount of configuration manually input instead of being spat out my infra deployments an antipattern in some way? The amount of manual work to get a working deployment is insane.

https://redd.it/1j4z4he
@r_devops

Gitlab runner returns - "Error: failed to resolve feat-interim-xxxxxxxx: not found". Any ideas?

Hi there I have a pipeline with an image being built with Kaniko (I know it isnt being currently updated and supported) and when I use the "oras attach" command then I get the above-mentioned error. I am just trying to attach some provenance and attestation to the image. The runner is expecting registry/image:tag, which is defined in the variable I used, but it wont resolve. Any ideas on what might be happening here?

https://redd.it/1j52p0m
@r_devops

Containers via Powershell

Hello Devops Community, Just stuck my head with this thing , Here me out

We're working on centralizing our application logs and traces using OpenTelemetry and have decided to deploy a dedicated OpenTelemetry container app within our Azure Container Apps environment. We're aiming for an Infrastructure-as-Code (IaC) approach for this deployment and have chosen PowerShell for now, primarily due to our existing familiarity and the recent changes to Terraform's licensing. We're not yet proficient in Bicep.

Our deployment plan involves the following steps:

1. **Pushing the OpenTelemetry image:** We'll push our custom OpenTelemetry image to Azure Container Registry (ACR).
2. **Creating the Container App:** We'll create the Azure Container App resource.
3. **Configuration via Azure File Share:** Our OpenTelemetry container requires configuration files (config maps). We plan to store these in an Azure File Share within a Storage Account and mount this as a volume to the container app.
4. **Post-Creation Volume Mount:** Due to limitations in mounting persistent volumes during initial Container App creation, we intend to:
* Download the generated Container App YAML configuration.
* Modify the YAML to include the volume mount referencing the Azure File Share.
* Update the Container App with the modified YAML.

We can do via Azure CLI commands to accomplish this, but we're exploring whether this workflow is feasible or If PowerShell is better ?

The problem with powershell is we are not sure how to pass entire container proerties with all ingress, mount, config mapping, etc

Do you have any suggestion or resource for this task ? Meanwhile I will share my dummy script for your review

Note : I m open to criticism as I m new to Devops side of things and If this is not right sub I can move this to another sub

#Use this CLI code if we dont want dapr
az containerapp configmap create `
--name $configMapName `
--resource-group $resourceGroupName `
--environment $environmentName `
--secrets "otel-collector-config=$collectorConfig"
​
# Define Container App Properties
$containerAppProperties = @{
Location = $location
ManagedEnvironmentId = (Get-AzContainerAppManagedEnvironment -ResourceGroupName $resourceGroupName -Name $environmentName).Id
Configuration = @{
Ingress = @{
External = $false
TargetPort = $targetPort
}
Registries = @()
}
Template = @{
Containers = @(
@{
Name = $containerAppName
Image = $containerImage
Ports = @(
@{
ContainerPort = $targetPort
Protocol = "TCP"
}
)
Env = @(
@{
Name = "key"
SecretRef = $secretName # Reference to the secret in Key Vault
}
)
}
)
}
}
​
# Create Container App
try {
New-AzContainerApp -ResourceGroupName $resourceGroupName -Name $containerAppName -Property $containerAppProperties
Write-Host "OpenTelemetry Collector Container App '$containerAppName' created successfully."
}
catch {
Write-Error "Failed to create OpenTelemetry Collector Container App: $($_.Exception.Message)"
}




https://redd.it/1j53zf0
@r_devops

how do you actually stay on top of configuration drift?

so i've been thinking a lot about config drift lately, especially in fast-moving environments where infrastructure changes constantly. even with IaC and automated policies, things always seem to slip through... manual tweaks, unexpected dependencies, or just plain human error.

i came across this article that breaks down some solid strategies for controlling drift, but i'm curious - what’s actually worked for you in practice? do you rely more on automation, strict policies, or just accept a certain level of drift as inevitable?

would love to hear how different teams approach this.

https://redd.it/1j56676
@r_devops

Opsgenie is shutting down! Here are 5 open source alternatives to switch to

Hi,

In their recent blog post, Atlassian announced they'll be shutting down Opsgenie on June 4th, 2025. There's currently a heated discussion about this on Hacker News for anyone interested.

If you're affected by this change, I've compiled some of the best open-source alternatives to Opsgenie:

https://openalternative.co/alternatives/opsgenie

This is by no means a complete list, so if you know of any solid alternatives that aren't included, please let me know.

Thanks!

https://redd.it/1j572gh
@r_devops

Teleport Application | Hashicorp Vault UI | Expose issues

Hi!

I'm trying to use teleport to expose the hashicorp vault ui we have on our Kubernetes cluster.

I'm receiving a blank page with 500 errors when I try to access them. This is my kube-agent config


...
app_service:
enabled: true
apps:
- name: vault-dev
uri: https://develop-vault-server-active.vault.svc.cluster.local:8200
labels:
env: develop
service: vault
rewrite:
headers:
- 'Host: develop-vault-server-active.vault.svc.cluster.local:8200'
...

Kube-agent logs


2025-03-05T11:19:26.510Z INFO [KUBERNETE] Starting Kube service via proxy reverse tunnel. pid:6.1 service/kubernetes.go:257
2025-03-05T11:19:26.575Z INFO [APP:SERVI] Cache "apps" first init succeeded. cache/cache.go:1152
2025-03-05T11:19:29.618Z INFO [APP:SERVI] All applications successfully started. pid:6.1 service/service.go:6224
2025-03-05T11:19:29.618Z INFO [PROC:1] The new service has started successfully. Starting syncing rotation status. pid:6.1 max_retry_period:4m16s service/connect.go:642
2025-03-05T11:22:09.831Z INFO emitting audit event event_type:app.session.chunk fields:map[app_name:vault-dev app_public_addr:vault.dev.teleport.xxx.co app_uri: cluster_name:teleport.xxx.co code:T2008I ei:6.65831065482e+11 event:app.session.chunk namespace:default private_key_policy:none server_id:21235eb8-04a9-400d-85a1-c58792a0f5f8 server_version:17.2.2 session_chunk_id:60b98e63-6fa4-4864-9293-e5a9e35eb0c3 sid:8671e5e0d3b649b50dc0d77860af90de88912c7d4b5addeff76f6599e740ed64 time:2025-03-05T11:22:09.831Z trace.component:audit uid:8396daf7-5fd3-44ae-b465-10a3b4e62382 user:username user_kind:1] events/emitter.go:287
2025-03-05T11:22:09.842Z INFO [APP:SERVI] Round trip: GET , code: 307, duration: 10.831033ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.888Z INFO emitting audit event event_type:app.session.chunk fields:map[app_name:vault-dev app_public_addr:vault.dev.teleport.xxx.co app_uri: cluster_name:teleport.xxx.co code:T2008I ei:6.0885849394e+10 event:app.session.chunk namespace:default private_key_policy:none server_id:21235eb8-04a9-400d-85a1-c58792a0f5f8 server_version:17.2.2 session_chunk_id:9862c82f-32e5-4c4a-87cd-dd4648dd3c38 sid:063e3000708b3f2fdebe6610a068ef36daf56cf5103e63d3df7689ce3e8e43f2 time:2025-03-05T11:22:09.886Z trace.component:audit uid:b8afdde3-43ad-4cb8-9d93-a3d234d2d169 user:username user_kind:1] events/emitter.go:287
2025-03-05T11:22:09.902Z INFO [APP:SERVI] Round trip: GET , code: 307, duration: 16.153207ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.928Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 4.198207ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.994Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.837296ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.228Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.695592ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.238Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.327523ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.241Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 3.076735ms tls:version: 304, tls:resume:false, tls:csuite:1301,

tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223https://develop-vault-server-active.vault.svc:8200https://develop-vault-server-active.vault.svc:8200/favicon.icohttps://develop-vault-server-active.vault.svc:8200https://develop-vault-server-active.vault.svc:8200/https://develop-vault-server-active.vault.svc:8200/ui/https://develop-vault-server-active.vault.svc:8200/ui/https://develop-vault-server-active.vault.svc:8200/ui/assets/vendor-d7bcb4a6a4344380e4c2303094d4ca7d.csshttps://develop-vault-server-active.vault.svc:8200/ui/assets/chunk.143.e91479deff7823988269.csshttps://develop-vault-server-active.vault.svc:8200/ui/assets/vault-83d1a3f61679fd041c567318ad68c607.css

Is someone already exposed the hashicorp vault ui with teleport?

https://redd.it/1j592h8
@r_devops

While executing "vagrant up", I am encountering the follow error. Would be thankful if you please guide me on this. Thank you in advance.

==> controlplane: Setting hostname...

==> controlplane: Configuring and enabling network interfaces...

The SSH connection was unexpectedly closed by the remote end. This usually indicates that SSH within the guest machine was unable to properly start up. Please boot the VM in GUI mode to check whether it is booting properly.



Following are the complete message till I got the error and got stopped:

ub1@ub1-VirtualBox:\~/certified-kubernetes-administrator-course/kubeadm-clusters/virtualbox$ vagrant up

Bringing machine 'controlplane' up with 'virtualbox' provider...

Bringing machine 'node01' up with 'virtualbox' provider...

Bringing machine 'node02' up with 'virtualbox' provider...

==> controlplane: Box 'ubuntu/jammy64' could not be found. Attempting to find and install...

controlplane: Box Provider: virtualbox

controlplane: Box Version: >= 0

==> controlplane: Loading metadata for box 'ubuntu/jammy64'

controlplane: URL: https://vagrantcloud.com/api/v2/vagrant/ubuntu/jammy64

==> controlplane: Adding box 'ubuntu/jammy64' (v20241002.0.0) for provider: virtualbox

controlplane: Downloading: https://vagrantcloud.com/ubuntu/boxes/jammy64/versions/20241002.0.0/providers/virtualbox/unknown/vagrant.box

==> controlplane: Successfully added box 'ubuntu/jammy64' (v20241002.0.0) for 'virtualbox'!

==> controlplane: Importing base box 'ubuntu/jammy64'...

==> controlplane: Matching MAC address for NAT networking...

==> controlplane: Setting the name of the VM: controlplane

Vagrant is currently configured to create VirtualBox synced folders with

the `SharedFoldersEnableSymlinksCreate` option enabled. If the Vagrant

guest is not trusted, you may want to disable this option. For more

information on this option, please refer to the VirtualBox manual:



https://www.virtualbox.org/manual/ch04.html#sharedfolders



This option can be disabled globally with an environment variable:



VAGRANT_DISABLE_VBOXSYMLINKCREATE=1



or on a per folder basis within the Vagrantfile:



config.vm.synced_folder '/host/path', '/guest/path', SharedFoldersEnableSymlinksCreate: false

==> controlplane: Clearing any previously set network interfaces...

==> controlplane: Preparing network interfaces based on configuration...

controlplane: Adapter 1: nat

controlplane: Adapter 2: bridged

==> controlplane: Forwarding ports...

controlplane: 22 (guest) => 2222 (host) (adapter 1)

==> controlplane: Running 'pre-boot' VM customizations...

==> controlplane: Booting VM...

==> controlplane: Waiting for machine to boot. This may take a few minutes...

controlplane: SSH address: 127.0.0.1:2222

controlplane: SSH username: vagrant

controlplane: SSH auth method: private key

controlplane: Warning: Connection reset. Retrying...

controlplane: Warning: Remote connection disconnect. Retrying...

controlplane: Warning: Connection reset. Retrying...

controlplane:

controlplane: Vagrant insecure key detected. Vagrant will automatically replace

controlplane: this with a newly generated keypair for better security.

controlplane:

controlplane: Inserting generated public key within guest...

controlplane: Removing insecure key from the guest if it's present...

controlplane: Key inserted! Disconnecting and reconnecting using new SSH key...

==> controlplane: Machine booted and ready!

==> controlplane: Checking for guest additions in VM...

controlplane: The guest additions on this VM do not match the installed version of

controlplane: VirtualBox! In most cases this is fine, but in rare cases it can

controlplane: prevent things such as shared folders from working properly. If you see

controlplane: shared folder errors, please make sure the

guest additions within the

controlplane: virtual machine match the version of VirtualBox you have installed on

controlplane: your host and reload your VM.

controlplane:

controlplane: Guest Additions Version: 6.0.0 r127566

controlplane: VirtualBox Version: 7.1

==> controlplane: Setting hostname...

==> controlplane: Configuring and enabling network interfaces...

The SSH connection was unexpectedly closed by the remote end. This

usually indicates that SSH within the guest machine was unable to

properly start up. Please boot the VM in GUI mode to check whether

it is booting properly.



https://redd.it/1j5ae1f
@r_devops

Recommended learning path for AWS infrastructure services

Hi,

so what learning path/strategy/resources would your recommend for someone who wants to get practical skills and be able to design/build and manage cloud infrastructure in AWS, using IaC and be on top of the game when it comes to automation and monitoring?

Existing experience includes: strong networking - including core networking as well as application proxies and WAFs
Strong Linux and scripting skiils
C, Python, Go programming experience
Strong DBA experience, also directory services and auth solutions
System design and infrastructure architecture experience, including many types of virtualization platforms
but very limited public cloud production experience

Once again, not looking for a certification path, but more of a hands on, practical get up and being successful platform engineer using AWS and foundational services + EKS, ECS.

Ideally looking for learning from real world examples or building/running real world complex systems in AWS.

What would be practical approach to learning be like?

https://redd.it/1j58qj0
@r_devops