Anyone here run a business?
Im working on starting a type of service model where I just provide terraform to build out the infrx required for teams. mainly targeting small to mid-sized consultancies and IT departments with.
Curious on
A. Is this something that would be useful
B. how to find clients
Im currently posting on youtube and trying to drive traffic to my website (not going to link as I dont want this to be perceived as promotional)
https://redd.it/1j4jymm
@r_devops
Im working on starting a type of service model where I just provide terraform to build out the infrx required for teams. mainly targeting small to mid-sized consultancies and IT departments with.
Curious on
A. Is this something that would be useful
B. how to find clients
Im currently posting on youtube and trying to drive traffic to my website (not going to link as I dont want this to be perceived as promotional)
https://redd.it/1j4jymm
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
Does DevOps engineer write application code?
Hi, I'm a software developer with around 4 years of working experience. Recently, I was trying to get a DevOps role because I like the cloud and managing the deployment process, but at the same time I don't want to quit writing application code because I want to gain more experience in developing apps and managing databases etc...
So do you think that DevOps roles are suitable in my case or should I just focus on backend roles?
https://redd.it/1j4of6z
@r_devops
Hi, I'm a software developer with around 4 years of working experience. Recently, I was trying to get a DevOps role because I like the cloud and managing the deployment process, but at the same time I don't want to quit writing application code because I want to gain more experience in developing apps and managing databases etc...
So do you think that DevOps roles are suitable in my case or should I just focus on backend roles?
https://redd.it/1j4of6z
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
How to Import an Existing Kubernetes Cluster into Rancher | Step-by-Step Guide
Already running a Kubernetes cluster? Learn how to import it into Rancher for centralized management and better visibility! Whether your cluster is on Minikube, the cloud, or on-prem, this step-by-step guide will walk you through the entire process.
🔹 What You'll Learn:
✅ How to verify your Kubernetes cluster before importing
✅ How to use Rancher’s import feature
✅ How to deploy and test a workload after importing
Watch video at https://youtu.be/agiHe8Lrw9k
https://redd.it/1j4qi6i
@r_devops
Already running a Kubernetes cluster? Learn how to import it into Rancher for centralized management and better visibility! Whether your cluster is on Minikube, the cloud, or on-prem, this step-by-step guide will walk you through the entire process.
🔹 What You'll Learn:
✅ How to verify your Kubernetes cluster before importing
✅ How to use Rancher’s import feature
✅ How to deploy and test a workload after importing
Watch video at https://youtu.be/agiHe8Lrw9k
https://redd.it/1j4qi6i
@r_devops
YouTube
How to Import an Existing Kubernetes Cluster into Rancher | Step-by-Step Guide
Already running a Kubernetes cluster? Learn how to import it into Rancher for centralized management and better visibility! Whether your cluster is on Minikube, the cloud, or on-prem, this step-by-step guide will walk you through the entire process.
🔹 What…
🔹 What…
Stuck at SSH in 'vagrant up' using Vagrantfile. Any clue, anybody? (I am setting up the cluster by following Kubernetes the hard way by Mumshad).
Thank you in advance
https://redd.it/1j4tw0z
@r_devops
Thank you in advance
https://redd.it/1j4tw0z
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
Rough/Ballpark Cost Estimate for the following?
I want to make a proof of concept (<5 users):
* 2 cheap AWS pods for a React Frontend (kubernetes)
* 2 cheap AWS pods for a Spring Backend (kubernetes)
* Any cheap AWS SQL database
* A way to deploy to each via a Jenkins pipeline
* An Okta setup for <5 users
The goal is to have this semi boiler plate for future projects - but want to give my boss a rough cost estimate before starting
https://redd.it/1j4w6pe
@r_devops
I want to make a proof of concept (<5 users):
* 2 cheap AWS pods for a React Frontend (kubernetes)
* 2 cheap AWS pods for a Spring Backend (kubernetes)
* Any cheap AWS SQL database
* A way to deploy to each via a Jenkins pipeline
* An Okta setup for <5 users
The goal is to have this semi boiler plate for future projects - but want to give my boss a rough cost estimate before starting
https://redd.it/1j4w6pe
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
A microblog on abstraction debt in infrastructure as code
This article serves as the starting point for a microblog series exploring the challenges of managing Infrastructure-as-Code (IaC) at scale. The reflections here are solely my own views, based on my experiences and the lessons learned (sometimes the hard way) when building and maintaining large-scale infrastructure. This first entry lays the groundwork for the complexities, trade-offs, and regrets that come with designing IaC solutions.
https://rosesecurity.dev/blog/2025/03/06/the-abstraction-debt-in-iac
https://redd.it/1j4yker
@r_devops
This article serves as the starting point for a microblog series exploring the challenges of managing Infrastructure-as-Code (IaC) at scale. The reflections here are solely my own views, based on my experiences and the lessons learned (sometimes the hard way) when building and maintaining large-scale infrastructure. This first entry lays the groundwork for the complexities, trade-offs, and regrets that come with designing IaC solutions.
https://rosesecurity.dev/blog/2025/03/06/the-abstraction-debt-in-iac
https://redd.it/1j4yker
@r_devops
PSA: microdnf needs -y in ubi9 and above
Fuck, fuckety fuck Fuck! FUCK
I spent an entire afternoon trying to find out why the fuck my build pipeline timed out and chased so many red herrings—looking at auth and fucking firewalls and what have you.
All because micro-fucking-dnf was waiting for "Is this ok y/N:" and that piece of shit Azure DevOps decided to not show that but instead
> ##errorThe operation will be canceled. The next steps may not contain expected logs.
> ##errorThe operation was canceled.
Fuck!
https://redd.it/1j4zg21
@r_devops
Fuck, fuckety fuck Fuck! FUCK
I spent an entire afternoon trying to find out why the fuck my build pipeline timed out and chased so many red herrings—looking at auth and fucking firewalls and what have you.
All because micro-fucking-dnf was waiting for "Is this ok y/N:" and that piece of shit Azure DevOps decided to not show that but instead
> ##errorThe operation will be canceled. The next steps may not contain expected logs.
> ##errorThe operation was canceled.
Fuck!
https://redd.it/1j4zg21
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
Configuration antipattern?
I work in a infrastructure team and am currently working on a project where a dev team has built out a load of pipeline templates and infra templates for previous things they deploy. We are attempting to reuse these where possible.
However, when I came to use these there's pretty much no documentation and they are stored across a few different repos for different aspects.
The main frustration is that everything is parameter/configuration driven. You are required to plug endless config files into stuff for example the resource names, permissions to be applied, entra ID details for app registrations and tons of other random garbage all over the place.
My question is, is this amount of configuration manually input instead of being spat out my infra deployments an antipattern in some way? The amount of manual work to get a working deployment is insane.
https://redd.it/1j4z4he
@r_devops
I work in a infrastructure team and am currently working on a project where a dev team has built out a load of pipeline templates and infra templates for previous things they deploy. We are attempting to reuse these where possible.
However, when I came to use these there's pretty much no documentation and they are stored across a few different repos for different aspects.
The main frustration is that everything is parameter/configuration driven. You are required to plug endless config files into stuff for example the resource names, permissions to be applied, entra ID details for app registrations and tons of other random garbage all over the place.
My question is, is this amount of configuration manually input instead of being spat out my infra deployments an antipattern in some way? The amount of manual work to get a working deployment is insane.
https://redd.it/1j4z4he
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
Gitlab runner returns - "Error: failed to resolve feat-interim-xxxxxxxx: not found". Any ideas?
Hi there I have a pipeline with an image being built with Kaniko (I know it isnt being currently updated and supported) and when I use the "oras attach" command then I get the above-mentioned error. I am just trying to attach some provenance and attestation to the image. The runner is expecting registry/image:tag, which is defined in the variable I used, but it wont resolve. Any ideas on what might be happening here?
https://redd.it/1j52p0m
@r_devops
Hi there I have a pipeline with an image being built with Kaniko (I know it isnt being currently updated and supported) and when I use the "oras attach" command then I get the above-mentioned error. I am just trying to attach some provenance and attestation to the image. The runner is expecting registry/image:tag, which is defined in the variable I used, but it wont resolve. Any ideas on what might be happening here?
https://redd.it/1j52p0m
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
Containers via Powershell
Hello Devops Community, Just stuck my head with this thing , Here me out
We're working on centralizing our application logs and traces using OpenTelemetry and have decided to deploy a dedicated OpenTelemetry container app within our Azure Container Apps environment. We're aiming for an Infrastructure-as-Code (IaC) approach for this deployment and have chosen PowerShell for now, primarily due to our existing familiarity and the recent changes to Terraform's licensing. We're not yet proficient in Bicep.
Our deployment plan involves the following steps:
1. **Pushing the OpenTelemetry image:** We'll push our custom OpenTelemetry image to Azure Container Registry (ACR).
2. **Creating the Container App:** We'll create the Azure Container App resource.
3. **Configuration via Azure File Share:** Our OpenTelemetry container requires configuration files (config maps). We plan to store these in an Azure File Share within a Storage Account and mount this as a volume to the container app.
4. **Post-Creation Volume Mount:** Due to limitations in mounting persistent volumes during initial Container App creation, we intend to:
* Download the generated Container App YAML configuration.
* Modify the YAML to include the volume mount referencing the Azure File Share.
* Update the Container App with the modified YAML.
We can do via Azure CLI commands to accomplish this, but we're exploring whether this workflow is feasible or If PowerShell is better ?
The problem with powershell is we are not sure how to pass entire container proerties with all ingress, mount, config mapping, etc
Do you have any suggestion or resource for this task ? Meanwhile I will share my dummy script for your review
Note : I m open to criticism as I m new to Devops side of things and If this is not right sub I can move this to another sub
#Use this CLI code if we dont want dapr
az containerapp configmap create `
--name $configMapName `
--resource-group $resourceGroupName `
--environment $environmentName `
--secrets "otel-collector-config=$collectorConfig"
# Define Container App Properties
$containerAppProperties = @{
Location = $location
ManagedEnvironmentId = (Get-AzContainerAppManagedEnvironment -ResourceGroupName $resourceGroupName -Name $environmentName).Id
Configuration = @{
Ingress = @{
External = $false
TargetPort = $targetPort
}
Registries = @()
}
Template = @{
Containers = @(
@{
Name = $containerAppName
Image = $containerImage
Ports = @(
@{
ContainerPort = $targetPort
Protocol = "TCP"
}
)
Env = @(
@{
Name = "key"
SecretRef = $secretName # Reference to the secret in Key Vault
}
)
}
)
}
}
# Create Container App
try {
New-AzContainerApp -ResourceGroupName $resourceGroupName -Name $containerAppName -Property $containerAppProperties
Write-Host "OpenTelemetry Collector Container App '$containerAppName' created successfully."
}
catch {
Write-Error "Failed to create OpenTelemetry Collector Container App: $($_.Exception.Message)"
}
https://redd.it/1j53zf0
@r_devops
Hello Devops Community, Just stuck my head with this thing , Here me out
We're working on centralizing our application logs and traces using OpenTelemetry and have decided to deploy a dedicated OpenTelemetry container app within our Azure Container Apps environment. We're aiming for an Infrastructure-as-Code (IaC) approach for this deployment and have chosen PowerShell for now, primarily due to our existing familiarity and the recent changes to Terraform's licensing. We're not yet proficient in Bicep.
Our deployment plan involves the following steps:
1. **Pushing the OpenTelemetry image:** We'll push our custom OpenTelemetry image to Azure Container Registry (ACR).
2. **Creating the Container App:** We'll create the Azure Container App resource.
3. **Configuration via Azure File Share:** Our OpenTelemetry container requires configuration files (config maps). We plan to store these in an Azure File Share within a Storage Account and mount this as a volume to the container app.
4. **Post-Creation Volume Mount:** Due to limitations in mounting persistent volumes during initial Container App creation, we intend to:
* Download the generated Container App YAML configuration.
* Modify the YAML to include the volume mount referencing the Azure File Share.
* Update the Container App with the modified YAML.
We can do via Azure CLI commands to accomplish this, but we're exploring whether this workflow is feasible or If PowerShell is better ?
The problem with powershell is we are not sure how to pass entire container proerties with all ingress, mount, config mapping, etc
Do you have any suggestion or resource for this task ? Meanwhile I will share my dummy script for your review
Note : I m open to criticism as I m new to Devops side of things and If this is not right sub I can move this to another sub
#Use this CLI code if we dont want dapr
az containerapp configmap create `
--name $configMapName `
--resource-group $resourceGroupName `
--environment $environmentName `
--secrets "otel-collector-config=$collectorConfig"
# Define Container App Properties
$containerAppProperties = @{
Location = $location
ManagedEnvironmentId = (Get-AzContainerAppManagedEnvironment -ResourceGroupName $resourceGroupName -Name $environmentName).Id
Configuration = @{
Ingress = @{
External = $false
TargetPort = $targetPort
}
Registries = @()
}
Template = @{
Containers = @(
@{
Name = $containerAppName
Image = $containerImage
Ports = @(
@{
ContainerPort = $targetPort
Protocol = "TCP"
}
)
Env = @(
@{
Name = "key"
SecretRef = $secretName # Reference to the secret in Key Vault
}
)
}
)
}
}
# Create Container App
try {
New-AzContainerApp -ResourceGroupName $resourceGroupName -Name $containerAppName -Property $containerAppProperties
Write-Host "OpenTelemetry Collector Container App '$containerAppName' created successfully."
}
catch {
Write-Error "Failed to create OpenTelemetry Collector Container App: $($_.Exception.Message)"
}
https://redd.it/1j53zf0
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
how do you actually stay on top of configuration drift?
so i've been thinking a lot about config drift lately, especially in fast-moving environments where infrastructure changes constantly. even with IaC and automated policies, things always seem to slip through... manual tweaks, unexpected dependencies, or just plain human error.
i came across this article that breaks down some solid strategies for controlling drift, but i'm curious - what’s actually worked for you in practice? do you rely more on automation, strict policies, or just accept a certain level of drift as inevitable?
would love to hear how different teams approach this.
https://redd.it/1j56676
@r_devops
so i've been thinking a lot about config drift lately, especially in fast-moving environments where infrastructure changes constantly. even with IaC and automated policies, things always seem to slip through... manual tweaks, unexpected dependencies, or just plain human error.
i came across this article that breaks down some solid strategies for controlling drift, but i'm curious - what’s actually worked for you in practice? do you rely more on automation, strict policies, or just accept a certain level of drift as inevitable?
would love to hear how different teams approach this.
https://redd.it/1j56676
@r_devops
The New Stack
The Engineer’s Guide to Controlling Configuration Drift
Automated validation is key here — it involves running tests that compare your actual environment with what you’ve defined.
Opsgenie is shutting down! Here are 5 open source alternatives to switch to
Hi,
In their recent blog post, Atlassian announced they'll be shutting down Opsgenie on June 4th, 2025. There's currently a heated discussion about this on Hacker News for anyone interested.
If you're affected by this change, I've compiled some of the best open-source alternatives to Opsgenie:
https://openalternative.co/alternatives/opsgenie
This is by no means a complete list, so if you know of any solid alternatives that aren't included, please let me know.
Thanks!
https://redd.it/1j572gh
@r_devops
Hi,
In their recent blog post, Atlassian announced they'll be shutting down Opsgenie on June 4th, 2025. There's currently a heated discussion about this on Hacker News for anyone interested.
If you're affected by this change, I've compiled some of the best open-source alternatives to Opsgenie:
https://openalternative.co/alternatives/opsgenie
This is by no means a complete list, so if you know of any solid alternatives that aren't included, please let me know.
Thanks!
https://redd.it/1j572gh
@r_devops
Work Life by Atlassian
The Evolution of IT Operations and Opsgenie
Learn about our new IT Ops capabilities, and what they mean for Opsgenie.
Teleport Application | Hashicorp Vault UI | Expose issues
Hi!
I'm trying to use teleport to expose the hashicorp vault ui we have on our Kubernetes cluster.
I'm receiving a blank page with 500 errors when I try to access them. This is my kube-agent config
...
app_service:
enabled: true
apps:
- name: vault-dev
uri: https://develop-vault-server-active.vault.svc.cluster.local:8200
labels:
env: develop
service: vault
rewrite:
headers:
- 'Host: develop-vault-server-active.vault.svc.cluster.local:8200'
...
Kube-agent logs
2025-03-05T11:19:26.510Z INFO [KUBERNETE] Starting Kube service via proxy reverse tunnel. pid:6.1 service/kubernetes.go:257
2025-03-05T11:19:26.575Z INFO [APP:SERVI] Cache "apps" first init succeeded. cache/cache.go:1152
2025-03-05T11:19:29.618Z INFO [APP:SERVI] All applications successfully started. pid:6.1 service/service.go:6224
2025-03-05T11:19:29.618Z INFO [PROC:1] The new service has started successfully. Starting syncing rotation status. pid:6.1 max_retry_period:4m16s service/connect.go:642
2025-03-05T11:22:09.831Z INFO emitting audit event event_type:app.session.chunk fields:map[app_name:vault-dev app_public_addr:vault.dev.teleport.xxx.co app_uri: cluster_name:teleport.xxx.co code:T2008I ei:6.65831065482e+11 event:app.session.chunk namespace:default private_key_policy:none server_id:21235eb8-04a9-400d-85a1-c58792a0f5f8 server_version:17.2.2 session_chunk_id:60b98e63-6fa4-4864-9293-e5a9e35eb0c3 sid:8671e5e0d3b649b50dc0d77860af90de88912c7d4b5addeff76f6599e740ed64 time:2025-03-05T11:22:09.831Z trace.component:audit uid:8396daf7-5fd3-44ae-b465-10a3b4e62382 user:username user_kind:1] events/emitter.go:287
2025-03-05T11:22:09.842Z INFO [APP:SERVI] Round trip: GET , code: 307, duration: 10.831033ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.888Z INFO emitting audit event event_type:app.session.chunk fields:map[app_name:vault-dev app_public_addr:vault.dev.teleport.xxx.co app_uri: cluster_name:teleport.xxx.co code:T2008I ei:6.0885849394e+10 event:app.session.chunk namespace:default private_key_policy:none server_id:21235eb8-04a9-400d-85a1-c58792a0f5f8 server_version:17.2.2 session_chunk_id:9862c82f-32e5-4c4a-87cd-dd4648dd3c38 sid:063e3000708b3f2fdebe6610a068ef36daf56cf5103e63d3df7689ce3e8e43f2 time:2025-03-05T11:22:09.886Z trace.component:audit uid:b8afdde3-43ad-4cb8-9d93-a3d234d2d169 user:username user_kind:1] events/emitter.go:287
2025-03-05T11:22:09.902Z INFO [APP:SERVI] Round trip: GET , code: 307, duration: 16.153207ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.928Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 4.198207ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.994Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.837296ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.228Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.695592ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.238Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.327523ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.241Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 3.076735ms tls:version: 304, tls:resume:false, tls:csuite:1301,
Hi!
I'm trying to use teleport to expose the hashicorp vault ui we have on our Kubernetes cluster.
I'm receiving a blank page with 500 errors when I try to access them. This is my kube-agent config
...
app_service:
enabled: true
apps:
- name: vault-dev
uri: https://develop-vault-server-active.vault.svc.cluster.local:8200
labels:
env: develop
service: vault
rewrite:
headers:
- 'Host: develop-vault-server-active.vault.svc.cluster.local:8200'
...
Kube-agent logs
2025-03-05T11:19:26.510Z INFO [KUBERNETE] Starting Kube service via proxy reverse tunnel. pid:6.1 service/kubernetes.go:257
2025-03-05T11:19:26.575Z INFO [APP:SERVI] Cache "apps" first init succeeded. cache/cache.go:1152
2025-03-05T11:19:29.618Z INFO [APP:SERVI] All applications successfully started. pid:6.1 service/service.go:6224
2025-03-05T11:19:29.618Z INFO [PROC:1] The new service has started successfully. Starting syncing rotation status. pid:6.1 max_retry_period:4m16s service/connect.go:642
2025-03-05T11:22:09.831Z INFO emitting audit event event_type:app.session.chunk fields:map[app_name:vault-dev app_public_addr:vault.dev.teleport.xxx.co app_uri: cluster_name:teleport.xxx.co code:T2008I ei:6.65831065482e+11 event:app.session.chunk namespace:default private_key_policy:none server_id:21235eb8-04a9-400d-85a1-c58792a0f5f8 server_version:17.2.2 session_chunk_id:60b98e63-6fa4-4864-9293-e5a9e35eb0c3 sid:8671e5e0d3b649b50dc0d77860af90de88912c7d4b5addeff76f6599e740ed64 time:2025-03-05T11:22:09.831Z trace.component:audit uid:8396daf7-5fd3-44ae-b465-10a3b4e62382 user:username user_kind:1] events/emitter.go:287
2025-03-05T11:22:09.842Z INFO [APP:SERVI] Round trip: GET , code: 307, duration: 10.831033ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.888Z INFO emitting audit event event_type:app.session.chunk fields:map[app_name:vault-dev app_public_addr:vault.dev.teleport.xxx.co app_uri: cluster_name:teleport.xxx.co code:T2008I ei:6.0885849394e+10 event:app.session.chunk namespace:default private_key_policy:none server_id:21235eb8-04a9-400d-85a1-c58792a0f5f8 server_version:17.2.2 session_chunk_id:9862c82f-32e5-4c4a-87cd-dd4648dd3c38 sid:063e3000708b3f2fdebe6610a068ef36daf56cf5103e63d3df7689ce3e8e43f2 time:2025-03-05T11:22:09.886Z trace.component:audit uid:b8afdde3-43ad-4cb8-9d93-a3d234d2d169 user:username user_kind:1] events/emitter.go:287
2025-03-05T11:22:09.902Z INFO [APP:SERVI] Round trip: GET , code: 307, duration: 16.153207ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.928Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 4.198207ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:09.994Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.837296ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.228Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.695592ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.238Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 2.327523ms tls:version: 304, tls:resume:false, tls:csuite:1301, tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223
2025-03-05T11:22:10.241Z INFO [APP:SERVI] Round trip: GET , code: 200, duration: 3.076735ms tls:version: 304, tls:resume:false, tls:csuite:1301,
tls:server:74656c65706f72742e7470662e636f.teleport.cluster.local reverseproxy/reverse_proxy.go:223https://develop-vault-server-active.vault.svc:8200https://develop-vault-server-active.vault.svc:8200/favicon.icohttps://develop-vault-server-active.vault.svc:8200https://develop-vault-server-active.vault.svc:8200/https://develop-vault-server-active.vault.svc:8200/ui/https://develop-vault-server-active.vault.svc:8200/ui/https://develop-vault-server-active.vault.svc:8200/ui/assets/vendor-d7bcb4a6a4344380e4c2303094d4ca7d.csshttps://develop-vault-server-active.vault.svc:8200/ui/assets/chunk.143.e91479deff7823988269.csshttps://develop-vault-server-active.vault.svc:8200/ui/assets/vault-83d1a3f61679fd041c567318ad68c607.css
Is someone already exposed the hashicorp vault ui with teleport?
https://redd.it/1j592h8
@r_devops
Is someone already exposed the hashicorp vault ui with teleport?
https://redd.it/1j592h8
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
While executing "vagrant up", I am encountering the follow error. Would be thankful if you please guide me on this. Thank you in advance.
==> controlplane: Setting hostname...
==> controlplane: Configuring and enabling network interfaces...
The SSH connection was unexpectedly closed by the remote end. This usually indicates that SSH within the guest machine was unable to properly start up. Please boot the VM in GUI mode to check whether it is booting properly.
Following are the complete message till I got the error and got stopped:
ub1@ub1-VirtualBox:\~/certified-kubernetes-administrator-course/kubeadm-clusters/virtualbox$ vagrant up
Bringing machine 'controlplane' up with 'virtualbox' provider...
Bringing machine 'node01' up with 'virtualbox' provider...
Bringing machine 'node02' up with 'virtualbox' provider...
==> controlplane: Box 'ubuntu/jammy64' could not be found. Attempting to find and install...
controlplane: Box Provider: virtualbox
controlplane: Box Version: >= 0
==> controlplane: Loading metadata for box 'ubuntu/jammy64'
controlplane: URL: https://vagrantcloud.com/api/v2/vagrant/ubuntu/jammy64
==> controlplane: Adding box 'ubuntu/jammy64' (v20241002.0.0) for provider: virtualbox
controlplane: Downloading: https://vagrantcloud.com/ubuntu/boxes/jammy64/versions/20241002.0.0/providers/virtualbox/unknown/vagrant.box
==> controlplane: Successfully added box 'ubuntu/jammy64' (v20241002.0.0) for 'virtualbox'!
==> controlplane: Importing base box 'ubuntu/jammy64'...
==> controlplane: Matching MAC address for NAT networking...
==> controlplane: Setting the name of the VM: controlplane
Vagrant is currently configured to create VirtualBox synced folders with
the `SharedFoldersEnableSymlinksCreate` option enabled. If the Vagrant
guest is not trusted, you may want to disable this option. For more
information on this option, please refer to the VirtualBox manual:
https://www.virtualbox.org/manual/ch04.html#sharedfolders
This option can be disabled globally with an environment variable:
VAGRANT_DISABLE_VBOXSYMLINKCREATE=1
or on a per folder basis within the Vagrantfile:
config.vm.synced_folder '/host/path', '/guest/path', SharedFoldersEnableSymlinksCreate: false
==> controlplane: Clearing any previously set network interfaces...
==> controlplane: Preparing network interfaces based on configuration...
controlplane: Adapter 1: nat
controlplane: Adapter 2: bridged
==> controlplane: Forwarding ports...
controlplane: 22 (guest) => 2222 (host) (adapter 1)
==> controlplane: Running 'pre-boot' VM customizations...
==> controlplane: Booting VM...
==> controlplane: Waiting for machine to boot. This may take a few minutes...
controlplane: SSH address: 127.0.0.1:2222
controlplane: SSH username: vagrant
controlplane: SSH auth method: private key
controlplane: Warning: Connection reset. Retrying...
controlplane: Warning: Remote connection disconnect. Retrying...
controlplane: Warning: Connection reset. Retrying...
controlplane:
controlplane: Vagrant insecure key detected. Vagrant will automatically replace
controlplane: this with a newly generated keypair for better security.
controlplane:
controlplane: Inserting generated public key within guest...
controlplane: Removing insecure key from the guest if it's present...
controlplane: Key inserted! Disconnecting and reconnecting using new SSH key...
==> controlplane: Machine booted and ready!
==> controlplane: Checking for guest additions in VM...
controlplane: The guest additions on this VM do not match the installed version of
controlplane: VirtualBox! In most cases this is fine, but in rare cases it can
controlplane: prevent things such as shared folders from working properly. If you see
controlplane: shared folder errors, please make sure the
==> controlplane: Setting hostname...
==> controlplane: Configuring and enabling network interfaces...
The SSH connection was unexpectedly closed by the remote end. This usually indicates that SSH within the guest machine was unable to properly start up. Please boot the VM in GUI mode to check whether it is booting properly.
Following are the complete message till I got the error and got stopped:
ub1@ub1-VirtualBox:\~/certified-kubernetes-administrator-course/kubeadm-clusters/virtualbox$ vagrant up
Bringing machine 'controlplane' up with 'virtualbox' provider...
Bringing machine 'node01' up with 'virtualbox' provider...
Bringing machine 'node02' up with 'virtualbox' provider...
==> controlplane: Box 'ubuntu/jammy64' could not be found. Attempting to find and install...
controlplane: Box Provider: virtualbox
controlplane: Box Version: >= 0
==> controlplane: Loading metadata for box 'ubuntu/jammy64'
controlplane: URL: https://vagrantcloud.com/api/v2/vagrant/ubuntu/jammy64
==> controlplane: Adding box 'ubuntu/jammy64' (v20241002.0.0) for provider: virtualbox
controlplane: Downloading: https://vagrantcloud.com/ubuntu/boxes/jammy64/versions/20241002.0.0/providers/virtualbox/unknown/vagrant.box
==> controlplane: Successfully added box 'ubuntu/jammy64' (v20241002.0.0) for 'virtualbox'!
==> controlplane: Importing base box 'ubuntu/jammy64'...
==> controlplane: Matching MAC address for NAT networking...
==> controlplane: Setting the name of the VM: controlplane
Vagrant is currently configured to create VirtualBox synced folders with
the `SharedFoldersEnableSymlinksCreate` option enabled. If the Vagrant
guest is not trusted, you may want to disable this option. For more
information on this option, please refer to the VirtualBox manual:
https://www.virtualbox.org/manual/ch04.html#sharedfolders
This option can be disabled globally with an environment variable:
VAGRANT_DISABLE_VBOXSYMLINKCREATE=1
or on a per folder basis within the Vagrantfile:
config.vm.synced_folder '/host/path', '/guest/path', SharedFoldersEnableSymlinksCreate: false
==> controlplane: Clearing any previously set network interfaces...
==> controlplane: Preparing network interfaces based on configuration...
controlplane: Adapter 1: nat
controlplane: Adapter 2: bridged
==> controlplane: Forwarding ports...
controlplane: 22 (guest) => 2222 (host) (adapter 1)
==> controlplane: Running 'pre-boot' VM customizations...
==> controlplane: Booting VM...
==> controlplane: Waiting for machine to boot. This may take a few minutes...
controlplane: SSH address: 127.0.0.1:2222
controlplane: SSH username: vagrant
controlplane: SSH auth method: private key
controlplane: Warning: Connection reset. Retrying...
controlplane: Warning: Remote connection disconnect. Retrying...
controlplane: Warning: Connection reset. Retrying...
controlplane:
controlplane: Vagrant insecure key detected. Vagrant will automatically replace
controlplane: this with a newly generated keypair for better security.
controlplane:
controlplane: Inserting generated public key within guest...
controlplane: Removing insecure key from the guest if it's present...
controlplane: Key inserted! Disconnecting and reconnecting using new SSH key...
==> controlplane: Machine booted and ready!
==> controlplane: Checking for guest additions in VM...
controlplane: The guest additions on this VM do not match the installed version of
controlplane: VirtualBox! In most cases this is fine, but in rare cases it can
controlplane: prevent things such as shared folders from working properly. If you see
controlplane: shared folder errors, please make sure the
guest additions within the
controlplane: virtual machine match the version of VirtualBox you have installed on
controlplane: your host and reload your VM.
controlplane:
controlplane: Guest Additions Version: 6.0.0 r127566
controlplane: VirtualBox Version: 7.1
==> controlplane: Setting hostname...
==> controlplane: Configuring and enabling network interfaces...
The SSH connection was unexpectedly closed by the remote end. This
usually indicates that SSH within the guest machine was unable to
properly start up. Please boot the VM in GUI mode to check whether
it is booting properly.
https://redd.it/1j5ae1f
@r_devops
controlplane: virtual machine match the version of VirtualBox you have installed on
controlplane: your host and reload your VM.
controlplane:
controlplane: Guest Additions Version: 6.0.0 r127566
controlplane: VirtualBox Version: 7.1
==> controlplane: Setting hostname...
==> controlplane: Configuring and enabling network interfaces...
The SSH connection was unexpectedly closed by the remote end. This
usually indicates that SSH within the guest machine was unable to
properly start up. Please boot the VM in GUI mode to check whether
it is booting properly.
https://redd.it/1j5ae1f
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
Recommended learning path for AWS infrastructure services
Hi,
so what learning path/strategy/resources would your recommend for someone who wants to get practical skills and be able to design/build and manage cloud infrastructure in AWS, using IaC and be on top of the game when it comes to automation and monitoring?
Existing experience includes: strong networking - including core networking as well as application proxies and WAFs
Strong Linux and scripting skiils
C, Python, Go programming experience
Strong DBA experience, also directory services and auth solutions
System design and infrastructure architecture experience, including many types of virtualization platforms
but very limited public cloud production experience
Once again, not looking for a certification path, but more of a hands on, practical get up and being successful platform engineer using AWS and foundational services + EKS, ECS.
Ideally looking for learning from real world examples or building/running real world complex systems in AWS.
What would be practical approach to learning be like?
https://redd.it/1j58qj0
@r_devops
Hi,
so what learning path/strategy/resources would your recommend for someone who wants to get practical skills and be able to design/build and manage cloud infrastructure in AWS, using IaC and be on top of the game when it comes to automation and monitoring?
Existing experience includes: strong networking - including core networking as well as application proxies and WAFs
Strong Linux and scripting skiils
C, Python, Go programming experience
Strong DBA experience, also directory services and auth solutions
System design and infrastructure architecture experience, including many types of virtualization platforms
but very limited public cloud production experience
Once again, not looking for a certification path, but more of a hands on, practical get up and being successful platform engineer using AWS and foundational services + EKS, ECS.
Ideally looking for learning from real world examples or building/running real world complex systems in AWS.
What would be practical approach to learning be like?
https://redd.it/1j58qj0
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
Is there a local dev (single license) setup for JFrog Artifactory?
My company uses JFrog Artifactory, so being a good dev I installed it locally learn the finer points. However I brought up the UI of my new install and it asked me for a license, then completely me blocked from doing anything 😂
Most other companies let you use their full product locally for evaluation purposes... What do you all suggest?
I know they have alternative versions (Artifactory OSS & JFrog Container Registry) which are more limited (Java, Docker) are those my best bet?
I noticed they also have a cloud managed version (with free trial) but I was hoping to self-host so I could really learn it, but maybe it's not worth the hassle?
https://redd.it/1j5cjtx
@r_devops
My company uses JFrog Artifactory, so being a good dev I installed it locally learn the finer points. However I brought up the UI of my new install and it asked me for a license, then completely me blocked from doing anything 😂
Most other companies let you use their full product locally for evaluation purposes... What do you all suggest?
I know they have alternative versions (Artifactory OSS & JFrog Container Registry) which are more limited (Java, Docker) are those my best bet?
I noticed they also have a cloud managed version (with free trial) but I was hoping to self-host so I could really learn it, but maybe it's not worth the hassle?
https://redd.it/1j5cjtx
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
General Advice For a Kubernetes setup
Our planned setup is:
1 Kubernetes Cluster - CI/CD via Jenkins
1 Deployment (2-3 pods) for our UI
1 Deployment (2-3 pods) for our Server
SQL server hosted any way we please
The top 3 are mandatory per the situation (we don't own the infrastructure) but the DB we have some say over.
Question:
We are a small team, none of us do a ton of DevOps
Would folks recommend trying to put the database into the cluster itself or would it be easier to host the database elsewhere and connect to it?
I have heard managing persistent statefulset resources in the cluster can be painful.
https://redd.it/1j5aw89
@r_devops
Our planned setup is:
1 Kubernetes Cluster - CI/CD via Jenkins
1 Deployment (2-3 pods) for our UI
1 Deployment (2-3 pods) for our Server
SQL server hosted any way we please
The top 3 are mandatory per the situation (we don't own the infrastructure) but the DB we have some say over.
Question:
We are a small team, none of us do a ton of DevOps
Would folks recommend trying to put the database into the cluster itself or would it be easier to host the database elsewhere and connect to it?
I have heard managing persistent statefulset resources in the cluster can be painful.
https://redd.it/1j5aw89
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
Is there a canvas app that lets you quickly design a DevOps infrastructure?
I would like to design something and have someone look at it and criticize it. Is there any app like that? It would be really useful.
https://redd.it/1j5dyxg
@r_devops
I would like to design something and have someone look at it and criticize it. Is there any app like that? It would be really useful.
https://redd.it/1j5dyxg
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community
What are the main benefits of setting up a vps for your project?
Want to learn more about vps in general and how I can benefit from setting one up.
https://redd.it/1j5ga1g
@r_devops
Want to learn more about vps in general and how I can benefit from setting one up.
https://redd.it/1j5ga1g
@r_devops
Reddit
From the devops community on Reddit
Explore this post and more from the devops community