Reddit DevOps
268 subscribers
2 photos
31K links
Reddit DevOps. #devops
Thanks @reddit2telegram and @r_channels
Download Telegram
From Google to Global: The Technical Origins of Kubernetes

I just published a deep technical write-up on how Kubernetes evolved from Google’s internal systems, Borg and Omega and why its design choices still matter today.

If you're into Kubernetes internals, this covers:

The architectural DNA from Borg and Omega
Why pods exist and what they solve
How the API server, controllers, and labels came to be
Early governance, open-source handoff, and CNCF milestones

📖 Read here:
https://blog.abhimanyu-saharan.com/posts/from-google-to-global-the-technical-origins-of-kubernetes

Would love feedback from others who’ve worked with k8s deeply.

https://redd.it/1kww8ix
@r_devops
Transition Developer to DevOps ?

Hey everyone,
I’m a backend developer (mainly C/C++) with 2.5 years exp looking to transition into a DevOps role. However, my current company doesn’t have a dedicated DevOps culture — the only tools I get to work with are Jenkins and JFrog for basic CI/CD. No infrastructure work, no containerization, no cloud responsibilities.

Outside of work, I’ve started building some hands-on projects using AWS (Lambda, S3, DynamoDB), Docker, Terraform, GitHub Actions, etc., to bridge the gap.

For those who’ve made this transition:

1. How did you move into DevOps with limited in-company experience?

2. What kinds of personal projects helped you gain credibility?

3. How do you showcase your self-learned skills to potential employers?

4. Any advice on interviews, certifications, or roadmaps from dev to DevOps?

Really looking forward to hearing from folks who’ve been in the same boat!

https://redd.it/1kwvm39
@r_devops
First Platform Engineer at a company - give me tips to set them up 🙏

Accepted a new job offer as a Platform Engineer at a reasonably small, yet rapidly growing company. They did let me know at the interview that I’d be their first Platform Engineer.

For context I am a DevOps Engineer with roughly two years of experience - mostly focused on Kubernetes but have gained other experience (VMWare, Linux, etc.).

There are currently around ten software developers that are currently running their software and testing in some GitLab runners. That is it. They don’t have a defined strategy on the work I am to complete when I turn up to the office, so I’ll have to devise one.

My plan is to set them up with on-premise infrastructure (potentially cloud if they would prefer), effectively building a more enterprise-compatible version of my home lab by designing a network diagram, installing the server racks, hardware, hypervisors, ability to remote into the hardware, etc.

Obviously quite a lot for a fresh mid-level engineer but they are aware of my freshness aha

Any tips on what you would do? Any advice?

https://redd.it/1kwz9yq
@r_devops
ChatGPT and daily tasks.

Just finished working on a AWS cognito trigger. All I had to do was ask ChatGPT. It's crazy how good it is. It almost feels like cheating. I have been copy pasting a lot lately. Often I copy/paste and say "please lord forgive me" haha. Times are changing. I guess this is the new way of doing things. My problem solving skills are no match for ChatGPT. I've become replaceable.

https://redd.it/1kwzjdn
@r_devops
DevOps as abstraction ?

So i have this question of a rather philosophical or historic nature, but i hope it makes sense to you. Grady Booch says the history of software engineering is the history of abstractions. So he means the process from binary to assembler to higher languages, mirroring the world through objects, frameworks comprising architectures etc.
Each Layer of abstraction helped managing complexity by hiding detail. So do you think that the emergence of DevOps fits into this narrative? Can DevOps be described historically as a layer of abstraction? Yes or no and why? All opinions welcome!

https://redd.it/1kwyjvu
@r_devops
Help with GitHub Actions and Auth for NestJS Project

Hello guys

My friends and I are working on building a web app together. We decided to go with TypeScript for the stack and NestJS for the backend. I got assigned to handle GitHub management and authentication services.

I’m new to programming, so I’m hoping to get some advice. Specifically: how can I set up GitHub Actions (or any GitHub settings) to make sure no one can merge directly into the main branch without getting an approval first? Also, for authentication, what are some services you’ve used that had a good developer experience, easy implementation, solid docs, and an active community?
Any tips or advice would be super appreciated.

Thanks!

https://redd.it/1kx2sej
@r_devops
A debloating tool for containers reducing the size, time of pulling, and number of CVEs

Hi everyone,

We are a bunch of academics who have worked on debloating tools for containers and we just released our code with an MIT license to Github: https://github.com/negativa-ai/BLAFS

A full description of the work is here: https://arxiv.org/abs/2305.04641

TLDR; We monitor the container during runtime to see the actual files used in the container. We then cut all the bloat. Our solution was tested with various containers. What if a file is later used? One of two modes: First, security hardened mode assumes that this is a change in the container and fails notifying the admin/owner. Second mode, we catch the exception and pull the file back in to the container. Our tool supports layer sharing too.

We would love if you give the tool a try and tell us what you think! We are also very happy to work with individuals/companies to help them set this up! All feedback is welcome!

Here is a table with the results for 10 popular containers on dockerhub:

|Container|Original size (MB)|Debloated (MB)|Vulerabilities removed %|
|:-|:-|:-|:-|
|mysql:8.0.23|546.0|116.6|89|
|redis:6.2.1|105.0|28.3|87|
|ghost:3.42.5-alpine|392|81|20|
|registry:2.7.0|24.2|19.9|27|
|golang:1.16.2|862|79|97|
|python:3.9.3|885|26|20|
|bert tf2:latest|11338|3973|61|
|nvidia mrcnn tf2:latest|11538|4138|62|
|merlin-pytorch-training:22.04|15396|4224|78|
|||||

https://redd.it/1kx2grw
@r_devops
cPanel cons

What are the disadvantages of using cPanel to manage a hosting for my web applications?

https://redd.it/1kx5tab
@r_devops
Grafana setup

Hi, on may I started my first DevOps engineer job as a junior (no previous experience). My first and long time task is setting up grafana dashboards for various apps.

I was able to do so, the dashboards are fully working but now I was given a task to make them universal across the environments (dev/test/prod).

Now, I get the concept of setting it up as a variable, but I am unsure where to go from there. Our sources are named the same "prometheus-app" but the urls are prometheus."environment"...

I thought that building individual queries was the key, that I will just define it there with a variable, but from my understanding that is not possible.

Could you help me find the right way to create such setup? Can it be defined in provisioning?

We're using kubernetes, argocd, helmcharts, prometheus and grafana

I'm sorry if it's a dumb question, I'm still learning a lot and trying my best🙏🏻

Thank you all so much for your help in advance

https://redd.it/1kxad53
@r_devops
K8s operators for self hosted mongoDB?

In one project I am in a situation where self hosting mongoDB in a Kubernetes Cluster may actually be my best option.

I've seen some sweet and, apparently, very well tested and respected postgresql operators and would love to have similar abilities.

Can you recommend what you use, or would use nowadays? Need some initial push in the right direction.

Has any of your operators had any support for sending db backups outside of the cluster (push to S3, instead of just PV snapshots)?

I'm looking at official mongoDB operator, but KubeBlocks looks interesting as well.

https://redd.it/1kxcnuo
@r_devops
Calling Cloud/Cybersecurity Pros: Help My Thesis on Zero Trust Architectures

Hi everyone,

I'm conducting academic research for my thesis on zero trust architectures in cloud security within large enterprises and I need your help!

If you work in cybersecurity or cloud security at a large enterprise, please consider taking a few minutes to complete my survey. Your insights are incredibly valuable for my data collection and your participation would be greatly appreciated.

https://forms.gle/pftNfoPTTDjrBbZf9

Thank you so much for your time and contribution!

https://redd.it/1kxdmq0
@r_devops
Developers please help/guide your junior.....!!!!!

I am about to join college for btech cse in this year. I am currently learning frontend web development, currently i completed html,css and in javascript i am done till DOM Manipulation and event handling (there is still more to learn in java). But i think some time if i complete frontend, should i go for AI-ML or backend because i have little interest in AI-ML. I know basic programming in python because i had CS subject in school. Which will be the good path for me AI-ML or backend and if backend then which language. You may understand me as when you was a newbie you may also wonder about these stuffs. Although my english not too good. And anyone from usict here?

https://redd.it/1kxdy0s
@r_devops
Looking to start a career in DevOps, advice/starting points?

Hello everyone!

First post here but I am currently looking at career prospects. My background was as a primary school teacher, and I have then transitioned into the wonderful world of IT (initially as a field engineer but then was brought in to do 1st and 2nd line support - I am now in a position where when possible I’m assisting our infrastructure team).

I have had it suggested to me that DevOps would be a great career path for me, and it seems like something I could really enjoy. Currently, I have little to no experience in that area it feels, but I am a passionate learner and believe anyone can learn anything given the right support and tools. I have started doing the Scientific Computing with Python course just to begin to get into things.

What tips do you guys have? What should I focus on learning and how did you find is best to learn it? Someone has given me the advice of “just start automating everything” and I currently have that goal in mind but wanted to put it out there to see what is recommended and also, from a career perspective at what point I should look at applying for a junior role.

https://redd.it/1kxcyh7
@r_devops
Any Proxy for Mongodb?

Want to know if there is any Proxy tool available for Mongodb. My use case is I have few Serverless Functions where it connects to Mongo atlas, but since the Serverless IPs are not static I can't whitelist in Mongo atlas network access. I want to route it via a proxy where the proxy will have a static outbound ip. I've tried Mongobetween but it does not have any Auth mechanism leaving the dB wide open.

Is there any proxy or tool or way in which I can handle this use case?

https://redd.it/1kxh01g
@r_devops
I've just assigned you a junior devops engineer. What do you do?

You're the sole devops person at a small SaaS company. After months of asking, you've finally been given an additional devops resource. The catch: despite your insistence, it's a fresh-grad junior engineer with a basic comp-sci degree from an unremarkable school. You must perform your existing workload, which is appropriately sized for a single devops engineer (so clearly this is a fictional scenario) while shaping your new junior into a meaningfully contributing member of your fledgling devops team.

What is your plan?

https://redd.it/1kxgwhx
@r_devops
Best tools for managing Jira tickets that have been assigned to you?

Hey, I suck at this. Great at all of the engineering aspects of my job, but I find Jira to be annoying and difficult to deal with. It kind of acts like a speed bump in my workflow.

We have an on-prem instance and I can generate a PAT.

Does anyone know of tools to make Jira easier to handle? From creating tickets, linking them, logging work, etc?

Or even recommendations for the best ways to manage your account in an on-prem instance to make it easier to deal with a large volume of ad-hoc tasks mixed with epics, sprints, etc?

https://redd.it/1kxmw7a
@r_devops
I think I fucked it up

Hey there

I'm a mid DevOps engineer, Work for a small-mid size company
Yesterday I was trying to implement a Transparent proxy to gain insights of the traffic coming out of the AWS vpc (because right now we don't have any or almost any) and I ended up leaving production down for 9 hours, my fault.

I think that along with my boss, I'm the only one interested in having observability or insights of what's really happening in the project at the network level or the app level, and stop guessing whenever a problem arises at the network, app or costs level, what I mean is that the BE or FE team have no idea of what's going on and just keep pushing features, and the boss of my boss (which also is the CTO of the company I work on) keeps asking us and pushing us about the costs or the performance of the app.

I could be with them in not giving a damn sht about the state of the project, however I don't feel comfortable with that, and I really want to have a compliant project in the most way.

Now I'm concerned about getting fired lol, this has been my first DevOps job, but it is what it is, and if I have to go, then I will have to accept it.

Also for you guys I will be glad to hear about how getting involved in today's jobs hiring process, like which skills I have to know and how to differentiate myself from the others.







https://redd.it/1kxng5w
@r_devops
Practical DevSecOps Course 1/10

Hi all,

Earlier this year I purchased the CDP course from Practical DevSecOps. I remember being on the fence about it and read some posts here and even though I wasn't 100% sold on it, went ahead and purchased it.

I wanted to make this post so others could find it before purchasing it. The course is the worst course I HAVE EVER TAKEN! The videos (there's not many of them) appear to be AI generated and they simply read the pdf or doc you get access to for each module. The labs are just copy/paste. There's not a lot of learning.... they just give you what to paste in a terminal window.

At the end, they give you a gitlab file that outlines an entire pipeline. This is ok but you could easily just use GitLab's own study resources/docs to build this or find an example.

Lastly, the whole certification part is literally useless. No one even knows (or cares) about their certs. The certification has no value in the industry.

I know they have other courses like API security that look interesting tbh and some other ones. Those might be better, but the DevOps Pro one is not great. I found it to be repetitive, boring, and ultimately not worth the cost.



https://redd.it/1kxoa7y
@r_devops
Hybrid Cloud-Edge Architecture: Balancing On-Prem Security with SaaS-like UX - Seeking DevOps Perspectives

Hey DevOps community,

I'm working on an interesting architecture for Ceneca (ceneca.ai) and would love your thoughts.

We're building an on-premise AI data analyst tool with a twist - trying to provide a SaaS-like experience while keeping all data processing strictly on-prem⁠⁠.

Our current approach involves:

1. Docker-based deployment for the core agent⁠⁠​Outbound mTLS tunnel to a cloud portal for UI access⁠⁠​

2. SSO integration (Okta/Azure AD) for authentication⁠⁠​

3. Zero data storage in the cloud - only encrypted query results traverse the tunnel⁠⁠​

Some questions:

1. What potential security vulnerabilities should we be watching out for in this hybrid architecture?

2. How would you handle scaling and high availability in this setup?

3. What monitoring and observability practices would you recommend for tracking the health of the mTLS tunnel?

Would love some thoughts, thanks. Please let me know if you think the present approach is over-engineered or can be simplified.

https://redd.it/1kxlzae
@r_devops
How should a beginner start learning DevOps in 2025? What courses, tools, or paths do you recommend?

I'm completely new to devops but very interested in starting a career in it, i have some basic programming knowledge in web dev(Reactjs) but I'm not sure what the best starting point is , is there any course you would recommend i start with ? Thank you.

https://redd.it/1kxtz0f
@r_devops