KRM as Code: Yoke Release Notes v0.13.x

## 🚀 Yoke Release Notes and Demo
Yoke is a code-first alternative to Helm and Kro, allowing you to write your charts or RGDs using code instead of YAML templates or CEL.
This release introduces the ability to define custom statuses for CRs managed by the AirTrafficController, as well as standardizing around conditions for better integration with tools like ArgoCD and Flux.
It also includes improvements to core Yoke: the apply command now always reasserts state, even if the revision is identical to the previous version.
There is now a fine-grained mechanism to opt into packages being able to read resources outside of the release, called resource-access-matchers.
---
## 📝 Changelog: v0.12.9 – v0.13.3
- pkg/flight: Improve clarity of the comment for the function flight.Release (bf1ecad)
- yoke/takeoff: Reapply desired state on takeoff, even if identical to previous revision (8c1b4e1)
- k8s/ctrl: Switch controller event source from retry watcher to dynamic informer (49c863f)
- atc: Support custom status schemas (5eabc61)
- atc: Support custom status for managed CRs (6ad60cd)
- atc: Modify flights to use standard metav1.Conditions (e24b22f)
- atc/installer: Log useful TLS cert generation messages (fa15b19)
- pkg/flight: Add observed generation to flight status (cc4c979)
- yoke&atc: Add resource matcher flags/properties for extended cluster access (102528b)
- internal/matcher: Add new test cases to matcher format (ce1afa4)
---
Thank you to our new contributors @jclasley and @Avarei for your work and insight.
Major shoutout to u/Avarei for his contributions to status management!
Yoke is an open-source project and is always looking for folks interested in contributing, raising issues or discussions, and sharing feedback. The project wouldn’t be what it is without its small but passionate community — I’m deeply humbled and grateful. Thank you.
---
As always, feedback is welcome!
Project can be found here

https://redd.it/1l2aqnd
@r_devops

Research Help: What tech problems are ignored in your company due to lack of time, budget, or ownership?

Hi everyone,

I’m a college student working on a research project related to real-world tech and software development challenges that companies face but rarely solve — due to reasons like:

* Lack of time
* Not having the right people/skills
* It’s not a “priority” despite causing problems
* No clear ownership or budget

I’m looking to collect insights from people working in the tech/IT/software field about what kind of issues are acknowledged but still ignored at work.

# ✅ Examples of what I mean:

* Tech debt that keeps growing because everyone’s afraid to touch old code
* Outdated or insecure legacy systems that no one has time to upgrade
* Code without tests that breaks often, but writing tests is “too much work”
* Lack of documentation that makes onboarding new devs difficult
* Security vulnerabilities that are logged but never patched
* Manual tasks that could be automated but never are
* Painful internal tools that devs hate but still use daily

# 💬 What I'm asking:

Is there a problem, process, or task in your company that everyone knows is an issue, but it's been ignored because there's no time, resources, or person responsible for fixing it?

I'd really appreciate any examples, stories, or patterns you’ve seen — even if it's something small but annoying. All responses will be used only for academic purposes and will stay anonymous.

Thanks a lot for helping a student learn from real industry experience 🙏

https://redd.it/1l2fwr1
@r_devops

Want to do project based learning in devops but stucked

Few days ago i decided to learn devops by not watching tutorials as it leads to tutorial hell. I started this project based learning thing but i am getting stuck ,unorganized .. like what the hell i am doing . I want to build project but then i don't know anything and i started just copy pasting things from chat gpt and tried to understand each command and also what is happening and why it is happening . But it feels like i am again walking to that tutorial hell path. I want to make my logic thinking better .


Should i continue this copy pasting and logic understanding things later till when ..

Please drop me some advice ...

https://redd.it/1l2hs2l
@r_devops

Self-hosted github actions runners - any frameworks for this?

My company uses github actions with runners based in AWS. It's haphazard, and we're about to revamp it.

We want to autoscale runners as needed, track what jobs are being run where (and their resource usage), let devs custom-define AMIs for their builds, sanity check that jobs act actually running (we've been bit by webhook outages), etc.. We could build this ourself, but don't want to reinvent the wheel.

I saw projects that look tangentially related, but they don't do everything we need and most are kubernetes/docker/fargate based anyway. We want the build process to be a simple as possible, so no building inside of docker. The idea of troubleshooting a network issue for a build that creates a docker image from within a docker image (for example) gives me anxiety.

Are there any community projects designed to manage something like this?

https://redd.it/1l2it6c
@r_devops

The Kubernetes tool I always wished existed

I built my own Kubernetes IDE because existing ones suck, I’ve been working on Agentkube - an AI-native Kubernetes IDE that runs locally and it's light-weight. Built for Platform Engineers, SREs, Devops professionals and AI infra teams.

Think: Cursor for Kubernetes.

Available on macOS & Windows – and it’s free to use! 🎉

(Except AI features — I didn’t want to burn through credits too early 😅 but I’ll make sure everyone can try them soon.)



While it’s still solo-built (so expect a few rough edges), it’s real and live now! Here is the preview: https://www.youtube.com/watch?v=vdDqt7jYpsU

I’d love to hear from the DevOps community - especially those using Kubernetes or tried it

What are you using today? kubectl, Lens, k9s, Headlamp, Monokle, something else?

Any feedback is welcome - I’m trying to make Kubernetes more accessible, smart, and even enjoyable.

DM me if you liked something, feature requests, or bugs https://github.com/agentkube/agentkube/ \- or just say hi!

https://redd.it/1l2kgs1
@r_devops

I built a list of recent FAANG-style interview problems

I compiled a list from recent candidate reports, split between LC-original and non-LC interview questions.

Here’s what I found:

For LC-original questions that showed up in interviews, the most common tags were:
- Array
- Two Pointers
- Hash Map
- DP
- String
- Sorting

For questions that weren’t on LC (or were serious twists), the most common patterns were:
- Hash Map
- DP
- Greedy
- Sliding Window
- BFS / DFS
- String
- Memoization
- Heap

What surprised me was how often companies asked medium to hard problems that didn’t resemble anything in the standard prep sets. So I took some time to organized these questions with solution explanation as well.

Just sharing in case anyone else is trying to make sense of the prep landscape right now.

https://redd.it/1l2llfr
@r_devops

Phone screening questions

I have a 15 minute phone screening for a DevOps Engineer position in a couple of days. I have done my research on the interviewer and considering it's only 15 minutes, I can assume that it'll be behavioral questions.

What kind of questions could I expect is my question? Any suggestions would be greatly appreciated!

https://redd.it/1l2nxza
@r_devops

Building Production-Ready MySQL Infrastructure on GCP with OpenTofu/Terraform: A Complete Guide

As a Senior Solution Architect, I’ve witnessed the evolution of database deployment strategies from manual server configurations to fully automated infrastructure as code. Today, I’m sharing a comprehensive solution for deploying production-ready, self-managed MySQL infrastructure on Google Cloud Platform using OpenTofu/Terraform.

This isn’t just another “hello world” Terraform tutorial. We’re building enterprise-grade infrastructure with security-first principles, automated backups, and operational excellence baked in from day one.

• Blog URL : https://dcgmechanics.medium.com/building-production-ready-mysql-infrastructure-on-gcp-with-opentofu-terraform-a-complete-guide-912ee9fee0f8

• GitHub Repository : https://github.com/dcgmechanics/OPENTOFU-GCP-MYSQL-SELF-MANAGED

Please let me know if you find this blog and IaaC code helpful, any feedback is appreciated!

Thanks!

https://redd.it/1l2le99
@r_devops

Hep With Automatically Updating Database and Notification System

Hello. I'm slowly learning to code. I need help understanding the best way to structure and develop this project.

I would like to use exclusively python because its the only language I'm confident in. Is that okay?

My goal:

* I want to maintain a cloud-hosted database that updates automatically on a set schedule (hourly or semi hourly). I’m able to pull the data manually, but I’m struggling with setting up the automation and notification system.
* I want to run scripts when the database updates that monitor the database for certain conditions and send Telegram notifications when those conditions are met. So I can see it on my phone.
* This project is not data heavy and not resource intensive. It's not a bunch of data and its not complex triggers.

I've been using chatgpt as a resource to learn. Not code for me but I don't have enough knowledge to properly guide it on this and It's been guiding me in circles.

It has recommended me Railway as a cheap way to build this, but I'm having trouble implementing it. Is Railway even the best thing to use for my project or should I start over with something else?

In Railway I have my database setup and I don't have any problem writing the scripts. But I'm having trouble implementing an existing script to run every hour, I don't understand what service I need to create.

Any guidance is appreciated.

https://redd.it/1l2u9tz
@r_devops

Az400 Dumps

Anyone have Az-400 dumps???please share it with me my exam is tomorrow

https://redd.it/1l2u14b
@r_devops

DevOps Freelancer ? Let's connect

Hello Everyone,I am working as a Devops Engineer
in a start-up and it's completely remote. I get some time to upskill myself. I have close to one year of experience and I am planning to target FAANG after an year.
Currently I am looking for a side project or freelancing work . If you are interested in side project or doing some freelancing work already then I would love to understand the work and see if I can contribute

Also,If anyone can guide or suggest me something regarding the same , they are also free to DM.


Thank you !

https://redd.it/1l2wjvy
@r_devops

What are things that can scan for issues with your Dockerfile?

What are things that can scan for issues with your Dockerfile? Issues like outdated container, security flaws, etc.

https://redd.it/1l2wldk
@r_devops

Reducing IaC by 10x Without DSLs or Cloud Lock-In

One recurring challenge in multi-cloud infrastructure management is the amount of IaC required to support different cloud providers. Even minor architectural differences often demand full rewrites.

A more scalable approach is to define infrastructure using **provider-agnostic blueprints**, exposed through an SDK (currently Java, with C# in development). These blueprints encapsulate components, relationships, and governance rules as reusable, versioned modules.

In this model:

* Developers typically write \~3 lines of code:
* One to select the blueprint
* Two to connect their application services (e.g. a database, web app, or queue)
* No changes are needed when switching cloud providers
* Provider-specific details (region, naming, networking, identity) are handled inside the blueprint

Here’s an example of how an AKS cluster can be instantiated from a blueprint using a strongly typed SDK:

public static AzureKubernetesService getAks(String id, AzureResourceGroup resourceGroup) {

return AzureKubernetesService.builder()

.withId(id)

.withRegion(resourceGroup.getRegion())

.withResourceGroup(resourceGroup)

.withNodePools(getNodePools())

.build();

}

This approach shifts from a **“Live System First”** mindset (writing infrastructure tied to a specific cloud) to a **“Blueprint First”** model, where infrastructure is defined once and instantiated anywhere.

For example, a secure AKS cluster with observability and hub-spoke networking can be deployed in around 140 lines—with governance, compliance, and DR included.

The 10x IaC reduction isn’t about shortening code arbitrarily. It comes from **removing redundancy**, **centralizing expertise**, and **eliminating cloud-specific rewrites** for each use case.

**Anyone using provider-agnostic blueprints in production?**
How do you currently manage cloud divergence in your IaC workflows—custom modules, wrappers, or internal abstractions?

https://redd.it/1l31ejj
@r_devops

A tool for recognizing when getting close to limit for all aws resources?

Hey everyone.

My company uses many aws services. how can I know we're close to going over the limits? Building a function for each service is not sustainable, we need something dynamic. i can't just check the services we use, because sometimes developers will use a new service, and then adding that retroactively is not sustainable. any ideas?


edit- it's not about money, it's about sometimes there are hard limits of say 10 api calls per second, sometimes it's a soft limit that can be increased. how to keep up with this, when these limits are approaching?

https://redd.it/1l31a62
@r_devops

Cloud taught me to stop thinking like a “Python dev” and start thinking like a systems person

When I started doing cloud automation with Python, I approached everything like a typical dev:

Write a script

Handle exceptions

Make it reusable

Done ✅

But cloud work rewired me.

Suddenly i had to think about things i never used to worry about:

\>What happens if this Lambda retries?

\>Is this region even available right now?

\>Am I leaking infra costs through a loop i forgot to kill?

I had to zoom out.....past the code....and think like a systems person.
Python was still the tool, but the mindset had to evolve.

It was uncomfortable at first, but honestly?
It made me a way better engineer.

Anyone else feel this shift?


https://redd.it/1l32fp7
@r_devops

Does anyone in the DevOps world uses Bash?

Hey all,

Just wondering - being a DevOps myself for 10 years (and using Bash daily), is anyone still using Bash that heavily in todays world?

https://redd.it/1l3465f
@r_devops

Should I talk to my manager about my interest in DevOps?

I've recently started learning more about devops and it's implementation, I want to switch to a devops role eventually and at our current startup there is no dedicated devops engineer, we all just deploy manually and because of this I have a good understanding of deployment and its errors, there is no proper CI CD pipeline or containerisation and so on, I'm a software engineer with 2 YOE working on spring boot application mainly at present. Now I know it's not realistic to switch I just want to ask for more responsibility in that regard so I can learn and implement and also build my career. Is this ok? Am I rushing things? I've only started learning since 2 days

https://redd.it/1l364cz
@r_devops

How to set up Bitnami PostgreSQL-HA for multi-cluster replication with one primary and others as replicas?

I'm trying to build a multi-cluster PostgreSQL HA setup using the Bitnami postgresql-ha Helm chart.

Objective:

Primary cluster runs full HA (read/write)

Secondary clusters act as read-only replicas and should automatically follow the primary

If the primary region fails, a secondary should be promotable (manually or automated)

No manual replication config like modifying pghba.conf, primaryconninfo, or mounting standby.signal

Constraints:

Helm-based setup only

Cross-cluster replication must work out of the box or with Helm values

Has anyone successfully implemented this kind of architecture using Bitnami's charts or other Kubernetes-native PostgreSQL HA stacks (e.g., Stolon, CloudNativePG, Crunchy)?

Would love any pointers, Helm examples, or architectural suggestions that avoid drifting into manual setup territory.

https://redd.it/1l32p4w
@r_devops

AWS vs Azure Which Offers More Career Opportunities

I’m trying to decide which cloud provider to focus on. In terms of job market demand, growth potential, and career opportunities, which one offers more, AWS or Azure?

https://redd.it/1l39rgn
@r_devops

How do you divide responsibility between devs and ops for cluster instances vs app instances?

For companies that are striving for developer self-service where devs manage the app concerns and ops manage the lower level infra concerns, I have the following question:

How do you think about dividing responsibility between developers and ops for cluster instances vs app instances?

To me, it makes sense that developer should manage application cpu/memory and min/max instance count. But the cluster must be able to support that with sufficient instance sizes and count. So do you have the developers manage that too? Or do ops manage that, setting an upper bound on the limit. And to go beyond that, developers have to collaborate with ops to get that increased? Or something else like automatically set cluster max based on all the application max instance count?

https://redd.it/1l3aqsa
@r_devops

Need Help with DevOps Resume & Job Search


Hi all,
I’m a backend developer (2.5 years, C/C++, Linux) moving into DevOps. I’ve done some personal projects and got an AWS cert

Now I need help with:

What to put in experience section as I don't have devops exp in my current organisation

Making my resume DevOps-friendly

How to apply without real DevOps work experience

What kind of roles to target first


Any tips would be really helpful. Thanks!

https://redd.it/1l3cocn
@r_devops