Nuclei templates with AI

I would like to know about the increasing popularity of certain tools within the security domain, particularly in light of these agentic AI code editors and coding assistant LLMs. So, as of now my focus is on the use of Nuclei templates to automate the detection of vulnerabilities in web applications and APIs. How effectively can agentic AI or LLMs assist in writing Nuclei templates and has anyone successfully used these tools for this purpose?

So, i have a swagger specification and a postman collection of APIs although I know how to write Nuclei templates but I'm more curious if any LLMs or AI-based code editors could help me in this process. I understand that human intervention would still be necessary but even generating a base structure let's say, a template for detecting SQL injection would allow me to modify the payloads sent to the web application or specific API endpoints.

I would appreciate any insights from those currently using agentic AI code editors or LLMs to write nuclei templates and what the best practices are for leveraging such AIs in this context specifically

https://redd.it/1l3cfn5
@r_devops

Always the same?

We run our applications on openshift and as a devops guy I write the kubernetes deployment for applications and I do all the ops stuff. The deployment code is always the same: A bunch of deployments, secrets, cm, services etc. you need to template and a bunch of bash and python scripts chained together. Incidents are the same: „let’s write some simple queries in splunk or Prometheus to find the issue and then either write a simple fix like changing a config value we just googled or add a Prometheus alarm“
Every application feels same. It really doesn’t matter if it’s some data intensive application, an online shop or whatever.
I feel like no matter which technology I picked I only scratched the surface but can solve anything and there is no need to go deeper.

Am I the only one that feel so?





https://redd.it/1l3iyf1
@r_devops

Automations within mid-size DevOps for Non-Technical users

Hey everyone,
I talked to a lot of non-technical folks working within DevOps teams - especially in smaller orgs - and noticed a few recurring pain points when it comes to automating workflows:

1. Tools like Zapier or n8n are harder to maintain. If someone builds a workflow and then leaves the team, it becomes a black box - especially for team members without a technical background.
2. Many automations live outside the team’s main communication tools (Slack, Teams, etc.), which makes them feel disconnected and hard to trigger or modify in context.
3. There’s often no visibility into what the automation is actually doing unless you go dig into it. This makes trust and debugging harder.

We’ve been building something in this space that’s focused on natural language-based, context-aware automations that live inside tools like Slack/Discord/Google Teams so even non-technical users can trigger, inspect, and edit automations from where they already work.

I am still trying to more feedback and get some thoughts:

What’s your experience with automation tools in small or mid-size DevOps teams?
What’s worked, what hasn’t?



https://redd.it/1l3hunm
@r_devops

Hiring Looking for a part time devops expert in Azure


Looking for a devops engineer who can support us with our infrastructure needs on Azure. Expertise in Azure, CI/CD and terraform required. Our infra is almost all set, so at this point, it would be a support role to launch new environments , enhance existing ones and assist engineers with issues. Fully remote. Comp rate of $50+ ph.

https://redd.it/1l3kdao
@r_devops

ever tried fixing someone else's AI generated code?

i had to debug a React component written entirely by an AI (not mine tho), looked fine at first
but buried inside were inconsistent states, unused props, and a weird loop causing render issues
took me longer to fix it than it would've taken to just write from scratch

should we actually review every line of ai output like human code?
or just trust it until something breaks?

how deep do you dig when using tools like Cursor, chatgpt, blackbox etc. in real projects?

https://redd.it/1l3n9wr
@r_devops

Anyone using AI tools (Copilot, transpilers, ) to generate or translate SDKs across languages??

Hi all, I’m working on a multi-language SDK and running into the usual headaches of having to translate logic and code samples across different programming languages.

I’ve tried a few AI tools like Copilot and some code converters. They’re helpful for snippets or boilerplate, but I’ve found they break down fast when the code gets more complex or when I need something production-ready.

Are you using any AI tools to help with SDK generation or language translation? How is your experience so far???

https://redd.it/1l3os12
@r_devops

ClickOps to Chatops

A lot of Devops people hate the UI abstraction over tf and k8s.. we say it as ClickOps..but as we are moving towards mcps and agents.. we are moving towards chatOps.. just wanted to get a sentiment around chatOps.. or it's worse than ClickOps..

In my company weirdly I have a a/b testing situation.. some senior practitioners really like using those Devops automation platforms during poc.. and the junior most are very anti UI.. is it just the experience or something else playing here?

https://redd.it/1l3r296
@r_devops

Transitioning into Infra/Platform/MLOps from SWE. Seeking advice!

Hi all,

I’m currently working as a contractor at fin-tech company, mostly focused on Python-based automation, testing, and deployment work. Before this I worked for roughly 3.5 years in Cisco and eBay as a backend engineer on SpringBoot and JS. While I’m comfortable on the development side, I’ve realized that I don’t want to pursue a purely backend developer role long-term.

Instead, I’m really interested in transitioning into Infrastructure Engineering, DevOps, Platform Engineering, or MLOps — ideally roles that support large-scale systems, AI workloads, or robust automation pipelines.

Here’s my current situation:

Decent in Python scripting/automation
Familiar with CI/CD basics, Git, Linux, and some AWS
On an H1-B visa and based in the Bay Area
Looking for a well-paying full-time role within the next 4 months
Actively upskilling in cloud, containers, Terraform, K8s, and ML model deployment

What I’d love help with:

What concrete steps should I follow to break into these roles quickly?
Any suggestions for resources, courses, or certs that are actually worth the time?
Which companies are best to target for someone with this trajectory?
What should I focus on most in a compressed 4-month timeline?
How much Leetcode or system design prep should I do given the nature of these roles?

Any honest advice — especially from those who’ve made similar pivots or are already in these roles — would be super appreciated.

Thanks in advance!


https://redd.it/1l3s607
@r_devops

Retention vs switch

posting on someone's behalf

Current role Azure cloud engineer, 4.5 yoe
Got an offer from infy (same role) at 12LPA

Current organisation TCS matched the offer,
Promised promotion next quarter with decent hike (10 to 15 percent), and probable onsite next year (Canada)

Should I stay or switch?

Please give some rationals too,

https://redd.it/1l3s58u
@r_devops

How Can Fresher Enter in Devops

Please suggest any good career guidance
I don't know what to do
Can anyone suggest what i learn
Which skill is good for me


https://redd.it/1l3tza4
@r_devops

What's your ideal development environment and CI setup pattern ?

Hi there, I wonder how you manage (ideally automate) development environment and CI setup ?

I'm specificallty talking about:
- Tools installation and setup like kubectl, Helm and plugins, etc. with minimal drift: ensuring the same version and config is used everywhere
- Secrets like AWS credentials, passwords, tokens, etc. and securing them from end to end
- Reproduciblity between local and CI, ensuring developer have all the same config and something similar is also running on CI (or that devs can reproduce something happening on CI easily on their local machine)

I've seen quite a lot of methods out there: Dev containers, magical shell script, Nix for the most courageous...

Add a comment (or upvote existing comment) with your favourite / ideal setup pattern, I'll edit here with a summary !


https://redd.it/1l3uno9
@r_devops

How do you usually answer the question "when will you have this task finished?"

Especially when your not sure what is involved such like during a replatforming or migrating a service. It's not a straightforward task.

https://redd.it/1l3v5jb
@r_devops

How much do you actually worry about cloud lock-in?

Every time people talk about cloud architecture, the lock-in topic shows up. But I honestly don’t know if it’s a real concern for folks in the trenches… or just something that looks scary in design docs but gets ignored in practice.

Like:

You use super convenient managed services (Pub/Sub, DynamoDB, S3, etc.)
Your IaC is tightly coupled to a single provider
You rely on vendor-specific APIs and tooling (CloudWatch, custom IAM policies…)

Then one day you think: what if I need to move to a different cloud? Or even back on-prem? How painful is that exit, really?

A few open questions:

Do you actually worry about lock-in, or just roll with it until it bites?
Ever had to migrate from one cloud to another? How did that go?
Have you found any realistic ways to avoid lock-in without making life harder?

Genuinely curious: trying to figure out if this is a real concern or just anxious architect syndrome.

https://redd.it/1l3w6n4
@r_devops

I'm noob. If someone want to merge from their branch to main. I want to run all the unit test if all tests pass, then merge, if not then block. What tools, tech stack to choose here?

And about the tests, should it test all the unit testing from merge or main branch?

https://redd.it/1l3yqun
@r_devops

Guidance on implementing Workload identity federation from bamboo

Hi from this link i understand that - https://docs.databricks.com/aws/en/dev-tools/auth/oauth-federation

We can implement oidc token to authenticate with databricks from cicd tools like azure devops/gitactions. Hwever we use bamboo and bitbucket for the ci cd and I believe bamboo doesnt have native support for oidc token? Can someone point me the reccomended way to authenticate to databricks workspace?

https://redd.it/1l3ykzg
@r_devops

AWS or on-prem server to Homelab with devops?

I started thinking about homelabing devops infra but since many companies including mine use AWS, I am not sure if I want to use AWS to Homelab. Or should I buy and use an on-prem hardware? What do you think?

https://redd.it/1l3y1dg
@r_devops

7 Open Source Diagram-as-Code Tools You Should Try Blog

I've always struggled with maintaining cloud architecture diagrams across teams—especially as infrastructure changes fast. So I explored 7 open-source Diagram-as-Code tools that let you generate diagrams directly from code.

If you're looking to automate diagrams or integrate them into CI/CD workflows, this might help!

Read it here: https://blog.prateekjain.dev/d13d0e972601?sk=4509adaf94cc82f8a405c6c030ca2fb6

https://redd.it/1l43z2k
@r_devops

Is DevOps still a good career path in 2025 for a new computer engineering graduate?

Hi everyone,
I’m about to graduate with a degree in computer engineering, and I’m exploring different career paths in tech. I know that some fields are more affected by AI than others in terms of job demand and salary.

I’m curious about DevOps in particular.
• Is DevOps still a good field to get into in 2025?
• Has it been significantly affected by AI?
• Would you recommend going into DevOps as a new graduate?
• Does it still offer good job opportunities and salaries compared to other fields?

I’d really appreciate any advice or insight.

https://redd.it/1l45p4g
@r_devops

Devops tasks for self learning

Hello devops engineers,
I am here for a little help. I am working as a devops engineer(on prem). Its my first job. And I am implementing policies and procedures with my manager for fintech firm. It is in its initial phase. I have implemented many things.
CICD (jenkins)
Hashicorp vault
Grafana
Containerization(docker)
IAM keycloak
Documentation tool
Upgrading mysql versions and replication
Shifting environments(UAT and QA) from windows to linux.
I am looking for cloud projects so that I can learn from it.
If you are a freelancer and working on any cloud project and need assistant. I am here to assist.
If any student needs help in his cloud project then I am also available for this.

https://redd.it/1l43yln
@r_devops

Offering Free Help: Azure/Terraform/Python DevOps Engineer Looking for Real Projects to Build Experience

Hi I am trying to gain Hands on experience
I hold 10 years of experience in IT operations,Devops support
I got azure architect and terraform associate certs and know containerization and Kubernetes
I am willing to gain experience and contribute for free.Based out of Canada

https://redd.it/1l49f0l
@r_devops

Specialise or diversify?

Hi all,

I have 4 yoe in public Cloud at one company which I joined through a training scheme. I’ve worked my way up to a more senior role, which I’ve just recently taken on.

My role is focused on Kubernetes admin. But there has been a lot of design as well because the platform is new, and I joined the team at the start of it- it’s 2 yrs in the making and going live early next year.

I also got a job offer for a senior SRE role externally. The application looks really interesting and is very large scale and has visibility. It would be good on my CV.

The main trade offs of taking it are - I would lose time off, and some other benefits, and the pay is slightly less and cannot be negotiated.

The other thing is I’d have to start potentially just 4 months after getting promoted.

Let me know if it’s worth it to diversify for someone in my position or if it’s better to continue to specialise and see the rest of the project through to production?

Thanks!

https://redd.it/1l4azic
@r_devops