Buying Kodkloud Subscription

If anyone is interested in buying Kodkloud pro Subscription together, ping me up.
We can buy together and share the credentials.

https://redd.it/1mdqsmj
@r_devops

What are the most useful WSLg applications you use at work?

I am running docker on WSL2 and I was wondering what are the best applications to use that allows you to run a GUI app on Windows? I downloaded GitKraken, but I realized it wasn't open source and had to find something else. Aside git tools, is there anything else I should get?

https://redd.it/1mdom12
@r_devops

Looking for advice about cloud setup for start

We tried free tier 1 vCPU and 1 GB RAM, that was bad. We decided to find cheap and powerful VPS and found one. This setup we selected and we don't sure that this is enough for start: 4 vCPU, 8 GB RAM, 80 GB disk. Will it be good for production for complex API, App build, DB, cache, message broker and web server (5 containers at all)? We wish to accept hundreds of users per first days, maybe more. If it would be not enough in the future, we gonna migrate to bigger one.

https://redd.it/1mdxkyo
@r_devops

Keeping up with new technologies

I am a 26M working as a devops engineer from 5 years on On premise platform. I have never worked on cloud , I have experience with sonarqube, git , artifactory,etc. But with AI coming into picture nowadays and cloud is also everywhere. Lately , I am feeling like a lot behind . Please tell me what to do and where to start

https://redd.it/1mdyp58
@r_devops

Simple Checklist: What are REST APIs?

https://lukasniessen.medium.com/simple-checklist-what-are-rest-apis-755b7565aa8e

https://redd.it/1mdzzsf
@r_devops

Migrating from Docker Content Trust to Sigstore

Starting on August 8th, 2025, the oldest of Docker Official Images (DOI) Docker Content Trust (DCT) signing certificates will begin to expire. If you publish images on Docker Hub using DCT today, the team at Docker are advising users to start planning their transition to a different image signing and verification solution (like Sigstore or Notation). The below blog should provide some additional information specific to Sigstore:
https://cloudsmith.com/blog/migrating-from-docker-content-trust-to-sigstore

https://redd.it/1me1237
@r_devops

Is there an ansible courses on internet?

I was looking for an ansible course on internet It covers advanced topics like ansible galaxy and i did not find anything

https://redd.it/1me3hxv
@r_devops

What do you think of a less corporate resume?

I've been toying with the Idea of a less corporate resume. I've learned a lot about copywriting (persuasion through text) and its all about getting the most value out of the least, easy to understand words.

My resume has turned into some corporate jargon bs to hit all the parsing algo key words, and its so boring to read even for myself.

Here are my now two resumes, one with all the buzzwords and one with plain english describing outcomes.

Which one would you prefer?

Plain English RESUME
--------------------------

Professional Experience

Site Reliability Engineer - USDA DISC | Company Sept 2024 - Present

Built a reusable Terraform setup to deploy EKS clusters in highly secure (FedRAMP High) AWS environments. Teams only need to add a terraform.tfvars file to their project. GitLab CI handles the rest, getting secrets from Vault and running the deployment.
Replaced manual Linux patching across 4,000 servers with an automated Ansible process in Ansible Automation Platform. Saved about 40 hours of work each month and cut patching downtime from 6 hours to 2.
Automated the creation of VM images in AWS and Azure using Packer. Cut image build time by 40% and saved around $4,000/month in labor.
Set up CI/CD pipelines with built-in testing to speed up deployments and reduce human error across on-prem infrastructure.
Used Datadog to track system health and alert on problems early before they caused downtime.

Platform Engineer | Company Jan 2022 - Sept 2024

Trained 3 junior engineers and helped them become fully independent contributors on client projects.
Led cloud infrastructure work for a Microsoft Azure data platform holding 100+ TB of sensitive healthcare data (PHI, PII, CUI).
Wrote a Terraform modules to deploy Azure Data Factory and Synapse Analytics behind a VPN with custom DNS access.
Built Terraform setups for Azure ML across dev, test, and prod environments, including all networking, IAM, and workspace setup.
Created and maintained a shared Terraform module library to speed up Azure deployments. Added automated tests to catch issues before rollout.
Comanaged GitHub Cloud for the company. Enforced security practices like signed commits, protected branches, secret scanning, and approval rules.
Built an AI-driven app on AWS that listens to doctor-patient conversations and generates SOAP notes automatically, saving doctors time on paperwork.

Data Scientist Intern | Company Jun 2020 - Jan 2022

Maintained and improved a full-stack demo app that ran machine learning models in Docker containers on AWS Lambda.
Built a Kubernetes-based simulation of an emergency room using JavaScript, Python, and synthetic data. Deployed with Helm on EKS.
Secured internal web apps on Kubernetes using OKTA (OIDC) and APISIX to handle user logins and keep data private.

Certifications, Education, & Clearance

AWS Solutions Architect Associate 003 (AWS SAA-003)
Bachelor’s, Computer Science, Rowan University Sept 2018 - Dec 2021
High Risk Public Trust Clearance (T4)

Projects

EKS (https://github.com/jgeissler14/eks ) - Leveraged Terraform for provisioning EKS cluster running ArgoCD         App-of-apps to be used as a lab. Set up Prometheus and Grafana to monitor service health.
Homelab (https://github.com/jgeissler14/homelab ) - Virtualized an old laptop with Proxmox hypervisor then installed k3s with ansible. Currently running - fluxcd, cloudnativepg, kube-prometheus-stack, homepage, external-dns
Youtube [https://www.youtube.com/@joshgeissler](https://www.youtube.com/@joshgeissler) \- Documenting Interesting things I build to share with others

----------------------------
Corporate Normal Resume
------------------------------

Professional Experience

Site Reliability Engineer - USDA DISC | Company Sept 2024 - Present

Designed a templated EKS deployment for our MSP to deploy an EKS Cluster in FEDRAMP high environments with VPC CNI configured with custom networking. Deployments require a

single terraform.tfvars file to be placed in any of over 50 customer repositories, then Gitlab CI would retrieve credentials from Hashicorp Vault and deploy the EKS cluster automatically.
Enhanced USDA DISC’s patching process across 4,000 linux servers in a multicloud environment by developing a scheduled ansible template in Ansible Automation Platform(AAP), saving 40 labor hours per month and downtime from 6 hours to 2 hours on average
Automated VM image creation on Azure and AWS with Hashicorp Packer, reducing PaaS build times by 40% while saving \~$4000/month in labor hours
Established CI/CD pipelines with integrated automated testing, increasing deployment velocity, reducing toil, and improving consistency across data center operations
Utilized Datadog for comprehensive system monitoring and alerting, enabling proactive issue resolution and minimizing downtime

Platform Engineer | Company Jan 2022 - Sept 2024

Led modern data platform efforts on Microsoft Azure and Terraform, storing 100TB+ of sensitive data (PHI, PII, CUI) 
Developed a terraform module to automate deployments of azure data factory and synapse analytics accessible only via VPN integrated directly with enterprise custom DNS
Created terraform deployments for multi env (dev, qat, uat, prod) of Azure ML for multiple teams including networking topology, access control, notebook development
Mentor and provide technical leadership to a team of engineers, growing multiple individuals into independent contributors serving clients
Established and managed an enterprise innersource Terraform library, accelerating deployment speed and reducing IT workload by standardizing Azure modules for development teams. Implemented terraform test to ensure module reliability and scalability across deployments
Shared admin responsibilities of enterprise github cloud organization, enforcing and educating on best practices including gpg signed commits, branch protections, secret management, and approval workflows
Created an event-driven transcription application on AWS, utilizing AI services to automatically generate SOAP summaries and transcriptions from patient-doctor conversations. This streamlined process reduced manual documentation time for healthcare practitioners, enhancing operational efficiency and data accuracy

Data Scientist Intern | Company Jun 2020 - Jan 2022

Operated and enhanced full stack web application hosting client demos consisting of various machine learning models run as docker containers in a fully serverless environment on AWS
Leveraged AWS and Kubernetes to provision a digital twin of an emergency room using Javascript, Python API server, and synthetic data generator on EKS as Helm charts
Secured multiple Single-Page Applications (SPAs) on kubernetes with OKTA OIDC via APISIX, ensuring robust user authentication and data security

Certifications, Education, & Clearance

AWS Solutions Architect Associate 003 (AWS SAA-003)
Bachelor’s, Computer Science, Rowan University Sept 2018 - Dec 2021
High Risk Public Trust Clearance (T4)

Projects

EKS (https://github.com/jgeissler14/eks) - Leveraged Terraform for provisioning EKS cluster running ArgoCD         App-of-apps to be used as a lab. Set up Prometheus and Grafana to monitor service health.
Homelab (https://github.com/jgeissler14/homelab) - Virtualized an old laptop with Proxmox hypervisor then installed k3s with ansible. Currently running - fluxcd, cloudnativepg, kube-prometheus-stack, homepage, external-dns
Youtube https://www.youtube.com/@joshgeissler \- Documenting Interesting things I build to share with others

https://redd.it/1me4dko
@r_devops

Should I Accept DevOps Role to Break into Cloud Dev???

I am a new grad and my manager gave me the choice of two teams, a devops team and a development(full stack) team. I didnt want to do devops at first because it doesn't sound like too much coding to me, but I did hear the devops manages a lot of cloud stuff. My goal is to be a cloud engineer, so is devops a good way to break into that and get cloud roles?

https://redd.it/1me9caf
@r_devops

Can I make it into Devops

I am a 24F currently working in a MNC since 2 years. I work and support an application which runs on old technology for a Canadian based company. Recently our client decided to move all the jobs running on an age old platform to AWS. I was choosen to be the POC and also the testing support for the migration. My job has pretty much been to communicate our application requirements to the AWS devops team and also to test multiple scenarios based on what is required from us and what they have developed. Ours is a very huge application it has been there IDK for almost 30years or something. So this a pretty good experience I am gaining both to know my application deeper, also to explore AWS.
After working with the team and devops people, I liked what they're doing and how they're able to find solution for almost every requirement I bring up. Now my question is, can I make a transition into Devops career. If yes, how? And would this experience I am working would actually help me if I move into AWS. Also can you please provide me some insights based on the job market situation that is currently there.

https://redd.it/1mech0e
@r_devops

PR reviews got smoother when we started writing our PR descriptions like a changelog

Noticed that our team gave better feedback when we formatted pull request like a changelog entry: headline, context, rationale, and what to watch for.

It takes an extra few minutes, but reduces back-and-forth and gets reviewers aligned faster.

Curious if others do something similar. How do you write helpful PRs?

https://redd.it/1meeev4
@r_devops

AI Knows What Happened But Only Culture Explains Why

Blameless culture isn’t soft, it’s how real problems get solved.

A blameless retro culture isn’t about being “soft” or avoiding accountability. It’s about creating an environment where individuals feel safe to be completely honest about what went wrong, without fear of personal repercussions. When engineers don’t feel safe during retros, self-protection takes priority over transparency.

Now layer in AI.

We’re in a world where incident timelines, contributing factors, and retro documents are automatically generated based on context, timelines, telemetry, and PRs. So here’s the big question we’re thinking about: how does someone hide in that world?

Easy - they omit context. They avoid Slack threads. They stay out of the incident room. They rewrite tickets or summaries after the fact. If people don’t feel safe, they’ll find new ways to disappear from the narrative, even if the tooling says otherwise.

This is why blameless culture matters more in an AI-assisted environment, not less. If AI helps surface the “what,” your teams still need to provide the “why.”

https://redd.it/1meeqxu
@r_devops

Use Terragrunt or remain Vanilla tf?

Hi there. We have 5 environments, 4 AWS regions, and an A/B deployment strategy. I am currently about 80% through migrating our IaC from generated CF templates to terraform. Should I choose to refactor what I already have to terragrunt or stay purely terraform based off the number of environment permutations? (Permutations consisting of env/region/A|B)

Another thing I want to ask about is keeping module definitions in repositories outside of live environment repositories. Is that super common now? I guess the idea is to use a specific ref of the module so that you can continue to update the module without breaking environments already built using a previous version.

Currently, our IaC repos for tf include:
App A
App B
App C
Static repo for non A/B resources like VPCs
Account setup repo for one-time resources/scripts

For everything except for the account setup repo, I am guessing we should have two repos, one for modules, the other for live environments. Does that sound like good practice?

Thank you for your time! Have a good one

https://redd.it/1mefgeq
@r_devops

5 year career gap. What to do

From the UK. Have around 7 years experience as a devops engineer. Went abroad for 5 years to live/study abroad...a completely unrelated side passion I wanted to pursue.

What advice do you have considering the current job market. I only have experience with AWS for cloud.

Haven't worked much with kubernettes. Any courses/certs I should do, would they even help?

I remember back in the day using Linux academy, was really helpful. Is that the current go to or any alternatives. I prefer labs that create the environment rather than installing everything on my machine

Thanks

https://redd.it/1meiupz
@r_devops

Any Advice - Trying to switch career

Hello there,

I’m currently working as an IT Support Specialist with about 1.5 years of experience. I have certifications in CompTIA A+, Security+, and CCNA, and I also have an associates degree in system and network administration.

I’ve recently decided to transition into a DevOps career and would love some guidance from those already in the field. I’ve started re-learning Linux (Just installed Rocky Linux on VirtualBox), I am comfortable with Windows Server (AD, DNS, DHCP), basic understanding and knowledge of PostgreSQL, Bash scripting.

I can dedicate around 30–35 hours per week to learning and working on projects. I’d really appreciate any advice - What tools/technologies I should prioritize learning, What real-world projects I could build to show off my skills? What certifications or online resources you recommend? Any tips for breaking into my first DevOps role?

Any advice is much appreciated. Thank you everyone in advance!

https://redd.it/1mekibj
@r_devops

Rabbitmq read queue

Can anyone point me in the right direction?

I have a confirmed functional system.

I am looking to temporarily disable the consumer (I don’t have access to it) so that I can read the queue messages coming from a system I do have access to.

Long story short, I need to carve out the consumer long term, so I am working on a new snap-logic consumer. I just need to get these messages first.

I have tried to adjust the admin user on that connection to be read only, but doesn’t seem to stop them from consuming.

Again, I just need a simple way to disable, capture, and re-enable from the admin panel.

https://redd.it/1meoy7y
@r_devops

How to Drive Modernization in a Container-Averse, Traditional Hosting Environment?

I've recently joined a large, traditional hosting provider and have run into a fascinating cultural and technical challenge. I'm hoping to get some strategic advice from those who have been in similar situations.

Some context: Our core business is provisioning custom server environments for a wide range of clients. A typical request involves setting up VMs for database clusters (Patroni/Postgres, MariaDB), web servers, message queues (Kafka/RabbitMQ), mail servers, etc...

The technology stack is almost exclusively VM-based (mostly manual setup), with configuration managed by Ansible. While it "works" and is profitable, it's incredibly inefficient. A simple vhost setup, in the worst case, can take the better part of a day, and a recent OS/database migration took me four days of largely manual work (since I had to upgrade the OS of every server manually). From my previous container-native roles, I know this could be done in a fraction of the time.

The company is growing rapidly, and I don't see how the current model can scale without a significant increase in manual effort and human error. It seems to me that they try to throw more people at the problems, without fixing the root causes of our inefficiency.

There is a deep-seated resistance against containers. Whenever I bring up containerization as a path to efficiency, I'm met with resistance from senior engineers and management. Their arguments are rooted in concerns that are valid for a multi-tenant hosting provider:

1. Security Risk (Shared Kernel): The primary argument is that the shared kernel model is an unacceptable security risk. They fear that a container escape/kernel exploit from one customer could compromise the entire host and affect all other tenants. Full VM isolation is seen as the only truly secure option.
2. Stability Risk (Single Point of Failure): There's a belief that a container runtime failure (e.g., containerd) would bring down all containers on a host simultaneously, whereas VMs are isolated from such failures.

We have an internal Kubernetes team, but they only provide the cluster infrastructure itself; they are not involved in deploying customer applications onto it for the very same reasons mentioned above.

I want to be a positive force for modernization, not just a frustrated engineer. How would you approach this situation?

1. Have you successfully introduced containerization into a similar security-focused, traditional environment? What were the key arguments or "first steps" that actually gained traction?
2. How do you effectively counter the "shared kernel" security argument in a multi-tenant context? Are technologies like Kata Containers or gVisor a realistic "bridge" to propose, offering VM-level security with a container workflow?
3. What's a good strategy for building a business case that senior engineers and management will listen to? How do you balance the proven stability of the "old way" against the efficiency gains of a new paradigm they perceive as risky?

https://redd.it/1mepsx3
@r_devops

Testing firewall rules

Hi,

Not the first time I'm facing a situation where I need to test that firewall block/allow communication between x and y

Now with api-gateway, zero-trust stuff and so on, there are more and more options to allow/disallow communication.
Coming from the dev world, my initial idea is to have some kind of integration test that verify implementation and monitor that an access that should be closed is suddenly open for whatever reason (FW miss config for example)

Do any of you do something like that and if yes, how.
Mixed of windows and linux environment, but mostly windows

https://redd.it/1meqok8
@r_devops

Sparrow as a drop-in replacement for Ansible

Sparrow is a lightweight automation framework that could be used as drop-in replacement to Ansible or other frameworks suffering from complexity and extra abstraction layers. Sparrow could be an efficient glue allowing people use their preferable scripting languages (Bash/Perl/Python) while adding useful features via Sparrow SDK - scripts configuration, testing, distribution
Read quick start tutorial on Sparrow automation framework. How to quickly develop CLI utils using Bash and Sparrow - https://github.com/melezhik/Sparrow6/blob/master/posts/CliAppDevelopement.md

https://redd.it/1meqx5n
@r_devops

How do your developers currently test changes that affect your database?

Gg

View Poll

https://redd.it/1messmt
@r_devops