Application release flow via AWS + CI/CD

Hi!

My name is Gleb and I’m not a DevOps engineer, so I’d love an expert sanity-check.

I’m building a mobile product that recommends movies (think swipe/feed style). There’s a small backend API and a mobile client. It’s an early-stage app: single-developer setup, limited time for ops, and I need a stable, low-maintenance deployment for dev and prod. Audience is multilingual (mostly Europe, plus US and parts of Asia), so I care about reasonable latency and a straightforward path to scale later. For now traffic is modest; reliability matters more than squeezing every dollar.

My first deployment flow (scripted VM + copying build artifacts over SSH) kept failing during dependency install on shared CI runners (timeouts/hangs). I’ve since moved to a containerized approach with a managed runtime and a more formal CI/CD pipeline. A helper (ChatGPT) proposed a setup that uses a container registry, a managed container runtime, a load balancer with TLS, and a dedicated CI runner VM. Rough sizing suggested \~12 vCPU total across everything so deployments run smoothly; the ballpark monthly cost at full utilization looked noticeable for an early product.

What I’m looking for: a quick validation whether this direction is sensible for my stage, or a simpler “golden-mean” alternative. I’m not chasing the absolute cheapest bill; I want something reliable, easy to operate, and not over-engineered.

If anyone can briefly validate this approach or point me to a simpler, stable pattern for my stage, I’d really appreciate it.

Answers from gpt:
**Short:** Bumping to **12 vCPU** is the optimal next step. If you want headroom for growth/spikes — go with **16 vCPU**.
**Why 12 vCPU is the “sweet spot”**We size for the peak during a deploy (prod tasks + migration + runner build happening at once):

* **Runner (EC2):** **4 vCPU** — fast builds, concurrent=2
* **Prod (ECS Fargate):** **3 tasks × 1 vCPU = 3 vCPU** (baseline for smooth rolling deploys and HA)
* **Deploy surge** (if deploymentMaximumPercent=200): **+3 vCPU** (temporarily up to 6 tasks × 1 vCPU)
* **Migrate one-off:** **1 vCPU**
* **Dev:** **0.5 vCPU**

Worst-case total ≈ **11.5 vCPU** → round up to **12 vCPU**.

**Suggested allocation**

* **Runner:** **4 vCPU / 16 GB RAM**, concurrent=2
* **Prod:** **min=3 tasks × 1 vCPU / 2–3 GB RAM**, **max=6** (CPU target \~60%)
* **Dev:** **1 task × 0.5 vCPU / 1 GB RAM**
* **Migrate:** **1 vCPU / 2 GB RAM** (one-off during deploy)

>RDS is calculated separately (not in this budget). Remember Fargate CPU↔RAM valid combos:

>**0.5 vCPU → 1–4 GB; 1 vCPU → 2–8 GB; 2 vCPU → 4–16 GB.**

https://redd.it/1mvhbys
@r_devops

How are you guys handle availability after working hours/ weekend expectations. I'm disappointed about myself.

Initially I had much passion towards DevOps. I really liked Kubernetes and learned it for 3 months and got the CKA. Then learned about cloud technologies and did some projeccts. I really liked the system design aspects that comes with DevOps specially like connecting building blocks with each other.

In my current job however, my manager and client expects me to even available after working hours. Also sometimes having weekend activities as well. May be few days per month is fine by me. Problem is sometime it goes like 2/3 days per week. I have to stretch beyond my working hours and work.

I don't like this much. In my previous job I had a better work life balance with lesser stress.

I'm actualy a person who believes in work-life balance at least to some extent.

These regular after working hours and weekend activities are stressing me out. I just lost interest about my hobbies and even DevOps as well most of the times.

I'm just thinking, what's the point of working like this, a stressful, and always busy kind of a job.

I was good at maths and coming from an engineering background. Sometimes I wonder I should've gone to a SE role or a Data science role, where there might be a better work life balance compared to this role.

Feel like maybe this is not a career for me and I wasted my life. I even applied for few jobs, and most of them are expecting on-call availability and after working hours support.

At this point I'm just loosing the motivation towards my career and starting to be disspaointed about myself.

Is DevOps like this?? Are you guys having the same experience.

https://redd.it/1mvjimo
@r_devops

Looking for feedbacks on my Cloud DevOps resume

Hi everyone,

I’m applying for Cloud/DevOps Engineer roles with a heavy focus on AWS and would really appreciate feedback on my resume. I’ve tried to highlight both technical experience and measurable impact , as well as some client-facing work.

Any suggestions to make it stronger for Recruiters/Hiring Managers/ATS?

Feel free to roast it

Resume: https://imgur.com/a/8FRorXr

https://redd.it/1mvkb9s
@r_devops

Looking for a mentor

I’m a 22-year-old Networks & Telecommunications engineering student, and last year I decided to specialize in DevOps (maybe partly because of the hype around it). Since then, I’ve learned Linux, Docker, a bit of Kubernetes, and monitoring with Grafana/Prometheus. I also explored some backend development with NestJS and TypeORM.

The problem is: I don’t feel proficient in anything. Not DevOps, not web dev, not even Linux system administration—there’s always so much more to learn, and I often rely on LLMs to solve problems, which makes me forget things quickly.

I also haven’t built any real DevOps projects or finished a full dev project. Now I’m worried because I only have one year left before I need to find an end-of-study internship—ideally in Europe, since that could open up a lot of opportunities (I’m based in Tunisia).

On top of that, I have a KodeKloud Cloud subscription that I haven’t used fully. I only went through “Linux for Beginners,” “Docker for Absolute Beginners,” “Kubernetes for Beginners,” and started the Nginx course but never finished it. My subscription expires on October 25.

I don’t want to be just a “tool guy.” Yes, I want to learn the tools, but I also want to understand them internally.

Any advice on how I should focus my time, get hands-on experience, and use the most out of KodeKloud before my subscription ends? And especially—if anyone is willing to mentor me through this year, I’d really appreciate it.

https://redd.it/1mvii47
@r_devops

“We keep fixing symptoms, not causes.” — Priya, Staff Engineer, 41 incidents into Q2.

https://oneuptime.com/blog/post/2025-08-21-logs-traces-metrics-before-and-after/view

https://redd.it/1mvm0y6
@r_devops

Suggest me good coaching institues for devops, or related to cloud in pune?

# Suggest me good coaching institues for devops, or related to cloud in pune?

https://redd.it/1mvsnr8
@r_devops

If I hate sysadmin will I hate devops

Hello everyone , I have worked in IT for last 10 years. Currently a Sys admin for a med tech company.

We have a devops department and I think my next career move would be to pivot into dev ops.

I have a lot to learn and am currently doing the Udemy DevOps beginner to advanced course in my spare time .

My question is, given that I hate being a sys admin, is devops any better or just the same with different responsibilities. The main things I hate are endless meetings, a million different things to do in one day, stress and feeling like I have to speak to 1000 different people to get something done as everything requires approval . Also office politics



https://redd.it/1mvw6py
@r_devops

Is your staging environment killing your DORA metrics? A look at dynamic sandboxes on K8s.

Hey everyone,

Wanted to share an article and get your thoughts on a common pain point. We've found that for teams running microservices on Kubernetes, the shared staging environment is often the biggest bottleneck impacting DORA metrics.

The post digs into:

* Why traditional staging fails at scale (contention, config drift).
* How dynamic, on-demand sandboxes provide high-fidelity testing.
* A direct mapping of this approach to improving all four DORA metrics.

Curious to hear how other teams are tackling this. Are you using ephemeral environments, feature flags, or something else?

Link to full article: [https://www.signadot.com/blog/how-dynamic-environments-unlock-elite-dora-performance-on-kubernetes](https://www.signadot.com/blog/how-dynamic-environments-unlock-elite-dora-performance-on-kubernetes)

https://redd.it/1mvzv8i
@r_devops

Only 2 environments for single developer project is enough?

I am working on a small Next js project. Coding in VS Code, code checked in to GitHub. Just wondering if local dev (for dev and testing) and Prod is enough as a safe and reliable setup? Thanks!

https://redd.it/1mw044k
@r_devops

Looking for advice on office server setup

Hey r/devops!

I've been tasked/volunteered for looking at a few options for an in-office server setup, specifically for our devs to have a lab to gain some experience with tech like k8s.

Our current hosting provider provides us with managed Windows VMs, and has quoted us a fairly high number for setting up a container environment (OpenShift). We're looking at how much it would cost to set some of that up in-office. This would not be for production workloads, but we do expect to run quite a few containers on it, including CI/CD, logging, monitoring, the works.

As far as specs, we figure we'd need a fairly fast CPU, 64GB RAM, 1TB SSD. We're looking to get 2 machines to at least be able to mess with an actual cluster. OS will probably be Rocky Linux to stay close to RHEL. NAS and router would be separate.

I figured we have a few categories to look in for these machines, and would like to get a price approximation for each of them:

Rack
Looks like this would get very expensive fast, and I have no idea where to look. Any advice on where to start with speccing this out would be most welcome.

Prebuilt desktop
64GB RAM is only available for the highest end PCs, so we'd probably be swapping that out. Decent spec without an expensive GPU is harder to find. Probably not a good option, but if anyone here knows of a good one I'd love to hear it.

Self built desktop
I can slap something together with PCPartPicker easily. Any advice on what CPU would be a good choice for this would be most welcome.

Mini PC
Something like an ASUS NUC 14 Pro+ would probably fit our needs, outfitted with 2x32GB RAM and a 1TB SSD. Total would be around €1000, so €2000 for 2 nodes

Any thoughts, suggestions and advice on what to do here would be most welcome!

https://redd.it/1mw5187
@r_devops

Daily tools for API Gateway & IaC – what can’t you live without?

Hey everyone, curious about what tools people rely on every day for managing API gateways and infrastructure as code.

Do you have go-to IaC frameworks (Terraform, Pulumi, others)?

How do you test APIs quickly?

Which API gateways do you actually use in production?

Any monitoring / secrets / queue tools that you swear by?


Would love to hear what actually works for you and why. Let’s make a list of real-world essentials.

https://redd.it/1mw82g0
@r_devops

StackGen acquires Opsverse

# OpsVerse is now StackGen. Bringing AI-Powered DevOps Intelligence to The Future of Infrastructure Management.

Read the story behind the the acquisition by StackGen CEO Sachin Aggarwal - https://www.linkedin.com/posts/sachinyaggarwal\_stackgen-opsverse-cloud-activity-7363932884505645056-MnEl?utm\_source=share&utm\_medium=member\_desktop&rcm=ACoAAB6IM1MBJXXZ9cjwpEgIwqXvHYUTthysvQY

https://redd.it/1mw7tgr
@r_devops

Authorization for non-human identities [free webinar on August 26]

Hi everyone, we’re hosting a session next week on how to secure service-to-service flows by applying authentication and fine-grained authorization for non-human identities.

This webinar will cover:

* NHI fundamentals and risks in pipelines and infra automation
* 5 common authentication methods for services and workloads
* Applying Zero Trust principles to DevOps workflows
* Fine-grained, method-level authorization for workloads and agents
* Delegated authorization and on-behalf-of identity handling
* How to unify policies and audits across your stack
* Broader NHI security strategies beyond authorization

The first half sets the context, the second half dives into technical patterns.


🗓 Tuesday, August 26, 6 pm CET / 9 am PDT
Registration link: [https://zoom.us/webinar/register/6817557795857/WN\_OHDM3rveSZ-pBD5ApU6gsw](https://zoom.us/webinar/register/6817557795857/WN_OHDM3rveSZ-pBD5ApU6gsw)

https://redd.it/1mw9og2
@r_devops

Our K8s dev tool got a lot of hate comments so we addressed some confusions people have

We're the creators of mirrord which is an open source tool that lets you test your code sooner by letting you run it in the context of your staging environment without actually going through CI pipelines or deploying anything. We published a blog recently called "Stop Deploying To Test" and people mistook our messaging thinking we're advocating for replacing testing in staging with our tool.


So we thought why not write a humorous post addressing some of those criticisms :) You can check it out here: https://metalbear.co/blog/mean-comments/ (some good devops drama)

https://redd.it/1mwbqk5
@r_devops

What is the most useful CLI command you use that others may not know about?

Because we name things dynamically, I always had some trouble figuring out the name of the CDK stack that I was deploying, and I was guessing a bit what it was. Then I found out about `cdk list` and it has made my life so much easier. Not super cool, but it just gives me directly what I need.

https://redd.it/1mwdpp6
@r_devops

Are people going to actually trust a service with all their Infra access?

I saw this article today and had a serious question about how teams were okay with this

We've been building in a similar space and had to open source our whole project because security and environments were so sensitive it was better to have teams own it through their own process

which is why I'm so baffled

what is community thoughts on this?

https://techcrunch.com/2025/08/20/sre-ai-launches-to-automate-complex-enterprise-workflows/

https://redd.it/1mwfmqo
@r_devops

Ridiculous take home assignment

A friend of mine (based in London) was just given this as a take home assignment after acing multiple interviews. Any senior devops engineer could do this, but some of us actually have jobs and weekends. "Approximately 3 hours" according to the recruiter, this had me laughing. Do they want LLM garbage quality terraform? All this for a measly 5 figure salary.

Companies are sickening.

Ridiculous assignment

Edit:

I'm surprised how many ego-high people there are here

https://redd.it/1mwh4zc
@r_devops

Junior platform engineer/ infrastructure engineer in fintech

I’m currently interviewing at a few financial firms, one being a global payments technology company and one being an hedge fund / quant trading midsize firm.

Both are junior/ associate roles as a platform and infrastructure engineerand I’m looking for a better idea on what compensation I should expect from these roles, yes I have searched levels.fyi and Glassdoor however both roles are fairly niche/new and there is not enough data on it.

For my context around me I have 1.5 years experience in a Devops environment and despite not working as an infrastructure or platform engineer I have “strong foundational knowledge” in both and expect to receive offers hopefully. I’m not solely going to make a decision based on the financials however I just want a better idea of what to expect and what is deemed “fair” in the financial industry.

I appreciate the read and help.

https://redd.it/1mwkdda
@r_devops

Devops Engineering in 2025

First of all, I am a Noob, Please Don't Make fun of me, I am just Starting to Learn Devops from Youtube wholeheartedly, B.tech IT pass out in 2020, Will I be able to Get a job in this era...
Should I learn this now or not?
I am little bit good with python only and Learning shell scripting from the base, Please Guide me If I will be able to get a job after 6-7 months in any Startup ? I mean Are there any Single Chance?
I am not Enrolling in any Paid course, Since Someone Told ne everything is already in youtube but what Actually scaring me is, Will I be able someday to get a single Job or not? Please Help or Guide me in any sense you can, Very Depressed Already

https://redd.it/1mwlkch
@r_devops

Security lessons from the CodeRabbit exploit: ops mistakes that open the biggest holes

The CodeRabbit exploit is another reminder that the biggest compromises often come from day-to-day operational gaps, not exotic zero-days. A few patterns that stood out:

* Storing secrets in env vars instead of a secrets manager (rotation becomes painful when things leak).
* Leaving servers with open outbound access to the entire internet.
* Running dev/test tools in production without sandboxing (e.g. linters, formatters).
* Collecting logs but never actually analyzing them for anomalies.
* CI/CD and infra roles with far too much privilege.

I pulled together some practical lessons for app teams that manage production systems:
[https://railsfever.com/blog/security-best-practices-web-apps-lessons-coderabbit-exploit/](https://railsfever.com/blog/security-best-practices-web-apps-lessons-coderabbit-exploit/)

https://redd.it/1mwps30
@r_devops

How do I get back in the game ?

I graduated University in Software Engineering back in 2023, and since then I've been traveling (mainly back home as I recently got married).

I'm now looking for a job .. but have noticed that it is an extremely tough market in general. I've had one year of internship experience where my title was a DevOps Engineer Intern, so I'm mostly looking at DevOps positions, and relevant roles.

I understand that the 2 year employment gap is a big red flag for recruiters, so my question is:

How do I get back in the game and make myself standout? Are there certain projects I should try to be doing? Are there books that I should be reading? I understand DevOps is more hands on experience rather than learning loads of material, but where and how do I start?

https://redd.it/1mwphnt
@r_devops