Is your staging environment killing your DORA metrics? A look at dynamic sandboxes on K8s.

Hey everyone,

Wanted to share an article and get your thoughts on a common pain point. We've found that for teams running microservices on Kubernetes, the shared staging environment is often the biggest bottleneck impacting DORA metrics.

The post digs into:

* Why traditional staging fails at scale (contention, config drift).
* How dynamic, on-demand sandboxes provide high-fidelity testing.
* A direct mapping of this approach to improving all four DORA metrics.

Curious to hear how other teams are tackling this. Are you using ephemeral environments, feature flags, or something else?

Link to full article: [https://www.signadot.com/blog/how-dynamic-environments-unlock-elite-dora-performance-on-kubernetes](https://www.signadot.com/blog/how-dynamic-environments-unlock-elite-dora-performance-on-kubernetes)

https://redd.it/1mvzv8i
@r_devops

Only 2 environments for single developer project is enough?

I am working on a small Next js project. Coding in VS Code, code checked in to GitHub. Just wondering if local dev (for dev and testing) and Prod is enough as a safe and reliable setup? Thanks!

https://redd.it/1mw044k
@r_devops

Looking for advice on office server setup

Hey r/devops!

I've been tasked/volunteered for looking at a few options for an in-office server setup, specifically for our devs to have a lab to gain some experience with tech like k8s.

Our current hosting provider provides us with managed Windows VMs, and has quoted us a fairly high number for setting up a container environment (OpenShift). We're looking at how much it would cost to set some of that up in-office. This would not be for production workloads, but we do expect to run quite a few containers on it, including CI/CD, logging, monitoring, the works.

As far as specs, we figure we'd need a fairly fast CPU, 64GB RAM, 1TB SSD. We're looking to get 2 machines to at least be able to mess with an actual cluster. OS will probably be Rocky Linux to stay close to RHEL. NAS and router would be separate.

I figured we have a few categories to look in for these machines, and would like to get a price approximation for each of them:

Rack
Looks like this would get very expensive fast, and I have no idea where to look. Any advice on where to start with speccing this out would be most welcome.

Prebuilt desktop
64GB RAM is only available for the highest end PCs, so we'd probably be swapping that out. Decent spec without an expensive GPU is harder to find. Probably not a good option, but if anyone here knows of a good one I'd love to hear it.

Self built desktop
I can slap something together with PCPartPicker easily. Any advice on what CPU would be a good choice for this would be most welcome.

Mini PC
Something like an ASUS NUC 14 Pro+ would probably fit our needs, outfitted with 2x32GB RAM and a 1TB SSD. Total would be around €1000, so €2000 for 2 nodes

Any thoughts, suggestions and advice on what to do here would be most welcome!

https://redd.it/1mw5187
@r_devops

Daily tools for API Gateway & IaC – what can’t you live without?

Hey everyone, curious about what tools people rely on every day for managing API gateways and infrastructure as code.

Do you have go-to IaC frameworks (Terraform, Pulumi, others)?

How do you test APIs quickly?

Which API gateways do you actually use in production?

Any monitoring / secrets / queue tools that you swear by?


Would love to hear what actually works for you and why. Let’s make a list of real-world essentials.

https://redd.it/1mw82g0
@r_devops

StackGen acquires Opsverse

# OpsVerse is now StackGen. Bringing AI-Powered DevOps Intelligence to The Future of Infrastructure Management.

Read the story behind the the acquisition by StackGen CEO Sachin Aggarwal - https://www.linkedin.com/posts/sachinyaggarwal\_stackgen-opsverse-cloud-activity-7363932884505645056-MnEl?utm\_source=share&utm\_medium=member\_desktop&rcm=ACoAAB6IM1MBJXXZ9cjwpEgIwqXvHYUTthysvQY

https://redd.it/1mw7tgr
@r_devops

Authorization for non-human identities [free webinar on August 26]

Hi everyone, we’re hosting a session next week on how to secure service-to-service flows by applying authentication and fine-grained authorization for non-human identities.

This webinar will cover:

* NHI fundamentals and risks in pipelines and infra automation
* 5 common authentication methods for services and workloads
* Applying Zero Trust principles to DevOps workflows
* Fine-grained, method-level authorization for workloads and agents
* Delegated authorization and on-behalf-of identity handling
* How to unify policies and audits across your stack
* Broader NHI security strategies beyond authorization

The first half sets the context, the second half dives into technical patterns.


🗓 Tuesday, August 26, 6 pm CET / 9 am PDT
Registration link: [https://zoom.us/webinar/register/6817557795857/WN\_OHDM3rveSZ-pBD5ApU6gsw](https://zoom.us/webinar/register/6817557795857/WN_OHDM3rveSZ-pBD5ApU6gsw)

https://redd.it/1mw9og2
@r_devops

Our K8s dev tool got a lot of hate comments so we addressed some confusions people have

We're the creators of mirrord which is an open source tool that lets you test your code sooner by letting you run it in the context of your staging environment without actually going through CI pipelines or deploying anything. We published a blog recently called "Stop Deploying To Test" and people mistook our messaging thinking we're advocating for replacing testing in staging with our tool.


So we thought why not write a humorous post addressing some of those criticisms :) You can check it out here: https://metalbear.co/blog/mean-comments/ (some good devops drama)

https://redd.it/1mwbqk5
@r_devops

What is the most useful CLI command you use that others may not know about?

Because we name things dynamically, I always had some trouble figuring out the name of the CDK stack that I was deploying, and I was guessing a bit what it was. Then I found out about `cdk list` and it has made my life so much easier. Not super cool, but it just gives me directly what I need.

https://redd.it/1mwdpp6
@r_devops

Are people going to actually trust a service with all their Infra access?

I saw this article today and had a serious question about how teams were okay with this

We've been building in a similar space and had to open source our whole project because security and environments were so sensitive it was better to have teams own it through their own process

which is why I'm so baffled

what is community thoughts on this?

https://techcrunch.com/2025/08/20/sre-ai-launches-to-automate-complex-enterprise-workflows/

https://redd.it/1mwfmqo
@r_devops

Ridiculous take home assignment

A friend of mine (based in London) was just given this as a take home assignment after acing multiple interviews. Any senior devops engineer could do this, but some of us actually have jobs and weekends. "Approximately 3 hours" according to the recruiter, this had me laughing. Do they want LLM garbage quality terraform? All this for a measly 5 figure salary.

Companies are sickening.

Ridiculous assignment

Edit:

I'm surprised how many ego-high people there are here

https://redd.it/1mwh4zc
@r_devops

Junior platform engineer/ infrastructure engineer in fintech

I’m currently interviewing at a few financial firms, one being a global payments technology company and one being an hedge fund / quant trading midsize firm.

Both are junior/ associate roles as a platform and infrastructure engineerand I’m looking for a better idea on what compensation I should expect from these roles, yes I have searched levels.fyi and Glassdoor however both roles are fairly niche/new and there is not enough data on it.

For my context around me I have 1.5 years experience in a Devops environment and despite not working as an infrastructure or platform engineer I have “strong foundational knowledge” in both and expect to receive offers hopefully. I’m not solely going to make a decision based on the financials however I just want a better idea of what to expect and what is deemed “fair” in the financial industry.

I appreciate the read and help.

https://redd.it/1mwkdda
@r_devops

Devops Engineering in 2025

First of all, I am a Noob, Please Don't Make fun of me, I am just Starting to Learn Devops from Youtube wholeheartedly, B.tech IT pass out in 2020, Will I be able to Get a job in this era...
Should I learn this now or not?
I am little bit good with python only and Learning shell scripting from the base, Please Guide me If I will be able to get a job after 6-7 months in any Startup ? I mean Are there any Single Chance?
I am not Enrolling in any Paid course, Since Someone Told ne everything is already in youtube but what Actually scaring me is, Will I be able someday to get a single Job or not? Please Help or Guide me in any sense you can, Very Depressed Already

https://redd.it/1mwlkch
@r_devops

Security lessons from the CodeRabbit exploit: ops mistakes that open the biggest holes

The CodeRabbit exploit is another reminder that the biggest compromises often come from day-to-day operational gaps, not exotic zero-days. A few patterns that stood out:

* Storing secrets in env vars instead of a secrets manager (rotation becomes painful when things leak).
* Leaving servers with open outbound access to the entire internet.
* Running dev/test tools in production without sandboxing (e.g. linters, formatters).
* Collecting logs but never actually analyzing them for anomalies.
* CI/CD and infra roles with far too much privilege.

I pulled together some practical lessons for app teams that manage production systems:
[https://railsfever.com/blog/security-best-practices-web-apps-lessons-coderabbit-exploit/](https://railsfever.com/blog/security-best-practices-web-apps-lessons-coderabbit-exploit/)

https://redd.it/1mwps30
@r_devops

How do I get back in the game ?

I graduated University in Software Engineering back in 2023, and since then I've been traveling (mainly back home as I recently got married).

I'm now looking for a job .. but have noticed that it is an extremely tough market in general. I've had one year of internship experience where my title was a DevOps Engineer Intern, so I'm mostly looking at DevOps positions, and relevant roles.

I understand that the 2 year employment gap is a big red flag for recruiters, so my question is:

How do I get back in the game and make myself standout? Are there certain projects I should try to be doing? Are there books that I should be reading? I understand DevOps is more hands on experience rather than learning loads of material, but where and how do I start?

https://redd.it/1mwphnt
@r_devops

What are things you did that saved a lot of money to the company you worked for?

What are things you did that saved a lot of money to the company you worked for? I've been trying to look for some inefficiency in my infrastructure. Feel free to share.

https://redd.it/1mwsmc6
@r_devops

What is DevOps

I am interested in Full Stack but also IT and I asked chatgpt if there was something that combines both and it suggested Dev Ops.

What is DevOps?

https://redd.it/1mwy4ut
@r_devops

How do you folks usually audit your AWS setup? Any universal best practices?

Hey everyone,

I’ve been thinking about how to properly audit AWS infrastructure, not just a one-off checklist, but something that makes sense no matter what kind of setup you’re running (EC2, serverless, Kubernetes, etc.).

What I’m trying to figure out is:

What are the baseline things you always look at (security, compliance, costs, etc.)?
Do you guys lean on AWS-native stuff like Config, CloudTrail, GuardDuty, Security Hub, or do you bring in 3rd-party tools?
Do you follow any frameworks/checklists (CIS, Well-Architected Framework, etc.)?
And most importantly… do you treat audits as a one-time exercise or more of a continuous monitoring thing?

I’d love to hear how others are handling this in the real world. Any tips, horror stories, or lessons learned the hard way are more than welcome !!

https://redd.it/1mwzqu4
@r_devops

Typosquatting GitHub's Ghrc.io container registry

A user discovered an active container registry at ghrc.io, not ghcr.io, which is the official GitHub Container Registry. This reflects an escalation from typosquatting individual package names to targeting entire registries.
https://cloudsmith.com/blog/typosquatting-the-ghcr-registry

https://redd.it/1mx3eys
@r_devops

guidance and tips

i'm a network engineering student and next year will be the last year so i have to look for a 6month internship to finalize it , i've been wanting to get into devops and cloud for the past months but i still find myself lost and really at the beggining compared to my peers , they all doing those cka and azure and aws certifications and already applying for internships while i feel that i'm not ready yet to apply, i can't afford the same certifications they are doing or the plans they are enrolled to online , i really want some help to do projects and improve my portfolio so i can feel confident enough while applying to interviews.
is there any tips or projects or study plans i can do to improve myself in the following weeks to have chances in this competitive fields (free plz)

https://redd.it/1mx9dki
@r_devops

Is there any decent free SAST tool that scans your infrastructure code for issues and vulnerabilities?

Is there any decent free SAST tool that scans your infrastructure code for issues and vulnerabilities? I was looking for some, but all of them weren't open source or free to use.

https://redd.it/1mxarne
@r_devops

Looking for the best budget alternative to Hetzner CPX31 which costs ~23$

CPX31 has 4 AMD vCPUs 8 gigs of ram 40 gigs SSD 3TB bandwith. Want to host coolify, multiple apps and apis to reduce costs. Was thinking of OVH.. I would prefer a US instance but I'm fine with europe.

https://redd.it/1mxbi89
@r_devops