This Week in DevOps

This weeks newsletter is out and as always I'd love to get some feedback on the style, format and content. Did you find it useful? Is there anything else you'd like to see covered? Any other suggestions?

Ideally I'd like this to be a community shaped newsletter offering maximum value for the least time investment possible. We all have too much to keep up with these days anyway, and I don't want this to be one more thing. Instead I'd like to replace the other sources you currently use to keep up to date on the cloud and give you one clear concise source that covers everything.

Have a look at this weeks edition and let me know what I can do to improve.

[https://thisweekindevops.com/2020/03/03/weekly-roundup-march-2nd-2020/](https://thisweekindevops.com/2020/03/03/weekly-roundup-march-2nd-2020/)

https://redd.it/fcxb6t
@r_devops

Basic way to setup Node/Express/MySQL from one liner CLI on EC2

So I have a backend written in as per the tittle. One main concern is usually it's like "alright please install MySQL and create a user with full privileges" then run this seed file that will generate the database/all the tables.

So I'm looking for a way to get all that running(install Node, run npm install, install MySQL, run seeder)

I've been doing these manually but trying to setup something so I can leave this thing for other developers who may not know how to setup MySQL.

Side note: I currently use systemd to run the node app and it handles cers within my index.js regarding the https part.

I'm also aware some IAMs have specific stacks. But I am just looking at a little Ubuntu server.

Any info is appreciated

https://redd.it/fcw7bi
@r_devops

How to create an on-call schedule that doesn’t suck.

Here's a post on how to create an effective on-call schedule for small startup teams, to the ones that span across multiple teams in multiple timezones and flexible rotations at an enterprise.

[https://blog.fyipe.com/how-to-create-an-on-call-schedule-that-doesnt-suck/](https://blog.fyipe.com/how-to-create-an-on-call-schedule-that-doesnt-suck/)

https://redd.it/fcx4z7
@r_devops

Static Code Analysis in R

Hello Fellow members, I am using RStudio-1.2.5033 and R version 3.3.2 (2016-10-31). I am looking for a tool or a package that does static analysis of ".R" files . I was wondering whether there is a package like there is pylint, pyflakes etc. for python.

I did my research on this and found a Package called ' CodeDepends' but that doesn't support version-3.3.2 and found another one called 'codetools'. Right now I am looking at the 'codetools' package and seeing how that works with a ".r" file.

I am referring to this link:

[https://stat.ethz.ch/R-manual/R-patched/library/codetools/html/00Index.html](https://stat.ethz.ch/R-manual/R-patched/library/codetools/html/00Index.html)

https://redd.it/fcrsap
@r_devops

PoP: Concurrency vs Parallelism in Systems Design

Episode 85 of the Practical Operations Podcast is out! In this episode we focus on Concurrency versus Parallelism and how this affects systems and infrastructure design. Of course, its hard not to make comparisons to our favorite programming languages as well. Listen to our latest episode and tell us what you think!

[https://operations.fm/episodes/85/](https://operations.fm/episodes/85/)

Also available in [iTunes](https://podcasts.apple.com/us/podcast/episode-85-concurrency-vs-parallelism-in-systems-design/id1071645001?i=1000467050735) and [Google Play](https://podcasts.google.com/?feed=aHR0cDovL29wZXJhdGlvbnMuZm0vZXBpc29kZXMvaW5kZXgueG1s&episode=aHR0cDovL2F1ZGlvLm9wZXJhdGlvbnMuZm0vZXBpc29kZS04NS1wYXJhbGxlbC12cy1jb25jdXJyZW50Lm1wMw&ved=0CAYQkfYCahcKEwiQ94vSuf_nAhUAAAAAHQAAAAAQBQ)!

https://redd.it/fd3lq4
@r_devops

Troubleshooting JFrog Artifactory...

Hi there,

First time posting and too be completely honest, a little out of my comfort zone. I am currently looking into a potential issue surrounding Artifactory that was recently set up for our new Docker instance. The team responsible for it had an issue today that they brought to my attention where they are receiving 400 Bad Requests trying to connect to our local Artifactory server from the Docker command line. However, if we open a browser to go to the web portal, they can log in no problem!

One issue I helped solve was there we needed to set up a \*.server.domain.com DNS A record which set up the sub folder in the parent DNS zone ([domain.com](https://domain.com)). This resolved one issue which was surrounding NGinx/Artifactory for mapping through NGinx to the Artifactory api. But now there maybe seems to be another issue where from Docker cmd they still cannot push to Artifactory?

Would this need a cert setup/installed somewhere? On the server running Docker? On the Artifactory server? Or not at all? Thanks!

https://redd.it/fd3awn
@r_devops

How do you handle development data?

I've been thinking about how to set up test data for development, but haven't found an easy way to get data that has the following properties:


* It's sufficiently similar to production that it's useful for testing. I.e. covers a variety of cases and is up to date with the latest schema.
* It's sufficiently different from production that it:
* isn't a security risk (it's anonymized and whatever)
* isn't gigantic (it's a subset of the production data, or it's mock data)

Is this difficult for you all? How do you deal with development data?

https://redd.it/fd4pl1
@r_devops

Building an onboarding series for new technical hires

I’m starting a new project unlike one most discuss in /r/devops and one I haven’t seen done before: a technical onboarding series for new software developer and engineering talent!

Though the details will differ company to company, but it feels like the overall flow shouldn’t be. At my current company, we have applications that live on-premise within corporate data centers with others in the cloud. Both have some underlying technology prerequisites (Kubernetes, AWS) and should probably have various exercises to go along with them followed by building a simple, first-class application.

The problem is that these are purely my ideas without any concrete examples that others do. I hope someone could point me to good examples to model such a process from.

Regards!

https://redd.it/fd4en0
@r_devops

Cloud Engineer vs Devops Engineer

I was curious on the communities take on which role I should focus my attention on when looking in the job market.

​

I'm interested in building out cloud resources using IaC, automating processes with python/golang/powershell, deploying CI/CD pipelines and using more Docker/Kubernetes.

​

(I understand devops engineer is a catch-all job title but nonetheless)

From what I've been seeing, Devops Engineer roles tend to be focused around building CI/CD pipelines for other teams (primarily devs) using IaC, etc built/maintained by a cloud engineering role.

It seems that Devops is "one layer up the stack" not really needing to focus on how infrastructure is deployed, but mainly on getting it deployed for their pipelines.

​

I just want to make sure I choose a role that is furthering my career in the right direction.

https://redd.it/fd639k
@r_devops

Using Packer to share encrypted AMI to multiple accounts

Hello all,

Would anyone know how I would be able to share an encrypted ami that I create in our Dev AWS account to our Staging and Prod AWS accounts using Packer? Looks like there is multiple ways to do it, but ideally I would like to use just one json file to do the entire share as opposed to my other way which would have been:

\- 3 Packer files

\- 1 creates in Dev unencrypted and share to Stg/Prod

\-1 uses that shared ami in Stg to then encrypt it

\-1 uses that shared ami in Prod to then encrypt it

​

Would be best if I could just create one encrypted AMI in Dev and share it accordingly

https://redd.it/fd52c2
@r_devops

Mulesoft vs Tray.io, Zappier, Workato

Does anyone here have any experience with Tray.io , Zappier or Workato? How do they compare with Mulesoft?

https://redd.it/fd6nae
@r_devops

Vault

We're a really small team. Does anyone have experience running Hashicorp Vault as a small team? I think we'd get utility out of having a central store for our secrets, but I'm concerned about the overhead and also how mission critical it would be. If it went down, everything else goes down.

https://redd.it/fd2nhu
@r_devops

How to securely handle SSL certificate deployment?

Hi all. I was wondering what is the best way at managing the deployment of SSL certificates to multiple servers.

My experience is pretty limited to only doing single server hosting and using Lets Encrypt. However, I'm now working on a rather large project and I want to be able to create a single SSL cert and distribute it to all of my servers. The reason for doing this instead of using, lets say, App Engine's managed SSL service, is that I want to be able to read the file and use it to sign tokens among other things.

The issue is, I'm unsure what is the best way to implement this and how to do it securely. My thought was to have a standalone server that just renews certificates once it nears expiration, upload it to object storage and then on each server, run a cron job that pulls the cert every month or something.

The second thought was to use scp to pull the file directly from the SSL server with a cron job, but then do I need to setup SSH keys for each server to talk to each other?

I'm lost at what to do thus far and any help would be appreciated. Thanks!

https://redd.it/fd8tw1
@r_devops

KPIs

Interested as to what different KPIs different DevOps teams use, and how they measure them.

https://redd.it/fd6qkh
@r_devops

Naming Standards for Infrastructure

I wrote an article [here](https://medium.com/@nandovillalba/devops-naming-standards-5e9e73996dfb) about naming standards with some ideas on how to implement them. I was googling around and I couldn't find many resources on what good practices people follow to name their resources so I drew mostly from my experience. I was wondering if I could get more ideas from you so I can expand the article.

What sort of logic do you follow when you name your resources in general in your company? How do you enforce it?

https://redd.it/fcy3vq
@r_devops

I have Down time and I don't know what to do.

So I just finished a major project, and other members of my team are in the middle of theirs. My manager knows and is cool with it because we should "cherish our down time" when we get it. But I feel antsy not having a project or a problem to solve and I can't think of any real things to automate. Given our business make up, I'm in a shared service model with other business units. The BUs have the developers for their units, and then all of them come to us for any infrastructure needs. They also make plans without us unless it involves infrastructure so it's not like I can improve someone's CI/CD for example because that BU might not need anything done.

I tried learning packer. I see the use case but doesn't REALLY get us much because of how we operate. Don't have anything that I can migrate into terraform. Any docker/ECS initiatives are done. Ansible is humming along. Jenkins is configured so the developers/QA are in charge of their releases so they just deploy as they need (remember, each BU has their own dev team and I'm not part of any BU).

Getting a tiny bit bored waiting for the next big thing. I guess I could torture myself with documentation. /s

https://redd.it/fcxzcw
@r_devops

Let's Encrypt Is Revoking Three Millions Certificates On March 4

More details here: https://www.infoq.com/news/2020/03/letsencrypt-revokes-certificates/

https://redd.it/fdbhtq
@r_devops

Linux vs Windows DevOps, technically speaking

I have been researching the technical differences between Linux and Windows devops since I am recruiting for a Sr. DevOps Engineer in Cerritos, CA. I have a couple of candidates with Linux devops experience and need to know what they need to know on a technical level to be able to quickly ramp up to do Windows devops instead.

Thanks!

https://redd.it/fczjpl
@r_devops

Do you think chef is dead?

I've seen a lot of people acting like chef is a dead product lately because they essentially killed off everything that was open source.

Are there people here who are using the cinc? or are you paying for it? Or did you move on to something else?

I need a solution to manage laptops all over the world and have zero budget. Chef seems like a better option than Puppet for this. I don't think anything else is really viable.

https://redd.it/fd2vhe
@r_devops

Best cloud solution for a small forum + email?

Hi all,

I began working on a car forum a couple months ago and I’m trying to figure out the best cloud solution to host all of my services - what I’m looking for is Ubuntu VPS/VM, email (send transactional emails and send/receive normal), and perhaps some image hosting. I anticipate maybe a couple thousand members and around 10K emails sent every month once it’s 100% ready which will not be for a while.

I am new to using cloud services such as AWS and Azure. I’ve poked around for a bit and I think I like AWS a bit more but I also hear that it may be pretty overkill for my situation. I also began looking into Google Cloud and Digital Ocean, but I’m not sure which of the 4 would be the best fit for my needs, or if there’s another that I am missing. Perhaps cloud in itself is overkill for my situation? However I wouldn’t mind learning all about AWS or Azure since that could help my portfolio. Just looking for some options, as I said I’m new to this whole thing.

What do you guys think? I’d be happy to provide more info. Thank you!

https://redd.it/fcza7m
@r_devops

Openshift configmap in Azure?

Hey guys,

I'm not sure if this sub is also for technical questions, so please feel free to delete this post if that's the case.

I am trying to deploy a Docker Image in my Azure cloud. I have no trouble getting my Image into my registry and starting a container from it. But when trying to put my application.yml with configurations into my deployed container (It is a spring application) I just can't seem to find this option anywhere. In Openshift the option is called configmap, where i can add a configuration file, like my application.yml and then add it to my deployed containers.

Does anyone know what this option is called in azure?

Greetings TRXI

https://redd.it/fdek7z
@r_devops