Top three?

If you were in a position where everything worked great and you could take a month to focus only on learning something knew or getting better at something, what would be your top three list? Devops focused, of course.

https://redd.it/fst02w
@r_devops

[question] cancelling oreilly subscription

Hey,

Apologise if this is the wrong place to ask this. Does anyone know if I cancel my oreilly subscription that I will still be able to login and view my saved playlists? My company provides free subscription so makes little sense to keep paying for my personal one - but I do have playlists/book favourites that I want to still be able to go back to for reference purposes. Thanks

https://redd.it/fsmbvb
@r_devops

Any good idea of a small project in Node or Django that are perfect for testing your ability to build devops infrastructure on top of them?

Any good idea of a small project in Node or Django that are perfect for testing your ability to build devops infrastructure on top of them? I am thinking a small RESTFUL API would do it, but I thought it would be too boring and maybe not the best thing you can build to test out your ability to build devops infrastructure and challenge yourself.

https://redd.it/fsoaf8
@r_devops

Spinnaker login page

Hi,

We are using Spinnaker on the company but we have some security issues when it comes to use it with SAML.

We can add permissions to applications so that each user on the group can see/modify or just see the applications

Question here is, is there any way to return an error when login using SAML? Right now everyone on the company can access Spinnaker. We would like to restrict access only to those authorized.

https://redd.it/fskpig
@r_devops

3 Problems With GitOps

I believe that GitOps is great relative to previous generations of approaches (specifically, CIOps).

However, GitOps doesn't solve all the problems. Particularly,


1. Git as a base is not fully auditable.
2. Business Approvals are tough since business people are not necessarily familiar with Git (unlike Developers / DevOps / InfoSec).
3. Versioning and Configuration Management - unless you are allowed to use latest and greatest version at all times, it is hard to keep track of all versions and configuration that go into Git source.


Wrote in more detail here: [https://worklifenotes.com/2020/03/31/3-problems-with-gitops/](https://worklifenotes.com/2020/03/31/3-problems-with-gitops/)

Would be interested in community prospective on this.

https://redd.it/fski89
@r_devops

Will the likes of Github actions and Gitlab replace certain DevOps jobs?

I have a feeling everything will become that user friendly in the future that developers will be able to setup their CI/CD process with ease.. Now I still think there will be DevOps roles that look at topics such as high availability but I feel cloud providers will make this process easier as well.

https://redd.it/fs2lsa
@r_devops

docker-compose command not found

[cross post]
Hi all,
I have two instances on AWS say I-1 and I-2. I-2 is running Jenkins server, I-1 an intended web server running docker container of my python Api. And I want to run docker-compose on I-1 from my Jenkins server.

Now when I execute docker-compose command from Jenkins server after SSH to I-1. I get docker-compose command not found error. I know I am missing small detail here. But help anyone?

BTW. I can execute docker command completely find. It's just the problem with docker-compose.

Troubleshooting.

1. Tried setting docker-compose path as environment variable in Jenkins script. Did not work.

#Resolved

https://redd.it/fs29y7
@r_devops

Monthly 'Getting into DevOps' thread - 2020/04

**What is DevOps?**

* [AWS has a great article](https://aws.amazon.com/devops/what-is-devops/) that outlines DevOps as a work environment where development and operations teams are no longer "siloed", but instead work together across the entire application lifecycle -- from development and test to deployment to operations -- and automate processes that historically have been manual and slow.

**Books to Read**

* [The Phoenix Project](https://www.amazon.com/Phoenix-Project-DevOps-Helping-Business/dp/1942788290) - one of the original books to delve into DevOps culture, explained through the story of a fictional company on the brink of failure.
* [The DevOps Handbook](https://www.amazon.com/dp/1942788002) - a practical "sequel" to The Phoenix Project.
* [Google's Site Reliability Engineering](https://landing.google.com/sre/books/) - Google engineers explain how they build, deploy, monitor, and maintain their systems.
* [The Site Reliability Workbook](https://landing.google.com/sre/workbook/toc/) - The practical companion to the Google's Site Reliability Engineering Book
* [The Unicorn Project](https://www.amazon.com/Unicorn-Project-Developers-Disruption-Thriving-ebook/dp/B07QT9QR41) - the "sequel" to The Phoenix Project.
* [DevOps for Dummies](https://www.amazon.com/DevOps-Dummies-Computer-Tech-ebook/dp/B07VXMLK3J/) - don't let the name fool you.

**What Should I Learn?**

* [Emily Wood's essay](https://crate.io/a/infrastructure-as-code-part-one/) - why infrastructure as code is so important into today's world.
* [2019 DevOps Roadmap](https://github.com/kamranahmedse/developer-roadmap#devops-roadmap) - one developer's ideas for which skills are needed in the DevOps world. This roadmap is controversial, as it may be too use-case specific, but serves as a good starting point for what tools are currently in use by companies.
* [This comment by /u/mdaffin](https://www.reddit.com/r/devops/comments/abcyl2/sorry_having_a_midlife_tech_crisis/eczhsu1/) - just remember, DevOps is a mindset to solving problems. It's less about the specific tools you know or the certificates you have, as it is the way you approach problem solving.
* [This comment by /u/jpswade](https://gist.github.com/jpswade/4135841363e72ece8086146bd7bb5d91) - what is DevOps and associated terminology.
* [Roadmap.sh](https://roadmap.sh/devops) - Step by step guide for DevOps or any other Operations Role

Remember: DevOps as a term and as a practice is still in flux, and is more about culture change than it is specific tooling. As such, specific skills and tool-sets are not universal, and recommendations for them should be taken only as suggestions.

**Previous Threads**
https://www.reddit.com/r/devops/comments/fc6ezw/monthly_getting_into_devops_thread_202003/

https://www.reddit.com/r/devops/comments/exfyhk/monthly_getting_into_devops_thread_2020012/

https://www.reddit.com/r/devops/comments/ei8x06/monthly_getting_into_devops_thread_202001/

https://www.reddit.com/r/devops/comments/e4pt90/monthly_getting_into_devops_thread_201912/

https://www.reddit.com/r/devops/comments/dq6nrc/monthly_getting_into_devops_thread_201911/

https://www.reddit.com/r/devops/comments/dbusbr/monthly_getting_into_devops_thread_201910/

https://www.reddit.com/r/devops/comments/cydrpv/monthly_getting_into_devops_thread_201909/

https://www.reddit.com/r/devops/comments/ckqdpv/monthly_getting_into_devops_thread_201908/

https://www.reddit.com/r/devops/comments/c7ti5p/monthly_getting_into_devops_thread_201907/

https://www.reddit.com/r/devops/comments/bvqyrw/monthly_getting_into_devops_thread_201906/

https://www.reddit.com/r/devops/comments/blu4oh/monthly_getting_into_devops_thread_201905/

https://www.reddit.com/r/devops/comments/b7yj4m/monthly_getting_into_devops_thread_201904/

https://www.reddit.com/r/devops/comments/axcebk/monthly_getting_into_devops_thread/

**Please keep this on topic (as a reference for those new to devops).**

https://redd.it/ft2fqb
@r_devops

PacktPub is offering all programming workshops for free, redeemable through May 31st in light of current events

[Official Tweet Here](https://twitter.com/PacktPub/status/1245056013381726208)

For the record, ***I am not affiliated with PacktPub in any way***. A colleague shared this tweet with me today, and these workshops are a normally paid resource that is free for the next two months. I am not advertising this as a product, and I gain nothing from it. I just want to share a useful, currently free learning resource for programming with those who would benefit.

https://redd.it/ft0di1
@r_devops

Advice on deployment

Dev here, I don't know much about devops, wanted to ask the advice of this community:

How should I automate application deployment?

Right now my a personal project where I have to keep a certain application running 24/7 I do all deployment manually. I build on my local machine, scp the binary into the target machine, ssh into that machine, try to run the binary, if some libs are missing, trying to re-trace my steps when I originally installed them on my local machine. (For context, this is C++)

This is horrible. How do I automate this? At work I've seen people use Octopus (but that's mostly for windows, I'm developing for linux) and I really like the functionality and visual interface. Is there an analogous tool for linux that compiles, packages, and deploys into a target machine?

Thanks for the help

https://redd.it/ft0uh5
@r_devops

What should be logged on production API servers?

I'm currently only logging the most basic stuff on my API servers via stdout and stderr - anomalies and server errors.

Should I also be logging the metadata for each individual API requests (IP, request headers)?

What about about API responses? Should I also be logging those as well (probably not to stdout but something more secure)?

What are other things that I'm missing that I should be logging on production servers?

https://redd.it/fsyov9
@r_devops

Ansible 101 video streaming series

Hi everyone, I wanted to mention the YouTube streaming video series I started last week (and finished off Episode 2 this morning!), [Ansible 101 with Jeff Geerling](https://www.jeffgeerling.com/blog/2020/ansible-101-jeff-geerling-youtube-streaming-series) — in case you need something to fill a few hours, and help you learn a bit of Ansible, starting from the basics.

And, this was mentioned earlier in r/devops, but my two Ansible books [Ansible for Kubernetes](https://www.ansibleforkubernetes.com) and [Ansible for DevOps](https://www.ansiblefordevops.com) are currently free on LeanPub. If you get them free today, you'll get updates to both books as I publish them, free forever!

I especially hope this can help some people who may have been laid off or furloughed recently, to learn some new automation skills and maybe take a new path in their careers!

https://redd.it/ft7iw8
@r_devops

Homelab, Foreman/Terraform/Others, so many options

Hi Folks,

I've been working on building my own DevOps ecosystem in my homelab, firstly for infrastructure management, and once that's done then I want to setup CI/CD/dev pipelines akin to "traditional" DevOps for a bunch of FOSS stuff I want to use.

The part I've been wrestling with is streamlining the process of updating (and managing/tracking) software updates/packages on my array of VMs (whether they are defined as code or not).

Sure, I can _install_ software packages with Puppet/Terraform/others, but I want to, in a "central dashboard" regard, see when VMs need their software updated (from package managers, of course) and then blanket instruct them to update (and reboot if need be). But right now, I'm only really seeing that possible with Foreman, and only in a very specific way to manage Ubuntu VMs (my primary OS here). I haven't got it setup to do this successfully just yet, but I think I know what I need to do next to do that.

That being said, this kinda feels like I'm doing it the hard way, and when I try to find other ways to achieve the same goal, I either come up with a paid tool that does this, or nothing that's really quite the same.

So, what would you folks think is worth me exploring to meet this functional need I have? I don't want to just streamline provisioning, enforcing stateful stuff, but also keep my shit up to date in an efficient and organised way (very manual right now).

edit: strictly looking for all-open-source tooling here, as that's generally what's used in the career direction I'm heading.

https://redd.it/ft25vw
@r_devops

Suggestions to avoid version control secrets files e.g certs and configs with secrets

So am thinking of an approach to avoid version control secrets files that need to be laid down during a provisioning an infrastructure.

Right now, what comes to mind is upload the files to s3 manually and have terraform retrieve it. The files don't change often. I don't think this is a novel solution.

Any other ideas?

https://redd.it/ft9yyd
@r_devops

Where do folks keep their oncall playbooks?

I'm not sure if this is common but although the number of tools have exploded to support the oncall engineer. From monitoring, alerting, and scheduling, I haven't seen anything that necessarily makes it easier to use these tools. At one of my last startups and one of the big four before that, we would either write notes on the alerts themselves (e.g. Last time, it was the load-balancer) or create "Runbooks" in confluence/wiki.

​

How do others keep this type of information up-to-date and made useful?

https://redd.it/ft9mfv
@r_devops

Is it worth to get Kubernetes training & certifications?

The last tech certification I took was MCSE in 2001. After that I got Scrum master certification because the company paid for... back to my question what do you folks think about the official k8s training? I already have around 3-4 years of experience with Kubernetes but I self-taught it and I don’t know if I’m missing something that I would get in a formal training?

While I personally don’t see much value in certifications, would that pass a good message to the market? I’m not looking for a new job but with all this COVID thing I want to get prepared

https://redd.it/ft9wvz
@r_devops

AsyncAPI — OpenAPI-like specification for event-driven architectures

I'm leaving the link here. Hope you find it interesting: https://www.github.com/asyncapi/asyncapi.

https://redd.it/ftcqqm
@r_devops

Is it possible to build a CI + CD pipeline from scratch with Github, Travis CI, and an AWS emulator instead of the real AWS?

Is it possible to build a CI + CD pipeline from scratch with Github, Travis CI, and an AWS emulator instead of the real AWS? I want to take a course and learn DevOps, but I can't because I don't want to get an AWS account unless there's a way to force AWS to freeze if I went above the limit, but I know they don't allow you to do that because they are earning money from people who don't check their credit card regularly.

https://redd.it/ftalp9
@r_devops

Production log aggregation service?

What is the recommended service for log aggregation and monitoring? We have limited engineering resources at the moment so won’t be able to dedicate time to build our own, so a paid (or free?) service would be preferred.

https://redd.it/ft421x
@r_devops

Deploying windows software to client servers over internet

My company has a legacy product (Windows services and a SQL Server DB) that runs on our clients' servers. Today, we VPN / remote into their servers to run .msi installers.

I'm looking for tools that remove the need for remoting, and ideally centralize all of this management. It would have to be very secure, since we're installing software on another company's network. And it would need auditing and RBAC.

So far, Octopus Deploy looks like a good candidate, but it's expensive at scale. Most other products seem to focus on CI/CD within your own network or cloud, and it's unclear how well they'd work in our case.

Any one doing something similar, or know of a tool that would be a good fit?

https://redd.it/ft8ajs
@r_devops

Build Once, Deploy Many - Gitlab CI/CD example with Docker

Hey guys, I recently dived into Gitlab CI/CD and documented my findings on my CI/CD pipeline which uses a build server to manage docker images which later pushes out the built image out to a server I want to deploy to. [Here's the documented example and approach I ended up going with.](https://github.com/nikitabuyevich/gitlab-docker-build-to-deploy-cicd)

Any thoughts on this approach?

https://redd.it/ftepyf
@r_devops