Terraform azure app service manual scale

Hi All,

Looking to configure my app service to have an instance count of three. I can do this is the azure portal, but I can't seem to do it in terraform.

PS: looked at azurerm_monitor_autoscale_setting but you must provide and I only want it to maintain a constant three instances.

https://redd.it/g0c8ic
@r_devops

The Service Mesh: What Every Software Engineer Needs to Know about the World's Most Over-Hyped Technology

[https://servicemesh.io](https://servicemesh.io)

I wrote this late last year. Would love your feedback!

In this guide I’m going to attempt just that: to provide an honest, deep, engineer-focused guide to the service mesh. I’m going to cover not just the *what* but also the *why* and the *why now*. Finally, I’m going to attempt to describe why I think this particular technology has attracted such a crazy level of hype, which is an interesting story in and of itself.

https://redd.it/g0runs
@r_devops

Those with "DevOps Engineer" titles, how much code do you write?

Just curious, as so much of DevOps is surrounded by infrastructure and deployment tooling, how many DevOps Engineers are writing application code on a regular basis as part of their job? How much of your job is performing this work?

I wonder, because there are many who come to DevOps from a purely ops background, and I really don't understand how they could be very inept at pure dev work.

https://redd.it/g0o12v
@r_devops

CI/CD for Microservices and Standard Practices

Hello all,

I'm very new to the DevOps world and I've been very concerned about an application that I've been writing for work is not being done following proper standard-practices. I can't dive into the specifics for NDA reasons, but I can give the structure of this application.

​

\[Application Structure\]

It is composed of (currently) 5 Microservices, but this will grow to be something more dynamic, but likely not more than 10-15. They are written in Python and the flow of the application is serial rather than parallel. By that I mean each microservice will receive a message from the previous microservice via a message broker, so they all are dependent on each other. The first one receives a message, then sends it down the pipeline.

​

\[Current Environment\]

Currently, I am running these services using Docker Compose. I am source controlling all of them in one repo in Gitlab, just under different subfolders. The apps themselves generate their own logs and output them to a logs folder that is mounted to each container at runtime.

​

\[My Questions/Issues\]

1. Is docker-compose the right solution (I know "whatever your most comfortable with", but I'm still pretty new to the field and I want to learn the standards, not make it up as I go) and I've recently learned Kubernetes which seems to be more widely supported. Would that be recommended, instead? We are a pretty small company, but we are growing fast and this application may end up ingesting a lot of traffic in the future, so I'd hate to have to switch over later.
2. Related to the last question, I am having a lot of trouble running these containers through Gitlab CI (it's taking over 20 minutes to build every application and run, which is really too long for me to find out if it failed). It also just seems very clunky and keeps timing out. Is it better to source control each of these microservices in different repos and connect them somehow?
3. Are there any suggestions on standard practices for this project? I can't change the flow of the messages at this stage of the project, but I can change the infrastructure behind it and now would be the time to do that.

Thank youI know anything will work, but I want to use what's bestI know anything will work, but I want to use what's best for any help!

https://redd.it/g0nx74
@r_devops

Azure log analytics - help needed

Hi,

I have an AKS cluster with monitoring enabled to scrape the logs,metrics from kubernetes clusters and containers. A spring application that generates multiple log files has been hosted on this cluster.

How do I collect logs from this application and send it to Azure Log analytics?

TIA.

https://redd.it/g0npk7
@r_devops

I built an Overly Complex Random Number Generator with Docker and Docker Compose!

It uses Flask, React, Redis, RQ Workers, and PostgreSQL!

Check it out here [https://github.com/CT83/The-Overly-Complicated-Random-Number-Generator](https://github.com/CT83/The-Overly-Complicated-Random-Number-Generator)

This is an Overly Complex Random Number Generator, created to demystify how containers work.

https://redd.it/g0h7x6
@r_devops

Storing Gitlab Shell Script Results in Artifact

I have an array that I want to export it to Text file.

for j in "${StudentRecord[@]}"
do
echo $j
done >StudentRecord.txt

I want to store the result i.e. StudentRecord.txt in that particular job's artifact. I tried adding

artifacts:
paths:
- StudentRecord.txt

in my YAML file, but the file generated after the job execution is completely blank. Whereas, when I checked this same file in the gitlab-runner directory, the file is filled with data. What should be the correct way to store this result file in gitlab artifact?

https://redd.it/g0fp8j
@r_devops

Thoughts on my path to become a Jr Dev Ops as a new grad?

My resume looks like this:

\-BS in CIS @ Cal Poly Pomona.

\-IT Summer Intern at a radio station. Mostly help-desk, also did a capstone presentation creating a survey using HTML which the company still uses

\-Technical Administrative Support Team at my university. Mostly tier 1, 2 tickets. (2+ years by the time I graduate, 20 hours a week)

\-IT Engineer internship at Amazon this upcoming Summer

\-CCNA (building a home lab)

\-Currently studying for the RHCSA.

I know that landing a dev ops role as a new grad is hard, but I don't want to limit myself or put myself in a bubble. Does anyone have any suggestions/tips on how I could do this? I still have 1.5 years left until graduation.

https://redd.it/g0f5rq
@r_devops

DevOps for database

What are the common automations related to database for enterprise usage (on premise)? I can think of database release deployment, DBaaS for developers.

https://redd.it/g0z4y6
@r_devops

how I can deploy an app using TeamCity?

So I have a server on which I have TeamCity and I would love to have my apps deployed there(dev, stage) envs.


I've already achieved to have GitHub pull request status, builds etc.I have only one build step which builds the application, install dependencies, run tests - all of it in docker (command line step with docker container)


How can I set up automated deployments to my local server without using Octopus (from what I've heard it's running only on Windows, my machine is using Linux)?
I'm starting my journey with DevOps and I may be not accurate with my questions

https://redd.it/g0soyc
@r_devops

AWS SSO vs Self managed identity account

Hello,

Currently, I am trying to setup a AWS multi account infrastructure, with a single identity account containing only IAM users that can be used to switch roles into their respective accounts.

I've read multiple blogs, articles where people had been doing the exact same thing. Creating self managed roles inside new accounts and allowing users to switch into them from the central identity account.

But recently I read about AWS SSO which makes user access to child accounts so brutally simple. My question is why don't people just use SSO in the first place? I would then think to switch to SSO myself as it free also, but I just want to make sure if I'm not missing something?

https://redd.it/g0sb2z
@r_devops

Branching model for nightly deploys

I'm a lead developer for a small B2B SaaS company, using Django and AWS. We currently run biweekly deploys after hours with a mostly-automated custom Fabric-powered tool.

We're currently exploring options for moving to fully-automated nightly deploys, but want to move to a different branching model to support this.

Right now, topics are branched from dev and merged to dev, a long-running branch which is merged wholesale with --no-ff into master during the biweekly prod deployment process. This necessitates a feature freeze on release days, to ensure that broken code isn't merged right before a release, and isn't really a great solution.

My current plan is to move to a more branch-oriented workflow, similar to Gitworkflow: https://github.com/rocketraman/gitworkflow. This would allow us to merge feature/bug branches individually to dev, then only merge to master the branches (corresponding to Jira issues) that have passed manual QA.

Is this a good approach?

In my mind, there are a few potential open questions, like how to handle issues/branches which have failed QA, and should be removed from the dev branch/environment. I suppose that instead of reverting commits, we could then "refresh" the dev environment by overwriting it with master, and re-merging all branches currently undergoing QA...

https://redd.it/g0s7a9
@r_devops

How to determine which APM solution for all our application stack?

Hi,

My team is looking for an App Performance Monitoring‎ for all our stack (front-end, micro-services back-end, and even data pipelines). We are looking on both open source solutions (like Prometheus + Grafana) and SaaS solutions (like New Relic and Data Dog, to only name few).

Because we are using AWS, we thought we could be fine with just CloudWatch, but we are experiencing hard time looking for logs to help debug. That's why in addition to building the right Log Strategy, we are looking for right tools.

Given your experiences, what do you recommend that can help us choose the right solution? We are mostly developers with no prior experience with any APM tool, so any choice will bring learning.

https://redd.it/g15zr2
@r_devops

Anyone here want to team up to do mock interviews?

I know sites exist like Pramp where you can do practice interviews related to a technical topic, but there is nothing really specific for Devops. If you are doing datascience or frontend development, there are tons of resources to help you prepare, but actually practicing with someone is helpful to rehearse ahead of time. Is anyone here willing to partner up to do mutual practice interviews, I guess we can prep questions ahead of time and then rate each other. It helps getting feedback in a less stressful and risk free environment.

https://redd.it/g1ds48
@r_devops

Manage your GitHub Actions secrets, with a simple CLI

I've created a githubsecrets cli - https://github.com/unfor19/githubsecrets

Install with pip
```bash
pip install githubsecrets
```

Or use with Docker (you must supply all arguments, prompts are not available in Docker mode)

macOS and Linux
```bash
$ docker run -v $HOME:/root unfor19/githubsecrets --help
Usage: ghs [OPTIONS] COMMAND [ARGS]...
```

Windows
```bash
$ docker run --rm -v c:/Temp:/root unfor19/githubsecrets --help
Usage: ghs [OPTIONS] COMMAND [ARGS]...
```

https://redd.it/g1d7su
@r_devops

What exactly is a DevOps Architect?

As a DevOps Architect, I get a lot of questions about what that means and how do you become an "architect" vs. a DevOps Engineer, so I did a quick write-up to try to explain some of those differences. Let me know what you think! Does your organization have a DevOps Architect? Who plays that role if you don't have one?
[https://medium.com/@tjblogumas/what-exactly-is-a-devops-architect-a27e5a5c728b](https://medium.com/@tjblogumas/what-exactly-is-a-devops-architect-a27e5a5c728b)

https://redd.it/g1b75x
@r_devops

DIY Single Sign-on for SSH

[https://smallstep.com/blog/diy-single-sign-on-for-ssh/](https://smallstep.com/blog/diy-single-sign-on-for-ssh/)

This is a follow up to [a blog post from late last year about SSH certificates](https://smallstep.com/blog/use-ssh-certificates/) (that post is #15 for the year on r/devops; [discussion here](https://www.reddit.com/r/devops/comments/d3b7n1/if_youre_not_using_ssh_certificates_youre_doing/)).

By using OAuth OIDC to authenticate to your SSH certificate authority, you can use certificates to implement "single sign-on for SSH". That means:

* No more SSH public key management; SSH access is provisioned and deprovisioned when users are added / removed on G Suite (or whatever other OAuth OIDC identity provider you use).
* SSH credentials are ephemeral, rotated frequently, and never hit disk. It's much harder for an attacker to jump from a popped endpoint into your production environment via SSH.
* SSH trust on first use warnings and host key verification failures go away. You can safely rekey hosts and reuse hostnames.

Last time we posted here all of the pieces weren't in place to make this easy. We just pushed a new open source release, and now they are. This post explains how to use them. It uses the open source [step](https://smallstep.com/cli/) and [step-ca](https://smallstep.com/certificates/) toolchain, which have been upgraded since last time to address some of the issues that you guys raised. We also released a hosted product today where we run the CA for you, but this post is all about how to do it yourself with open source.

https://redd.it/g1aks9
@r_devops

Looking to do an informational interview with somebody in DevOps

Hello, I am an undergrad going through a career building program with my university, and one of the things we are required to do is perform an informational interview with someone in our field of interest, which for me is DevOps. I originally had someone local lined up but the insanity of this virus put that on hold. If anyone would be interested in helping me with this, it should be a fairly short interview (maybe 20 mins or so) which we can do over phone or a voice/video chat service of your choice. It will mostly be basic questions about your job duties and how you worked up to that position.

Leave a comment or PM me if you are interested, it would be a great help to me.

EDIT: I have received a couple responses, thank you!

https://redd.it/g1di7k
@r_devops

Ask /r/devops: What would you like to see in a weekly DevOps newsletter?

Hey all.

I've been trying to work out what the best content would be for a weekly newsletters about DevOps, CloudOps, Automation and the tools that we use day-to-day. I was wondering what it is you would want to see?

So far I'm thinking:

* Tips/tricks on the tools I use
* Commentary on ideas and thoughts shared by others in the community
* Answering a common question I see
* Providing links to use resources
* Taking in questions from the community and providing an answer to them in the newsletter

What are your thoughts? If you were to get a weekly newsletter about DevOps, CloudOps, Automation, tools, etc, what would you want to see? What would keep you reading? :-)

https://redd.it/g1dxns
@r_devops

Does anyone automate the generation of visio/architecture diagrams?

What tool do you use?

https://redd.it/g1j2m6
@r_devops

GitHub actions vs Gitlab CI

I’m currently using GitLab and I like the CI experience. However with GitHub’s new announcement, they’re becoming more and more of a viable competitor to GitLab.

Has anyone had experience with GitHub actions and how they compare with GitLab’s CI?

If GitHub’s CI offering is a viable option I would switch in a heartbeat since GitLab’s UI is pretty unintuitive at times. GitHub’s code review commenting and many other UI features are just much easier to use overall.

https://redd.it/g1i9mc
@r_devops