[Article] DevOps-as-a-Product

I'm always trying to come up with different approaches to help influence change within an organization. Check out this article and let me know what you think about trying to sell DevOps like you would sell any other product to business.
https://medium.com/devops-dudes/devops-as-a-product-64251c439340?source=friends\_link&sk=bc8d992e52e2e42cd5190fc789b10ed0

https://redd.it/g8jocs
@r_devops

Windows Update API - Automation of MSU Package Downloads

Hi all.

I've been researching this for a few days and I haven't had much luck so far. I'm looking for a way to programmatically download the MSU packages for Windows Server 2019/2016. Mainly cumulative updates. I have a specific use case where I need the actual MSU files and automation will be very important there.

I don't think there's some sort of API for [catalog.update.microsoft.com](https://catalog.update.microsoft.com) \- there apparently used to be an RSS feed but it looks like that's been removed.

Any thoughts or advice would be much appreciated!

https://redd.it/g8iik5
@r_devops

YAML File generator for kubernetes

When I am trying to create my own YAML configuration file in Kubernetes I faced a lot of challenges. One of the main challenge is " what are the option I have for a particular property or option for a YAML field? "

So I searched in Google and found some interesting Github project which is [kubergui](https://github.com/BrandonPotter/kubergui) but that project/tool is not helpful when we want to generate advanced YAML configuration for our Kubernetes cluster.

So I thought to solve this problem with my web development skills 🤪 and want to help others to easily generate YAML configuration file for their Kubernetes cluster.

So after working hard, I came up with the one tool that helps you to generate the YAML file and also helps you to know what are options available for a particular YAML property/field.

The tool is Kube-yaml-gen that helps you to generate the YAML file by selecting the available options.

You don't need to pay anything 😂 for this tool/app because it open source and hosted in Github pages 🤪.

Check out that project [here](https://github.com/MohanSai1997/kube-yaml-gen). If you found useful then give a star and share because this is my first open-source project.

Any suggestions or features to improve the project are accepted 😉😊.

https://redd.it/g8i8pk
@r_devops

I just created my first app (a Prometheus exporter for Jira Cloud) in Python! I'd love it if any of you want to give me your feedback.

As stated, this is the first app I've ever created. However, it's fairly simple, and I think it's fairly well-coded as well. I'd really appreciate any feedback you guys can give me.

[https://github.com/R0quef0rt/prometheus-jira-cloud-exporter](https://github.com/R0quef0rt/prometheus-jira-cloud-exporter)

It's amazing how quickly I'm picking up programming. I started as a career sysadmin, then moved into devops. If you can learn devops, you can learn programming. I've only been studying for about a month.

https://redd.it/g8faxx
@r_devops

DevOps Shorts - the New Podcast/YouTube show

Hello folks and welcome to DevOps Shorts, the show where we invite wonderful human beings to have a lightning-fast conversation about Devs, Ops and other Mythical Creatures. The show where each episode only lasts 15 minutes and we are focused on asking only 3 questions.

2 episodes are already out:

Episode 001 - with Tobias Kunze - the CEO of Glasnostic

* [YouTube](https://www.youtube.com/watch?v=bT9Hmas65cU)
* [Anchor.fm](https://anchor.fm/devops-shorts/episodes/Tobias-Kunze---Nurture-over-Nature-ed1c6a)
* [Spotify](https://open.spotify.com/episode/31H53ShRROgGl5o7NNKxFW)

Episode 002 - with Baruch Sadogursky - the Head of DevRel at JFrog

* [YouTube](https://www.youtube.com/watch?v=kGaZM6WjpxM&t)
* [Anchor.fm](https://anchor.fm/devops-shorts/episodes/Baruch-Sadogursky---Let-Machines-Do-What-They-Are-Good-At-ed5srh)
* [Spotify](https://open.spotify.com/episode/4XyGEgbtFgclLqtyw0h3rY)

Looking forward to your feedback!

https://redd.it/g8c9jb
@r_devops

Reminder: Chef-client 14.x Support EOL is 4/30/20 (Along with a few others)

Being something that has driven a fair portion of my work recently, I figured I'd throw a friendly reminder out.

https://docs.chef.io/versions/

https://redd.it/g8ex2i
@r_devops

Simpler Tool than Ansible for remote script execution and file copying

I'm looking for a simpler tool than Ansible. Most of my stuff is in containers so I don't need to use Ansible set up the system or configure it.
I just use Ansible to run scripts on many hosts (mainly not in containers)

What I like about Ansible:
* Only needs SSH and no Software to install on host.
* Can run one command on all hosts.
* Hosts are specified in file and can be grouped.
* Easy 'Commands' to copy files from and to the host without doing it manually with scp (compared to a bash script).
* I can run commands on the remote host and on this computer.
* I can use a 'jump box'.

What I don't like about Ansible:
* Cumbersome 'programming language' and many modules make it harder than a bash script, e.g. copying all files satisfying a pattern is really cumbersome.
* Though control structures (loops, if) are very very rarely used by me, they are very cumbersome in Ansible.
* Another language to learn.

So I'm just for a alternative that allows me to easily run scripts on a remote host and copy files between it. You might say, that you can easily build you own tool to do that. But this would lack proper documentation etc. and the next guy here would hate me.

https://redd.it/g8bty6
@r_devops

Docker-consistency on all environments (especially development)

Hello everyone!

I am new to DevOps and for the last weeks, months actually, I was trying to figure out the best practices and tools to use for a good DevOps setup. I kept trying to learn from experts and use what I learn in my current project.

One of the best practices I have been told what to use docker on every environment for the reason to sophistically sustain the same environment: locally, in ci, on stage and of course on production.

This always made sense to me. Nevertheless I have rarely seen companies or people do this.

I have committed myself to this approach and it was not always easy to dockerize the local development, but I have found solutions. I never gave up because I remembered that this was an important best practice, as I was taught.

But now I really got to a point where this does not make sense. It really is impossible to consistently follow this approach - or it is impossible tough.

Every environment requires a different Dockerfile and it drives me crazy!

\- Local: For my go project I had to install "CompileDaemon" to rebuild the binary on every change I did to the code.

\- Testing: Well there is just two ways here. Either an extra Dockerfile to run tests locally or I install bash on the first Dockerfile, ssh in the container and run the tests from there.

\- Deployment on AWS ECS: This is a whole different story. I have to set special environment variables that are dynamic and I have to run database migrations and other stuff, and this has to be covered by the Dockerfile, because there is no other way to speak with the system.

\- CI: It's again different from any of the previous Dockerfiles!

With this I got to the point where I'm done - I'm really done with this approach. I hate to care about a docker environment locally and in CI and I understand why some companies/people just don't do it.

With this reddit thread I want to give this approach a last chance and evaluate again, just reading what you people think. I'm excited to see how much you agree with my let's call it discovery.

https://redd.it/g8bglj
@r_devops

ssl auto renew and deploy

Hi Guru's

I am looking for a open source tool to generate,manage and deploy ssl certs automatically. we are having a hybrid cloud some in aws and some in private dc's . I tried few things like Netflix's Lemur,. Hashicorp Vault, Aws cert manager but could not reach an agreement on what to finalize. Request your Suggestion on the same.

https://redd.it/g9dnj3
@r_devops

Department moving to devops: Help needed.

Hello all, sorry for the long post.

This is a Xpost on r/devops, r/sre and r/sysadmin as i think this can be related to all 3 communities.

​

I am in charge of 8 ops engineers in an environment that is still working with development and operation separated.

​

Finally i was able to convince upper management that this is not viable anymore as the job market is now toward dev and ops together.

This means i need to provide a clear direction where i want to go with ops engineer and help them fill the gaps.

​

Before looking at the directions i would like to give you a bit of context: I work in a big company, within the company there's our department with ten squads of 5-6 people in which there's 1 ops, 1 product owner, 3-4 devs, 1 business analyst. As a working methodology we follow Scrum, PO is responsible of the backlog.

​

The squad itself is called "devops squad", meaning dev were developing and the ops was solving incidents, creating and maintaining CI/CD, performing standby shifts and dealing with some extra documentation. Infra is (actually was) maintained by a different department and we are (were) their customers.

​

As infrastructure responsibilites have been moving to our department we needed someone to start focusing on them: we don't really deal with bare metal, we are more taking care of VM's (creation, decomm, updates), and soon we will need to think on how to manage k8s clusters.

​

As a side note Security, Network and firewalls are being taken care by other departments, of course a bare minimum of knowledge on those fields is required but it is not someone we need to look at 24/7. At least not yet

​

Due to the above infra requirements i was able to get some of those ops, make them work in a central squad to provide infrastructure management and a general support to the squad.

This has helped migrating to an idea were developers were supposed to start thinking of basic operations

​

This central squad is trying to follow as much SRE concepts: automation, monitoring, incident automation BPM and so on. the part that is lacking most is the 50% time on developmenmt, due to the fact that some of the people are above 50 year old and some concepts takes a lot of time to absorb, and old habits take lots of time to change.

​

Now, as the shift toward devops is being pushed more and more i will be asked to provide a direction on the ops people. Of course there will be a huge focus on what they will develop, as opposed to the fact that most of the complains from developers is that they don't want to do incidents because they need to code.

​

I need to provide a clear answer to this; i don't want those people to become just developers, or have them being absorbed back in to squads becaus as a result old habits will be enforced and we will go to the situation: "this guy who has to fix incidents because he doesn't know how to code but he doesn't have time to learn to code because he needs to fix incidents and by the way he knows infrastructure better than us so why bother" .

I know this because i run this same experiment and this is what happened.

​

I would like to keep this central squad, i need to find a proper purpose to this and justified it; at the same time i need to instruct and help people to move away from this mentality of separation between dev and ops: this needs to be done on technical people but mostly important to the non technical people (PO's BA's).

​

One of the purpose i am thinking of is to make it become the SRE, and fully adopt SRE scope and purpose. I am totally unaware of what could be the issues i will face with this choice.

​

For sure i will need learning materials for those who are not used to coding, and help them understand concepts as branching strategies, automated testing and so on.

So far bigges coding challenges we faced are scripts under 300 lines.

​

Has anyone experienced something like this and could share their thoughts,

their experiences ?

https://redd.it/g8aq9i
@r_devops

Upgrading AMI's of k8s cluster provisioned with RKE (community) terraform provider.

Currently in the process of implementing rancher server. The initial cluster is provisioned using RKE (terraform provider atm) and then we place Rancher server on top. Maybe I'm overlooking something from the documentation or I'm just thinking about it wrong, but has anyone performed an underlying rolling update of the underlying ec2 instances?

https://redd.it/g9dqy9
@r_devops

What are my options for deploying my web backend that uses Docker?

Hopefully this is the right place to ask such questions. Essentially I have a RESTful API built with Django and MongoDB that I'd like to deploy into a VM I have. (no major cloud providers, I literally just have root access to RHEL VM) I already dockerized and tested it and now I'd like to automate the deployment process. (Repo is on Github) What are the options that make the most sense? Will I need some container orchestration tool like K8s or Docker Swarm? Do I do some webhook when something gets pushed to master? I'm kinda lost as to what I can do because DevOps tooling can get confusing for beginners. Also at some point, I'd like to automate the deployment of frontend side of things as well, but that's on a different repo (don't think it makes too much of a difference).

https://redd.it/g9anbo
@r_devops

What are the top 3 things you wish current APM tools did better?

I find current APM tools like DataDog to be complex. My top 3 wishes:

1. Simpler pricing. I always keep fearing that I will be charged for something which I don't know about
2. Simpler dashboards. Which show me relevant issues and I don't have to go through multiple graphs
3. Show me what you are doing to my infra? How much RAM is the agent using - what is the extra load on my infra due to using an APM.

What are your top 3?

https://redd.it/g98m1z
@r_devops

How I manage secrets in git

I created a little Git repo showing how I store encrypted secrets in git and then decrypt them at runtime on EC2/ECS/Kubernetes.

​

[https://github.com/noqcks/GitSecrets](https://github.com/noqcks/GitSecrets)

​

I created this because sops and other git secret managers make it easy to store the git secrets, but make little mention of operating them once you store them! The documentation can also be quite verbose and confusing.

​

I've used this previously for personal projects and places I've worked.

​

What do you think? How do you manage secrets in production?

https://redd.it/g96ywi
@r_devops

How does google cloud platform detect detect which npm script to run ?

Hi,

​

I just started learning to use Google App Engine. I deployed a Node app, which had a npm script called "dev" so to launch the app using the following command: \`npm run dev\`. However I never mentionned that command to GCP. Did it guess which one to pick ? How does it work ?

​

Thanks.

https://redd.it/g97xfe
@r_devops

Want to get into Devops and want to learn Language, Why python?

Hi All,

Sorry that this post may seem a bit of repetition to others posts, however, I'm hoping someone can answer the specifics of my question, so I can hopefully make the right choice on where to begin.

I have the ability to understand/read basics of code, But in no way am I a developer and would really need to start from scratch for learning a language. And generally speaking everywhere i have worked have been Microsoft one-stop shops, (other than AWS, but they moved to Azure when migrating to O365)

I've had "DevOps" roles in the past. I've worked with AWS, Created networks in the cloud, and those things were generally pretty easy for me to get my head around.I also moved onto a second job in which I was working within a Deployments team, again, advertised as DevOps but it was more Aspects of the role fit into DevOps, than being a DevOps role itself.

Sooooo in regards to languages, I've tried to have a search online regarding what is the best language to learn for starting in Devops, A lot of people are recommending Python.

**But what I don't understand is how does python integrate with things like Azure or AWS?Generally speaking, I thought these platforms mainly used C# or Java?**

**So how can you write in python and it still be used effectively?**

​

Thanks in Advance

https://redd.it/g94qzs
@r_devops

The tool that really runs your containers: deep dive into runc and OCI specifications

Did you know that regardless of which container tool you use - Docker, Podman, CRI-O - it most likely uses runc under the hood?

In my new article, I am showing what runc is and how to use it, as well as a couple of low level things like working with OCI Runtime bundles directly.

I hope, this article will demystify containers for you a bit!

https://mkdev.me/en/posts/the-tool-that-really-runs-your-containers-deep-dive-into-runc-and-oci-specifications

https://redd.it/g97jk4
@r_devops

nginx deployment in multiple environment

I'm doing a AWS CI/CD CodePipeline and CodeBuild with Docker. Dockerfile uses a base NGINX server image. It also has "ADD server.conf" command which copy the config file into the image on Docker build.

Now problem is , server.conf has a proxy_pass url (backend service) . This proxy_pass url is different in Dev , Stage and Production.


Is it possible to parameterize this proxy_pass url in server.conf and value can be replaced at runtime in the target environment? How it is done ? What is the best practice here ?

https://redd.it/g91ror
@r_devops

git tagging strategy

I use Jenkins for CI. When I am about to release I check the latest tag and I increment it using an awk 1 liner. It works. I was wondering if I should maintain a file called "release.txt" which will have:

`githash, tag, message`

`abcdef, v0.1, initial release`

`sdfsdf, v0.2, fixed a bug`

`qqwef, v0.3, added a new feature`

​

Then I run a script which will create the appropriate tag and message. Any thoughts about doing a software release this way? Or is there a better way?

https://redd.it/g90wi1
@r_devops

DevOps playground

Hi guys
Is there an online sandbox kind of place where we can practice DevOps, like IaaS, configuration management etc?

https://redd.it/g946sl
@r_devops