26 male. 2 years of DevOps experience. 1 additional year of SWE experience. Chicago with $96k salary + 10% 401k match. Are there better opportunities out there?

I have switched jobs only once since I graduated from Noname State U in Wisconsin. I get great 10/10 feedback at mid/end year evaluations, but I'm constantly looking for new challenges and to improve. I feel like most of my teammates, who skew older and toward having kids/wife/house, are cool with just coasting until retirement, which is totally 100% fine! It's just not my cup of tea in this stage of my life, having no house and "just" a girlfriend and not being from the immediate Chicago metro anyway. I feel as though I'm going to stagnate and potentially atrophy if I stay where I'm at now more than another 6 months. I'm currently a level 4/7 at my company because of two promotions the past 2 years.

Could someone with my relatively small experience be beating $96k in Chicago by working a remote job or switching companies? Or do I need more YOE first?

https://redd.it/jyw702
@r_devops

Deploying my first project on the cloud, I need direction with DDoS protection and security.

Hey reddit, just looking for a constructive discussion about DDoS protection and security. I'm creating a small subscription service using Google and Firebase services to deploy my project. It's built using mostly cloud functions, but I'm worried that under a serious attack my Google bill can skyrocket. I've read disaster stories about Google not being very flexible with racked up bills from these type of attacks. Another concern is that attackers will attempt to knock down my service and render it unusable to my users.

My endpoints are protected with Bearer tokens but that's not enough to stop these attackers and I will still be charged for every failed attempt. If you spam the endpoint enough, it will get knocked down and no one can use it.

I've scoured countless articles, discussions on Stackoverflow, and slack chats. I've switched back and forth from Google Cloud Armor to Cloudflare just to test out my app. I've been going in circles to who I should use to help provide the most affordable protection against DDoS attacks. I'm actually considering just disbanding the idea of using Firebase/Cloud Functions entirely because I don't want to get slapped with a large bill after an attack.

My ideal approach, allow only whitelisted IPs into my network. For example, whitelist a user's IP address and allow them in after a successful login. Cloudflare offers over 1000+ IP whitelist, which is great. I considered cloud armor but it's insanely expensive, the service starts at $3000. I understand that as the IP list increasingly grows, the speed of my firewall also decreases.

How would some of you approach these concerns? I'm really leaning towards Cloudflare because they offer rate limiting, and a large IP whitelist with an API.

If you guys can share some of your stories I would be truly be grateful.

https://redd.it/jymhty
@r_devops

Internship

Hello all,
I'm a currently preparing to take my RHCSA ex200,and i have been around Linux operating system for awhile now,am hoping to get a job as a junior sys admin or any related offers..
I was wondering if there's anyone out there who could help me with an internship just so i get familiarize with the real world's projects,i don't mind working for free my goal is to get some experience tp better journey...
Any Ideas will be greatly appreciated
Stay blessed 🙏🏻.

https://redd.it/jymzmg
@r_devops

Deploying a Redis Cluster in Google Kubernetes Engine using Helm Chart

Blogged on Deploying a Redis Cluster in Google Kubernetes Engine using Helm Chart

https://blog.sharetechlinks.com/deploying-a-redis-cluster-in-google-kubernetes-engine-using-helm-chart/

https://redd.it/jyi9l6
@r_devops

What options I have after passing SAA-CO2 to become a DevOps or a SRE

I just passed by SAA-CO2 exam and wanted to get suggestions to become a DevOps or a SRE engineer. I work as a operations engineer and work with AWS everyday. Thanks

https://redd.it/jyejpg
@r_devops

Can you show me some good DevOps related CV?

Hi guys!

I'm a "junior" DevOps now, i work this position more than 1.5 year, with 3-3.5 year linux experience.

I learned a lot of new stuff and i want to put these in my CV, just i don't know how can i do this.

(eg. Conf. management with ansible, little terraform, AWS, CI/CD- gitlab, jenkins, mysql HA galera, etc.)

Just make a list with these in my CV?

https://redd.it/jy8ftx
@r_devops

Autoscaling in VM vs Container

I’m a beginner and would like to clarify some answers .

autoscaling in Vm and Container based autoscaling , is it the same or different?

How do you auto scale in VM and how do you auto scale in Container?

If I’m doing a research based on providing an autoscaler for kubernetes ?
Can I include vm related autoscalers in my literature?

https://redd.it/jybpq4
@r_devops

What's a typical tech stack for launching an API product?

I want to create a developer API product, however as I got started, I quickly realized there's a lot of plumbing that would have to be built:

1. Generating/refreshing API keys
2. Monitoring API calls
3. Monitoring success/failure responses
4. Managing API credits

So, none of this is actually relevant to what I'm building - but it's a necessity for any kind of API product.

So, **how do I not re-invent the wheel**? What are some common libraries that are hugely helpful in creating an API product? Is there some open source library/self hosted product that manages all of the above?

https://redd.it/jyad93
@r_devops

Massive virus every file is encrypted any help?

Every file was encrypted beside the windows folder after visiting a site. No backup what can I do any direction I should go in and look up?

https://redd.it/jyl0jt
@r_devops

OneDev4 - All-in-One DevOps platform

OneDev is an all-in-one devops platform with git management, issue tracking, and docker/kubernetes based CI engine. Project is open source at [https://github.com/theonedev/onedev](https://github.com/theonedev/onedev)

The 4.0 release gets a completely redesigned UI, to be professional and beautiful. Online demo available at [https://code.onedev.io](https://code.onedev.io/)

https://redd.it/jzd6iu
@r_devops

Getting traffic to EKS: Using ALB with Ingress controller

Once your application is running on #AWS EKS, you need to get traffic to it. In this video, Pablo Inigo Sanchez will show how to use ALB Ingress Controller to do exactly that: https://youtu.be/cRODPz9GXb0

https://redd.it/jzdyki
@r_devops

Linux arm vm on M1 macbook

https://github.com/JacopoMangiavacchi/M1-Linux-SSH

https://redd.it/jzhdzl
@r_devops

advice wanted: going from legacy manual releases to devops without scaring the managers

Let me start by stating my work has zero intentions to start using docker or k8s - aka management are too scared to move onto modern tech... maybe in five years

At the moment everything is configured manually account profiles are controlled centrally (one profile for all environments..) upgrading web server updates old builds and new (including development accounts)

So I’m looking to achieve some level of infrastructure as code.. in terms of building up a “runtime location”.. unzipping predefined versions of tools and preparing environment profile using code defined profile rather than system wide defined profile

We have four components that require different types of deployment and “runtime environments”. Originally I would’ve liked to use a tool built and used by the community for iac solutions but I can’t find anything as granular... Since application has to be deployed to a non-root unix account.. My first thought was to create a script (maybe using ruby or python) that reads a manifest for each component type and installs the required features (Java, app server, etc) and then something that will setup all environment variables required for runtime

Does anyone have any similar experiences with this type of deployment? Or Recommendations for tools?

https://redd.it/jzk56r
@r_devops

Looking back on 2020 - what's been the biggest thing to happen to Devops?

With 2020 winding down, I was reflecting on the year and wanted to know what everyone else thought. Good or bad, what in your opinion has been the most significant thing or things to happen with Devops?

https://redd.it/jzjbdu
@r_devops

Continuous Deployment with Github Actions: An Example

Wrote a blog that takes a deeper dive into setting up CD with Github Actions [https://www.dolthub.com/blog/2020-11-23-continous-deployment-with-github-actions/](https://www.dolthub.com/blog/2020-11-23-continous-deployment-with-github-actions/)

https://redd.it/jzo5ev
@r_devops

Build Your Kubernetes Operator with the Right Tool

You want to build a Kubernetes Operator for your software. Which tool to choose from? Operator SDK with Helm, Ansible, or Go? Or maybe start from scratch with Python, Java, or any other programming language? In this blog post, I discuss different approaches to writing Kubernetes Operators and list each solution’s pros and cons. All that to help you decide which tool is the right one for you!

# Introduction

[Kubernetes Operator](https://kubernetes.io/docs/concepts/extend-kubernetes/operator/) is an **application** that **watches** a custom Kubernetes **resource** and performs **some operations** upon its changes.

This definition is very generic because the operators themselves can do a great variety of things. To make it more digestible, let’s focus on one example that we will use throughout this blog post.

[Full blog post](https://hazelcast.com/blog/build-your-kubernetes-operator-with-the-right-tool/)

https://redd.it/jzpcai
@r_devops

Describe a non-trivial system

Someone asked me during an interview to describe a non-trivial system, that I could speak at great length. This isn’t the first time a recruiter asks that but I still don’t know how to answer. I’m still not sure what they want to know...

https://redd.it/jzkqji
@r_devops

Devs and local testing in a CI/CD pipeline

Based in previous posts:

[https://www.reddit.com/r/devops/comments/j2swua/full\_cicd\_pipeline\_for\_degrees\_final\_assignment/](https://www.reddit.com/r/devops/comments/j2swua/full_cicd_pipeline_for_degrees_final_assignment/)

[https://www.reddit.com/r/devops/comments/jo8jy4/developers\_testing\_things\_in\_a\_real\_cicd\_pipeline/gcadtbq/?context=3](https://www.reddit.com/r/devops/comments/jo8jy4/developers_testing_things_in_a_real_cicd_pipeline/gcadtbq/?context=3)

​

I am still working on my final project and although I have most of the environment and I am still hesitating in one of the first stages of an entire CI/CD pipeline and it's the local testing.

I was aiming at triggering a deployment per each push that any developer does in their "tests" branches but after the answers, I received from the previous posts, it seems that many people deal with the local testing in their own PCs with Docker for example.

If so, how do you review a change you want to test by deploying it? Having in my mind all the minimum necessary dependencies to run it?

My concern is that developers will have to handle maybe many resources in their PCs and maybe deal with configs. (Maybe that's the usual thing but as I don't have experience in that field...)

I would like to hear from you!

https://redd.it/jzrbdu
@r_devops

I don't really understand how LE renewals work (Ansible related)

Hi there,

I'm currently using the acme\_certificate Ansible module to create a new certificate. The interesting task is the following:

`- name: create acme challenge`
`become: false`
`local_action:`
`module: acme_certificate`
`acme_version: 2`
`terms_agreed: yes`
`account_key_src: "{{ certs_path }}/account-key.pem"`
`src: "{{ certs_path }}/{{ server_dns_name }}.csr"`
`cert: "{{ certs_path }}/{{ server_dns_name }}.crt"`
`challenge: dns-01`
`acme_directory: https://acme-v02.api.letsencrypt.org/directory`
`#NOTE: switch to staging letsencrypt endpoint when testing`
`#acme_directory: https://acme-staging-v02.api.letsencrypt.org/directory`
`remaining_days: 60`
`register: challenge`

Works fine (pretty cool actually, love Ansible).

Now I'm gonna implement a scheduled playbook execution to check against local certs, verify whether they're next to expiration and then, if it's the case, renew.

There it comes: I don't understand how renewal on LE works. I always used certbot so I just ignored the underlying complexity.

* Is it actually the same of a new cert creation but LE tracks the fact that cert is already existing?
* Or I need a different module/approach.

The overall target is to not hit rate limits (50 unique certs generation per month/topdomain).

Thanks in advance, I could not find any clearing doc around.

https://redd.it/jzeh5h
@r_devops

Alert Aggregation Platform

I realize this is a strange question....but right now we have alerts coming in from Pingdom, AWS, Elasticsearch Logs, Rollbar, some monitoring developers wrote that get all sent to slack. We have about a billion slack channels, and things are getting lost in the shuffle. Pagerduty \*almost\* seems like a logical choice, but sometimes we want to just aggregate more "informational" items and not blast out an alert.


Is there some good off-the-shelf system for actively aggregating all these alerts from multiple sources?

https://redd.it/jzu46r
@r_devops

What would you prefer in a Control Panel?

I am working on a control panel and I am curious what administrators would prefer.
I am mainly needing to know about how you would prefer to set configuration options for a specific software like Nginx, Apache, PHP-FPM, MySQL, etc.

Would you prefer a form style list of text field options that you can easy change?
\- Max Upload: 200MB
\- Max Connections: 5
\- etc

Or would you prefer to edit the configuration file?

From my experience using other control panels it was really nice to be able to set the Max Upload Size in a text field, then hit save and have PHP or Nginx reload. This also prevented me from breaking the configuration all together if I wasn't that experienced. However, I have also had times were the option that I needed to change, was not present and having the ability to edit the configuration file would have been better. Or I might need to add some complex configuration options ( like a special Nginx Location block, etc ) that really isn't achievable with a simple option form.

So would you prefer a Simple Options form, but it might be limited as long as it covers all the common settings. Or just have the ability to edit the configuration file knowing that you are responsible for errors and conflicts that might take you whole server down?

[View Poll](https://www.reddit.com/poll/jzun5t)

https://redd.it/jzun5t
@r_devops