CI/CD pipeline for database changes

Hello World !

^(First time posting on Reddit ! 🆕)

Here an article to include database changes in your continuous delivery process !

https://medium.com/tales-of-libeo/continous-integration-make-sure-database-changes-are-included-using-gitlab-ci-cd-6191e984f8d0


It's done using GitLab CI and PostgreSQL, but no matter what you use, concept should be kinda the same ! Looking for some feedbacks ! 🤗

https://redd.it/llqyyg
@r_devops

What size server for two mobile and two web apps?

My company is planning to launch two mobile and two web applications, all of which have dynamic, not static content. Collectively they make up an on-demand platform, and we’re wondering how big a server we should purchase in terms of memory transfer, and SSD space.

We plan to have one server for each application, and don’t expect to have too much traffic initially since we’re launching in one city. Support for ~1,000 users would be ideal.

https://redd.it/lm9dnb
@r_devops

Terraform and Jenkins

Hey Guys,

I just wanted to ask you for an advice. If you have project in Terraform which is broken into multiple objects(per resource set) - for example:

\- Main Core Virtual Network, NSGs, Subnets, FW etc. all configured in one configuration file

\- Resource Groups - all configured in separate configuration etc.

Same will apply for other resources. Each configuration has its own idependent state file. My question is: how you would go about Jenkins pipeline configuration. Would you create pipeline per resource or you would somehow use one Pipeline. There is a possibility to convert everything into modules and run everything from one main file configuration file. Would that be a solution? So, if one module would change it would only apply the config based on that changed module. Is my thinking right here?

https://redd.it/lm6jlz
@r_devops

Terraform - Warn for hitting AWS Service Quotas before apply

The Problem: terraform apply creates resources without taking into consideration services quotas.

The Need: Verify there are enough Service Quotas before terraform apply creates new resources.

Background: Staging and Production environments have a dedicated AWS account (one for each). Successful plan execution in Staging does not mean it will succeed in Production since they both hold different Service Quotas limits.

Offered solution: Add to the terraform-aws-provider a piece of code that can warn or fail the terraform apply execution due to hitting a Service Quota's limit. This also means adding additional code to terraform that adds two flags -service-quotas-warn (show warnings) and -service-quotas-fail (fail if there's a warning).

DISCLAIMER: It's possible to enforce the same Service Quotas across multiple AWS accounts with AWS Organizations, though it's irrelevant since not all Terraform users use the AWS Organizations service.

Example:

$ terraform apply -service-quotas-fail -auto-approve
...
[LOG] Checking quota limits
[WRN] VPC - required 6, quota 5
[WRN] EIP - required 17, quota 15
[WRN] Request the above Service Quota before proceeding
[ERR] --service-quotas-fail was set # exit 1

My Question To You Is: Is this something you would use? Have you also experienced issues when deploying to Production and hitting the Service Quotas limits?

https://redd.it/lm5w3o
@r_devops

Experiences with Macbook M1?

Hey,

Is anyone using a M1 Macbook for working in a DevOps/SRE role?

I'd like to read some experiences regarding the most common tools:
- Docker
- Terraform
- Packer
- Ansible
- Kubernetes (kubectl, etc.)

I've done some research but didn't find a DevOps point of view yet.

What really attracts me about these new Macbooks is the battery life paired with the great performance.

Thanks in advance!

https://redd.it/lmc986
@r_devops

Does this sound like devops?

I received an invitation to sit for an interview for a Devops Trainee position but the job description sounds so vague and different from what I googled about devops. I'm from a non-tech background and it was a role I randomly applied for without much consideration because I didn't actually think I would get an interview. Now I'm wondering if it's a clickbait job title to draw in inexperienced applicants and if the interview would be worth my time. My goal is to eventually to transition into tech but I'm not sure if this is the right way forward. Would some appreciate some advice.

​

Work with tech team to develop a deep understanding of the business cases for change, then drive the approval of projects through site and IT governance processes
Manage site IT Risk, Change, & Compliance tasks for daily operations and during project deployment
Maximizes business value via technical knowledge of strategic IT Applications
Key role in promoting good information practice, utilising technology and improving business processes.

https://redd.it/lmdeci
@r_devops

Image Pull Error K3s

Hey guys,

I am trying to debug the below issue while deploying MariaDB 10.1.14 version on the cluster.

pulling image: rpc error: code = NotFound desc = failed to pull and unpack image "docker.io/library/mariadb:10.1.14": failed to unpack image on snapshotter native: failed to extract layer sha256:42755cf4ee95900a105b4e33452e787026ecdefffcc1992f961aa286dc3f7f95: failed to get reader from content store: content digest sha256:5c90d4a2d1a8dfffd05ff2dd659923f0ca2d843b5e45d030e17abbcd06a11b5b: not found

We are using the native snapshotter because of the environment feasibility.

Any leads on debugging are highly appreciated.

Thanks

https://redd.it/lmgjvb
@r_devops

The Reports of Devops's death are greatly exaggerated

Hey everyone. I wrote a post about the transformation of devops:

https://adnaan.badr.in/blog/2021/01/25/the-reports-of-devopss-death-are-greatly-exaggerated/

This covers my experience and doesn't comment on every aspect of devops out there. Would love to hear some thoughts.

https://redd.it/lmhtim
@r_devops

Any one with good spark kafka experience

Spark kafka automation managing tons of different users with high eps any thoughts tips

https://redd.it/lmcsg7
@r_devops

Blog A CLI tool that can easily manage more than 281 runtimes, making it easy to keep things updated and/or switching between versions. And it’s open-source :)

I just wrote this post. I'm showing an OSS tool that can easily keep things updated on *NIX/Windows and/or easily switch between versions. It's very useful on CI/CD pipelines.

Feedbacks/suggestions/* are always welcome :)

See on Medium: https://medium.com/bash-tips-and-tricks/an-easy-way-to-switch-between-runtime-versions-nodejs-terraform-and-279-53fdfbcb4049?sk=43548418bf394d80e277a39a76070843

See on my Website: https://www.lozanomatheus.com/post/an-easy-way-to-switch-between-runtime-versions-nodejs-terraform-and-279

https://redd.it/lm57x5
@r_devops

WireGuard for fleets?

I've been wanting to see if WireGuard might work for our fleet, but I honestly can't see how it can work at a large scale if you need to generate a keypair for every host and drop the public key into the server's config.

I guess a single key could be reused across hosts but that seems insecure.

We currently use OpenVPN with TLS auth, so all we need is a signed cert on the client's side to authenticate which works quite nicely. But WireGuard supports no such thing.

I've also seen paid solutions like Tailscale but I would have a hard time convincing the company to fork out enough money given our fleet size. Also checked out ZeroTier, but despite being open source, their licensing means you have to pay for their network controller. Not affordable for our fleet size.

https://redd.it/lm15u2
@r_devops

Nextjs10 & Serverless Framework

Working on a boiler plate project for serverless framework & NextJs10.

This seems to be the latest plugin: https://github.com/serverless-nextjs/serverless-next.js

I don't seem to be getting anywhere following this simple guide.

Does anyone have any advice or material I could use to get off the ground with this please?

https://redd.it/lml2rp
@r_devops

NodePort issues

Hi there,

I am performing some testing on MySQL pod using sysbench running on a remote server.

I tried to mount the NodePort service to the host but it doesn't work, see below the criteria and results.

k get pods -o wide

NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES

mysql-7d9bcb665c-cdkfx 1/1 Running 0 3h36m 10.42.0.36 k3s-node2 <none> <none>

[root@testsytem\]# k get svc

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE

mysql NodePort 10.43.84.78<none> 3306:30016/TCP 22m

From the host, if I curl to the pod cluster IP with the port, it works fine but the Nodeport

curl -Iv 10.42.0.36:3306

* Trying 10.42.0.36:3306...

* TCP_NODELAY set

* Connected to 10.42.0.36 (10.42.0.36) port 3306 (#0)

\> HEAD / HTTP/1.1

\> Host: 10.42.0.36:3306

\> User-Agent: curl/7.65.3

\> Accept: */*

\>

Results for nodePort

curl -Iv localhost:30016

* Trying 127.0.0.1:30016...

* TCP_NODELAY set

* connect to 127.0.0.1 port 30016 failed: Connection refused

* Failed to connect to localhost port 30016: Connection refused

* Closing connection 0

curl: (7) Failed to connect to localhost port 30016: Connection refused

I see on the ports on the host, nothing listens on 30016?

How can I debug this issue?

Thanks

https://redd.it/lm4c4n
@r_devops

Hashicorp packer on macbook M1?

I recently decided to invest on a laptop and dedicate it on development and devops stuff..


I thought it would be a good idea to get the new Macbook M1 pro.. It could be a mistake..


I tried installing Packer through brew and it does not find a bottle.. at first I was hoping it was an issue related to Big Sur but then I realised it works just fine in all of my other macbooks that have an Intel cpu.


Has anyone had the same issue and managed to solve it ?


Thanks!

https://redd.it/lm3a5z
@r_devops

Tool to deploy static sites from Github repo into AWS account

Hey friends of /r/DevOps. I wanted to share a free tool that we built that connects up your Github repo and your AWS account and deploys static sites.

This came from something my team and I personally experienced - infrastructure is annoying to deal. You need to spend a lot of time and effort to set up the workflow and processes required to build, deploy, and monitor your infrastructure. At the end of the day, as a developer first, you just want to write code and not worry about the underlying infrastructure.

I think tools like Netlify and Heroku are great but at the end of the day, you never have the truly visibility and ownership. With what we built, you have full ownership of the infrastructure and if you decide to leave us, your stuff will still stay running.

This is our super early beta MVP. We're really looking for feedback and opinions.

Oh and here is a quick demo video in case you don't want to go through the hassle.

Thanks and looking forward to some comments!

https://redd.it/lmolv9
@r_devops

Curated GitHub repository on how organisations around the world use AWS

Curated GitHub repository on how organisations around the world use AWS

I’m curating engineering blog posts, videos and other cool resources on AWS

https://github.com/upgundecha/howtheyaws

https://redd.it/lmpu7g
@r_devops

Why not use Kube API and GitOps to manage infrastructure?

Kube API and GitOps are some of the major advances in the industry we got recently.
Yet, most Infrastructure as Code (IaC) types of tools do not embrace them, at least not fully.
Except, as far as I am aware of, Crossplane, combined with GitOps-type of tools like Argo CD and Flux.
Here's a quick overview.
\>>> https://youtu.be/n8KjVmuHm7A
What do you think? Can Crossplane be a blueprint for the next-gen IaC tools?

https://redd.it/lmqtua
@r_devops

Cutting Build Time in Half with Docker's Buildx Kubernetes Driver

Hey friends, I wanted to share with you all how we've recently undertook a project to revisit our build infrastructure. Long story short, we were able to cut our build times in half by migrating to Docker's Buildx Kubernetes driver. Here's a link to a blog article my peer wrote that fully details what we tried and what we found to be successful.

For the next few hours, we're hanging out in zoom to demo some of this or field any questions. (Check the bottom right of the page.) If you're free, stop by to hang out and talk Kubernetes, Docker, devops or whatever with us!

https://redd.it/lmt9rr
@r_devops

Cluster Infrastructure with Docker Swarm, Docker Compose, and Traefik

Hey, I thought I would share 2 articles I wrote about Docker Swarm, Docker Compose, and Traefik recently:

Container orchestration with Docker Swarm: https://juliensalinas.com/en/container-orchestration-docker-swarm-nlpcloud/

Routing requests to the right service with Traefik: https://juliensalinas.com/en/traefik-reverse-proxy-docker-compose-docker-swarm-nlpcloud/

I'm basically talking about how we're doing things behind the hood at NLP Cloud, where each spaCy NLP model is running inside its own container.

I hope some of you will find these posts useful.

https://redd.it/lmo6h0
@r_devops

Architecting with Google Kubernetes Engine

Colleagues, the Architecting with Google Kubernetes Engine specialization will teach you how to implement GKE solutions including building, scheduling, load balancing, and monitoring workloads, as well as providing for discovery of services, managing role-based access control and security, and providing persistent storage to these applications. It incorporates hands-on labs using our Qwiklabs platform.Gain high-demand skill in Google Compute Engine, Google App Engine (GAE), Google Cloud Platform and Cloud Computing.Training modules includes: 1) Google Cloud Platform Fundamentals: Core Infrastructure: Learn the computing and storage services available in Google Cloud Platform, including Google App Engine, Google Compute Engine, Google Kubernetes Engine, Google Cloud Storage, Google Cloud SQL, and BigQuery, 2) Architecting with Google Kubernetes Engine: Foundations: Review of the layout and principles of Google Cloud Platform, followed by an introduction to creating and managing software containers and an introduction to the architecture of Kubernetes, 3) Architecting with Google Kubernetes Engine: Workloads: learn to perform Kubernetes operations; creating and managing deployments; the tools of GKE networking; and how to give your Kubernetes workloads persistent storage, and 4) Architecting with Google Kubernetes Engine: Production: Learn about Kubernetes and Google Kubernetes Engine (GKE) security; logging and monitoring; and using GCP managed storage and database services from within GKE.

Enroll today (individuals & teams): https://tinyurl.com/y82vmyun

Much career success, Lawrence E. Wilson - Online Learning Central (https://tinyurl.com/gh8n9uq7)

https://redd.it/lmvbxv
@r_devops