Devopsdays Texas Day2!

We're running a FREE DevOpsDays Texas today.

Join us won't you?

https://links.devopsdaystx.org/tickets

https://redd.it/lwvc9g
@r_devops

We’re the engineers rethinking Kubernetes at Spotify. Ask us anything! crosspost r/kubernetes

https://www.reddit.com/r/kubernetes/comments/lwb31v/were\_the\_engineers\_rethinking\_kubernetes\_at/

https://redd.it/lwxp48
@r_devops

Burned out from work and lockdown

So it’s been more than a year that I’ve been stuck at home and I’m starting to feel burned out. The workloads keep increasing and timelines getting more ridiculous. Former manager left, his successor left and I seem to be headed in the same direction but can’t find inspiration to start interviewing due to current workload. I spoke to them briefly and they all came back with the burn outs made them start looking as well.

I took the advice of some and didn’t take the leadership role but now things are getting worst for the team since someone else took it.

How do you guys get inspired to start interviewing after being burned out?! I got a few interviews already but I just feel exhausted having to spend 8 hours interviewing per employer.

Edit: fix typos

https://redd.it/lwtr4p
@r_devops

Fosdem talk about infrastructure drift

We were lucky enough to hold a talk about infrastructure drift at Fosdem recently and decided to share it as a blog post for those who couldn't attend the conference.

https://driftctl.com/fosdem-pokemon-drift-talk/

https://redd.it/lwxr7v
@r_devops

Devops intern interview.

I have interview for devops intern next week. What questions should i expect from the recriuter and what should I know?

https://redd.it/lwwjyq
@r_devops

Why would Dev and Ops want DevOps and what's in it for them personally?

Hi everyone,

I hope you're doing well! I'm currently doing an internship and I'm building a devsecops service for a consulting company. In order to understand each one's needs and goals I wanted to know if any of you work on the Dev or Ops side (or have worked there), and could thus explain to me what the expectations of these two teams are regarding the implementation of DevSecOps (or DevOps) for their services. We often talk about organizational or other advantages, but it's still improvements in the broad sense and I'm not sure that a better organization or a better ride makes the devs want to invest in this DevOps project. So I want to find points of improvement so that everyone can find in the DevOps (or devSecOps) something that interests him at its scale, I probably already have some points but this will confirm them and i would like to get some more! (example : « as a dev i would like to have a new interfaces, or a new IDE or some courses to start with a DevSecOps solution and it would help me to involve myself on this project») or even explanations as to why you might be resistant to this kind of approach. I take everything as long as it's personal and not from a simple business point of view.

I hope I have made myself clear i'm not native english speaker.

Feel free to contact me if you want to discuss.

Thank you in advance, have a great day ! :)

https://redd.it/lwrnoz
@r_devops

DevOps candidates from India: Why are your resumes an endless list of bullets?

I'm in the process of hiring/interviewing candidates for a few open DevOps roles in my company. I've been seeing a lot of resumes with miles-long bulleted lists and I want to bang my head against the desk every time I see one. And they always turn out to be from India. So, Indian Engineers, why are you doing this? It feels like you're treating your resume like buzzword bingo, and it makes me want to throw it out.

https://redd.it/lwjfqo
@r_devops

3 Ways Microservices are transforming businesses today!

Microservices is the new buzzword circling around the industry today. You surely wouldn't want to miss the incredible benefits it can provide to grow the bottom line of your business. Here is how Microservices is transforming businesses these days. The blog walks you through the business benefits of Microservices.

https://redd.it/lwq91i
@r_devops

What to use for CaC?

I am slowly implementing best practice of DevOps where I work.
We used Terraform for IaC and Azure DevOps to deploy.
I am starting to look at open source Configuration as Code tools, which one I heard best of is Ansible.
However this seems it deploys the infrastructure as well.
I also don’t see the requirement as Terraform configures most, containers configure the apps and Azure DevOps tasks do the rest.

Question is do you really need a CaC and if so what suggestions do you have?

https://redd.it/lwq2be
@r_devops

Icinga2 how to delay notifications only for warning state

Hello, I have a lot of errors when I try to separate the notifications time for the warning state. I need to receive the WARNING notification for example after 10m.

This is my templates:

template Notification "mail-host-notification" {

command = "mail-host-notification"

period = "24x7"

types = [ Problem, Acknowledgement, Recovery, Custom, FlappingStart, FlappingEnd, DowntimeStart, DowntimeEnd, DowntimeRemoved, ]

states = [ Up, Down, ]

}

​

template Notification "mail-service-notification" {

command = "mail-service-notification"

period = "24x7"

types = [ Problem, Acknowledgement, Recovery, Custom, FlappingStart, FlappingEnd, DowntimeStart, DowntimeEnd, DowntimeRemoved, ]

states = [ OK, Critical, Unknown, ]

}

​

template Notification "mail-warning-notification" {

command = "mail-service-notification"

period = "24x7"

types = [ Problem, Acknowledgement, Recovery, Custom, FlappingStart, FlappingEnd, DowntimeStart, DowntimeEnd, DowntimeRemoved, ]

states = [ Warning, ]

}

And this is my Apply notifications:

apply Notification "mail-icingaadmin" to Host {

import "mail-host-notification"

user_groups = host.vars.notification.mail.groups

users = host.vars.notification.mail.users

//interval = 2h

//vars.notification_logtosyslog = true

​

assign where host.vars.notification.mail

}

​

apply Notification "mail-icingaadmin" to Service {

import "mail-service-notification"

user_groups = host.vars.notification.mail.groups

users = host.vars.notification.mail.users

//interval = 2h

//vars.notification_logtosyslog = true

assign where host.vars.notification.mail

}

apply Notification "mail-icingaadmin" to Service {

import "mail-warning-notification"

times.begin = 10m

user_groups = host.vars.notification.mail.groups

users = host.vars.notification.mail.users

//interval = 2h

//vars.notification_logtosyslog = true

assign where host.vars.notification.mail

}

Where the mail for warning are delayed by 10m by the line times.begin = 10m

But I have a lot of double declaration for objects notification. What's the solutions? Thank you.

https://redd.it/lwpwen
@r_devops

DevOps that is not DevOps

Hello All,

I started a new job that is titled "Systems Analyst" but I work in a group called "DevOps". Essentially, we are the people who set up triage, create defects, and just pull data that is relevant and feed it to the actual developers who can then make the needed changes.

My question is: There is barely any actual working on servers, it's a Fortune 500 so everything is super siloed out, but like my co-worker was telling me, "no code writing, we don't do deployments, we don't run apps or start scripts, none of that stuff". And I am thinking, what kind of DevOps role is this? The most command line you will do is logging into a log server and pulling out log data. Everything else is done via Interactive Web Sites. Even standard debugging of stuff is done either via a SQL query or some other kind of way that I am not used to.

I wasn't really sure what to expect, I took the job to build out my resume. Because I was having a struggle finding anything else at the time. Can anyone else relate to this very siloed corporate tech environment, where one could very easily work in 'devops' and not know a thing truly about any of the DevOps stuff we love so much. I am guessing this team took the name "dev" and "ops" and combined it without actually understanding the implications, but then again, maybe I am reading too far into it, but the day I would actually work in DevOps, and not have the authority to push code, work with infrastructure and automation, and all the stuff we love, is that day I thought would never happen. Don't get me wrong, many of the trending DevOps tools and frameworks are being used, just not by this particular DevOps team, and it's really Development Production Support, to be clear. So there are hundreds of other teams, so things are just so vast.

This is what to expect when working for a very large fortune 500 (That is not in a tech space)? Where you have all these "architects, and developers and DevOps engineers" who really don't know anything? As I understand I could leave my current post after a period of time and go to one of the other teams, so it isn't a death sentence per se, I am just trying to understand, and don't exactly want to ask my boss! And I am not complaining because the pay is better than I ever have had. I just wonder what they actually pay people who actually know stuff / get to get their hands dirty.

​

Thanks All, Ciao.

https://redd.it/lwpnsx
@r_devops

No product roadmap

I work in a 3 year old SaaS startup with no product roadmap. How common is that? Dev just moves things around on a kanban board based on customer requests. Seems like it’s a bit f-d up. Existing customers don’t always know when new features roll out and as a marketing lead I struggle to understand what is going on. Obviously this is a bigger leadership problem as our 2 cofounders have conflicting visions. I’m wondering how common is this as a completely non technical person who loves tech.

https://redd.it/lxb140
@r_devops

What are the best options to stay updated with new technology?

I am relatively new to DevOps and still trying to find junior position. I am curious to know that what are the best ways in industry to stay updated with new tools and technologies.
Also, every new technology has it’s own challenges and issues and you can only know about some issues when you start using them. How do you overcome those challenges?
Thanks :)

https://redd.it/lwn6ue
@r_devops

How to get a job using k8s without much experience?

So I've begun to look for another job because my current one is not very challenging and it's getting stale. It's been pretty discouraging to say the least. I'm looking for a senior role as I've spent almost two years consulting in devops now and a couple years as an SRE and another 5 as a software engineer.

It seems these days that to most companies, devops is basically kubernetes and docker and that's it. I could meet almost every other aspect of the JD, but the second I mention I have little docker/k8s experience I dahm near get the phone hung up on me. I have tons of certifications in AWS, GCP, and Terraform and a Master's Degree, doesn't mean shit without k8s apparently.

I've been asking for clients at work who use k8s but since we work with a lot of companies looking to migrate, they are on legacy tech stacks and a lot of it is lift-and-shift. So I'm kind of stuck as my only option is to get a certification in Kubernetes. I've gotten pretty good at taking certs at this point (got 4 pro certs and 3 associate certs in 18 months) so I know I can do it if I put in the time. I just need to be able to answer the interview questions, I'm a pretty fast learner and docker/k8s is easy enough to understand conceptually, I don't think that's going to stump me at this point.

My fear is that even getting the cert won't be enough as I know people like experience more. I'm not willing to take a mid-level job as I could probably make senior consultant here in less time, and in a few years another tool will come out that everyone will go crazy about and I'm not trying to make my career about tools. DevOps is way more than that, if I forced every client to use k8s I'd be out of a job pretty fast.

What has been your experience with this? For the guys that work with k8s, what is the best way to convince a potential employer that you know your stuff? My strategy is to get the cert and write some blog posts about k8s, maybe contribute to open source as well if I have the time.

https://redd.it/lwijyd
@r_devops

3 Best Practices for Shifting Security Left3 Best Practices for Shifting Security Left

"Companies want to tighten their security fast, confidently, and with full transparency. A good place to start is by codifying your policies and shifting your security left, but it’s not enough!"

In this live webinar, we dive deep into the cultural philosophy of where security stands today in the cloud space, how to promote alignment between security and DevOps, and how to adopt a security culture that protects your cloud infrastructure.

Why should you attend?

\- Learn three best practices to shifting your cloud security left

\- Bridge the gap between your security team and DevOps

\- Learn what is policy-as-code

\- Understand which workflows that you should implement to properly shift left your SecDevOps.

\- Learn how to continuously tighten cloud security with the proper visibility and analytics

Join us on the 4th of March.

You can ask our experts anything!

Register here: https://www.magalix.com/3-best-practices-for-shifting-left 

#cybersecurity #cybersecurity #cloudsecurity #securities #computersecurity

https://redd.it/lwgpot
@r_devops

Am I Good Fit?

Hey everyone,

​

I was recently enlightened about the role of a DevOps Engineer and how they play a key role in getting software updates to the masses. I have been inspired to pursue a career in it for the automation aspect, but am not sure if a company would "take a chance" on me.

​

My professional background includes 3 years of \~300-500 people environments working with a team to manage virtualized Windows servers and some certifications including the CCNA, Security+, Azure Fundamentals and an associates in networking.

​

Since I am heavily experienced in Windows/PowerShell and a bit of Azure, I'm shifting my attention to Linux/Bash, Azure (and AWS), Jenkins, Docker, Kubernetes, Ansible, etc. I am utilizing this video to get me started on DevOps labbing and concepts.

​

So my questions:

Would a company take a chance on me to be a DevOps Engineer?

Should I only apply to Junior DevOps Engineer positions?

Should I get Azure or AWS DevOps professional certifications?

How do I prove on a resume that I would be fit for the job with no actual DevOps experience?

​

Thank you so much for reading and please let me know what you think.

https://redd.it/lwfg40
@r_devops

Is there a cloud with affordable DDoS protection?

Hi everyone. Recently, I got involved in a project that doesn't have a huge budget, but it's in an industry that's vulnerable to DDoS attacks of hundreds of Gbps. We'd like to use a cloud to host our infrastructure, but it looks like cloud providers either don't offer a decent one, or it's extremely expensive. The big three require at least $3k/year for their DDoS mitigation, which would exhaust our infrastructure budget. The only suitable hosting platform seems to be OVH, but it's not really a cloud if we have to manage dedicated servers. Do you know of any possibilities?

https://redd.it/lwdb17
@r_devops

Nexus on a NAS

I got a silly question,
I have a NAS lying around collecting dust.
Can I install nexus repository on it ?

https://redd.it/lxrg01
@r_devops

Is DevOps "Support" Engineer a serious role?

I know titles are flimsy, but I've been working with a big company for a few years now and my title has been "Software Engineer" except the issue is that I've done more System Administration type of work and haven't been part of any development cycle. This is because we use old technology, but we're transitioning into modern technology stack and they promised opportunities in development.

The time has come and the roadmap has been shared and it seems that we're going to be called "DevOps Support Engineers" to work with the "DevOps" engineers that were hired about a year ago to help with the development and transition.

I've been excited about going into DevOps and learning the new technology stack, but I feel like I'm just a SysAdmin for DevOps technologies.

So within the DevOps Engineer role, do some people work more on the dev side and others work more on the operation side?

I know ideally people should be able to do "everything", but I feel like my job is just make a stark distinction between those who will develop and maintain the pipelines and those who will make sure to fix any issues that arise (i.e. DevOps "support" engineers).

https://redd.it/lxr5wk
@r_devops

Azure conditional access + kubectl = weekly annoyance

Hi, i was wondering. Does anyone else run into this issue with kubectl and azure conditional access? https://github.com/kubernetes/client-go/issues/931

Every seven days i have to manually delete my access tokens and go through the login process. The login process is fine but its tedious to remove the access token in kubeconfig. This can be done with some cli magic, but why put ducktape on a already broken pipe..

I don't know enough go to fix this issue myself yet, but i would assume others also run into this when using 2fa and Azure to connect to clusters. How are you dealing with it in your org?

https://redd.it/lxo4nf
@r_devops

Getting non Git defined Data in GitOps

Hi guys,

To keep it short, I was responsible for creating a new cloud for a company and (ofc) adopted the GitOps way. The stack in is Kubernetes / AWS / Terraform and ArgoCD (there are more but don't matter for this topic).

At some point we started using a bunch of OSS that were built for Kubernetes (like prometheus-operator, albingresscontroller) and I noticed that most of these techs that require interaction with an AWS service will authenticate via an Role ARN you defined in AWS and have to place in the annotation of the service account that the respective deployment will be using.

​

The problem is, how do you get the ARN in the SA annotation before commiting the resource to Kubernetes (As in GitOps you would have everything defined already in Git). I have yet to find or come up with a simple solution. Anyone else here had this issue ? How did you tackle it?

https://redd.it/lxku8q
@r_devops