setting up s3 bucket to handle cross origin resource policy

Hello,

​

I am facing issues playing audio files from my s3 bucket. I was wondering if I set up the cross origin resource policy poorly.

​

Here is my server.js file:

​

app.use(cors());


app.use(function(req, res, next) {
res.header("Cross-Origin-Resource-Policy", "cross-origin");
res.header("Cross-Origin-Embedder-Policy", "require-corp");
res.header("Cross-Origin-Opener-Policy", "same-origin");
next();

});

​

The error chrome throws me is:

​

GET https://monkeys.s3.amazonaws.com/sounds/1/6.wav?AWSAccessKeyId={test}&Expires=1627949062&Signature=HkT2CyazqovtjPVpDNKCu9Nsyk8%3D&response-content-disposition=attachment net::ERR_BLOCKED_BY_RESPONSE.NotSameOriginAfterDefaultedToSameOriginByCoep
manage:1 Uncaught (in promise) DOMException: Failed to load because no supported source was found.


My bucket is set up like this in the cors section:

​

[
{
"AllowedHeaders": [
"*"
],
"AllowedMethods": [
"GET",
"PUT",
"POST",
"DELETE"
],
"AllowedOrigins": [
"https://telecurve.herokuapp.com/manage"
],
"ExposeHeaders": []
},
{
"AllowedHeaders": [
"*"
],
"AllowedMethods": [
"GET",
"PUT",
"POST",
"DELETE"
],
"AllowedOrigins": [
"https://telecurve.herokuapp.com/"
],
"ExposeHeaders": []
},
{
"AllowedHeaders": [],
"AllowedMethods": [
"GET"
],
"AllowedOrigins": [
"*"
],
"ExposeHeaders": []
}
]

​

Anything im missing? I've been at this for days and can't seem to find out why. I have more posts detailing the code side if you need more context! Desperately need help.

https://redd.it/owrege
@r_devops

AppOps: The evolution of DevOps

Hey everyone, I read this blog and its really amazing. The way author has explained everything regarding how DevOps can be used more efficiently and how it has evolved itself to AppOps is really great.

What do you guys think, AppOps tools like Devtron or Shipa as mentioned in the blog, will be the future ? Will these tools be able to remove the friction between the developers and operations team by providing a flexible & seamless experience ?


https://betterprogramming.pub/devops-appops-f096cdbb02ac \- Blog

https://redd.it/owwis9
@r_devops

How do you know what tools are right for you?

Hi all :)

I'm in the process of evaluating a new tool for my company, and I'm searching the internet for tips and best practices for choosing the right DevOps tools. Not necessarily the "best" tools but the right tools.


I've found some interesting articles, and frankly, I enjoy delving into the minds of likeminded devs to compare their thought process to mine, so I wanted to share some of the articles I found and ask you guys - what factors do YOU take into consideration when evaluating a new tool? is it just cost vs. value, or do you have more bespoke criteria? do you factor in your team size or any existing tools you already have? I'm curious to know what should be my focus.

Here's some of what I've found and hopefully you guys could add some more insights on top of it =\]
Just to clarify, I'm interested in the process itself and not just what tools you have.
* https://www.helpsystems.com/blog/5-rules-choosing-best-devops-tools
* https://techbeacon.com/app-dev-testing/how-find-right-devops-tools-your-team
* https://hackernoon.com/moving-from-circleci-to-buildkite-everything-you-need-to-know-o73r37ie
* https://www.threatstack.com/blog/tips-on-choosing-the-best-free-devops-tools


Much obliged!

https://redd.it/owggnf
@r_devops

The DORA DevOps performance metrics

Feedbacks are very important in DevOps. As metrics provide feedbacks, they are essential to the success of DevOps. But they must be appropriate, and it’s not an easy task. DORA assessed teams to understand how they develop, deliver and operate software (“Accelerate State of DevOps Report”).

The report identifies 4 DevOps performance metrics that can best help the organisation to achieve its goals.The performance of these metrics is measured on 4 levels.

Read more...

https://redd.it/owy2l5
@r_devops

Is there alternative to OTP / 2FA?

I am really annoyed each service requires me enter one time password after enabling 2 factor authorization across all company's WEB assets: it takes 10-15 min each day to login to all those services...

I wonder if there are alternatives. We don't use 2FA when work with SSH keys but WEB apps love 2FA (Jira, WEB cloud consoles, etc).

I'm using browser built-in password manager, There are few OTP plugins for Firefox/Chrome:

* https://addons.mozilla.org/en-US/firefox/addon/auth-helper/
* https://chrome.google.com/webstore/detail/authenticator/bhghoamapcdpbohphigoooaddinpkbai?hl=en

I haven't used KeePass though it also supports 2FA via plugins:

* https://keepass.info/plugins.html

Is it a good idea to delegate 2FA to on PC apps? Today I read 2FA tokens from mobile device and it make sense (intruders supposedly don't have access to phone if PC is compromized).

https://redd.it/owyfpj
@r_devops

Help How can an associate DevOps interview a senior DevOps ?!

As the title states.
I am the only DevOps in the startup I am working at, I have been telling my manager to bring a senior DevOps to learn from because I am still an associate, good thing we have 2 senior candidates but now I am asked to interview both of them, I have no idea how to interview someone who has +10 years experience in everything I know in life, XD.


How can I interview these candidates and what questions should I ask them, btw I am not intevirweing them alone, I have one of the senior developers with me.

https://redd.it/owcfxu
@r_devops

Handing over AWS services to client

Hello,

I'm stopping freelancing full stack development and have quite a bit of AWS infrastructure to 'hand over' to a client.

Annoyingly it is under 2 separate accounts. One account has some S3 buckets and EC2 instances, this account is my main amazon account and is part of an AWS organization I got my client to create at the start (meaning they pay for it). The second account has quite a few EC2 instances and more S3 buckets, this one I have an IAM account for (I'm happy with leaving everything on this account as I believe they are the owner of it).

Now for obvious reasons I don't want any of their services running off my personal AWS account when I stop so ideally need to transfer it to the IAM account. What is the easiest way to do this?

What happens to the services running on my main account if I leave the organization? Do they stay with me and I am then responsible for paying or are they transferred to the organization?

And what is the easiest way to transfer SSH access to the EC2 instances if my client doesn't have a new dev lined up immediately (I.E there is no one to give SSH access to before I stop)?

Appreciate any help as I am not an AWS expert.

Thanks

https://redd.it/owf6ut
@r_devops

WHAT DOES DAY TO DAY DEVOPS LOOK LIKE?

I currently am an infrastructure engineer focusing on vmware tech, but also with a lot of windows server tech, minimal to no linux experience. Very minimal if any infrastructure as code. No terraform, no scaling out with code or automatically. Static shop, no cloud all on prem. Build servers, clusters, solutions, etc. I use powercli as much as I can.

But, the $$$ from what I can tell is in DevOps. I just don't know where to start to position myself for a pivot from mainly Ops into this field which seems intimidating to me. Currently I have VCP7-DCV and working on my VCAP-DCV design and deploy both. I am also working to complete AWS CCP and AWS Solutions Architect. I have 2.5 years enterprise (fortune 500 company) experience, 6 years prior experience at a small public school as sysadmin and as CTO at the end of that job.

I can pick up on any coding languages pretty easily, been dabbling in C#, python, and powershell the past few years but could easily ramp it up.

I currently make 67k /yearly. What can I expect if I pivot for a devops role?

I want to follow the money, and want to be in a role less user facing to be honest. I want to build solutions and enjoy seeing them work and not be constrained.

https://redd.it/owgh7x
@r_devops

AppSweep, shifting mobile application security testing left

Hi all!

Today we’ve released the first version of our free app scanning tool ‘AppSweep’, aimed at shifting mobile app security testing left in the development process.
https://appsweep.guardsquare.com/

The initial set of static analysis passes aims to check your uploaded apk for bad crypto setups, faulty handling of TLS connection and webviews, visible keys, leftover logging code, etc.

Different from other tools, our goal is to make a tool for mobile apps focused on app developers that also integrates nicely into development and CI/CD pipelines.

AppSweep provides a simple API for CI integration and a GitHub app to seamlessly integrate into GitHub projects.

We also created a Gradle plugin, in order to seamlessly integrate into Android Studio and CI/CD pipelines. The plugin can be found on the Gradle plugin repo and on GitHub

Similar to ProGuard, we’re counting on the community to guide us in further development. What did you like? What annoyed you? Suggestions about CI/CD integration? All input is welcome here or at our Discourse community.

https://redd.it/ox2ili
@r_devops

Easiest way to delete multiple artifacts with the same version from Nexus?

Say I have a gradle multi-project with 20 jars published to nexus all with the version 0.0.1ch1234c-SNAPSHOT. I know how to find all of these artifacts with the repository browser, but in order to delete them, I have to click on each package and delete one by one, this is quite tedious. Is there a way to "select all" or to do this with an API call or something?

https://redd.it/ox3qsp
@r_devops

Managed databases vs self hosted for dev environments

Hi /r/devops,

While managed databases are awesome and "just work", there is an issue with them and that is, of course, pricing. I totally get the idea that it is a managed service and you are saving time and that should come with a price. But how are you dealing with this when it comes to your dev/qa environments?

In my case, we have 5 different projects running in single VMs (so 5 VMs per environment) and each VM is running postgres. Running database servers on VMs along with the project itself is quite inconvenient - our infra can't be immutable in that sense. To completely recreate a project in dev environment, I would have to first backup the database somewhere and restore it after VM recreation.

And so we get to my final point - how are you guys handling this at your companies? I would assume it's a problem regardless if you are running your projects in VMs or Kubernetes.

Could I perhaps run a single managed database SERVER per environment (not per project) and host multiple databases on it, for different projects? Is that something that would make sense? The cost wouldn't be that high and it would provide me with greater flexibility when it comes to recreating VMs. Is that something worth considering or is running a single database server for different projects bringing some caveats?

https://redd.it/ox2q8y
@r_devops

Regarding Cloud Native buildpacks

A while back one of the users of Devtron opened an issue regarding the support for Cloud Native Buildpacks - https://github.com/devtron-labs/devtron/issues/543. For context, Devtron is an Opensource SaaS-like experience for an End-to-End Kubernetes Software Delivery. The issue raised is to create a workflow to deploy apps using Buildpacks adding relevant templates, CI/CD pipelines on top.

I have a few questions on buildpacks, It would be great to know what you'll think of it.

So, Are you using Buildpacks to deploy applications? If yes, How are you using it, meaning, do you customize it? do you use it at scale or move out of it at scale? Does it have more utility in some languages compared to others?

As of now, we don’t support it but would want to prioritize integrating it into Devtron, if there are enough usecases. Would love to hear from you on this.

https://redd.it/ox6ekc
@r_devops

Preferred CI/CD tools?

Hello. I work as lone devops/server guy at a smallish company, and I was wondering what you guys use for CI/CD? I've looked a bit at teamcity, but that seems, lacking in features? I was thinking something like CircleCI and ArgoCD, as they seem quite cloud native, but yeah, idk.

https://redd.it/ox7pur
@r_devops

How do you add devops experience on your resume if you don’t get any at work?

I work as an Ops Engineer at a startup and I only get to to press the gitlab buttons for deployment. How do I really add devops experience on my resume so that I can transition from Ops to DevOps role.

https://redd.it/ox68f5
@r_devops

How many of you work in an organization that actually adopts newer technology vs switching jobs every 2-3 years to keep up? What does that process for evaluating new tech look like? Do you get promoted periodically to stay on board?

I've grown extremely tired of having to interview every couple of years to have to switch orgs just because a new technology comes along that ends up pushing you out of the market if you don't know it. Also, of having to switch for a promotion. At least the former issue is solved at the new company it would seem, but I'm wondering how many of you get reasonable promotions as well? I'm talking like 10-20 percent to stay instead of job hopping assuming your performance reviews are also stellar.

https://redd.it/ox7jgz
@r_devops

Show /r/devops: The Cloud Cost Handbook

Today Vantage is launching "The Cloud Cost Handbook" which can be found at https://handbook.vantage.sh/ - a set of guides and best practices related to cloud costs for developers, engineering leaders and finance counterparts. We're hoping distill complex cloud cost terms and concepts into a set of "plain english" guides that anyone can access.

From speaking with our customers and community we've found that cloud cost knowledge is typically "tribal knowledge" held by a few key people at an organization but not well known amongst broader community of developers.

We're still early and we're looking for contributions and support (feel free to give the repo a star!) to build this up over time - please let us know what you think!

The repo backing this is here: https://github.com/vantage-sh/handbook

https://redd.it/ox93zq
@r_devops

Changing the node type in an Amazon Elasticache Redis (w/no down time)

Changing the node type in an Amazon Elasticache Redis cluster (cluster mode enabled)

Does anyone know if the cluster knows how to handle the instance type change without any downtime or without flushing the data?

Has anyone ever tried this on a running production instance?

https://redd.it/ox9c2g
@r_devops

not sure where to begin with deploying Docker containers, but otherwise competent at programming.

Competent enough in programming to write an elaborate script and have it run on schedule to reliably execute various tasks, but not sure where to begin with deploying it using docker containers, and all that other devops good stuff.


So at my place, we're dependent on a lot of various scripts that run on a dedicated EC2 machine on a scheduled basis to execute various tasks.

These are .py tasks that just run on a windows instance.

We're trying to modernize how we do Ops, which involves bringing things like Docker/Kubernetes into the picture, but I'm largely a newbie in that regard. Is there any good resource that holds the hands of someone just through the devops specific bits, if they are competent enough in programming and know their domain enough to write reliable scripts.

Most sources I find online tend to assume a lot of existing knowledge, or are trying to push an ancillary product, etc.

https://redd.it/ox59ud
@r_devops

Jenkins linux master and windows worker node set up

I'm looking to offload some Jenkins builds to a Windows worker node. How is this typically done? If someone could point me in the direction of a good guide, I'd appreciate it. Thanks.

https://redd.it/oxehon
@r_devops

NSA, CISA release Kubernetes Hardening Guidance

https://www.nsa.gov/News-Features/Feature-Stories/Article-View/Article/2716980/nsa-cisa-release-kubernetes-hardening-guidance/

sub doesn't allow cross-posts, but saw this in /r/cybersecurity and it's def relevant

https://redd.it/oxg2zi
@r_devops