Is there tool for Automation & configuration management which is using programming and not DSL language ?

Hello all
i try to find tool like ansible or terraform which is using for its control
javascript or other programming language .
or maybe some layer above the tools .
Thanks

https://redd.it/dnr5xw
@r_devops

Any tool to track flow of microservice calls?

Using logs provably. We have logs consolidated and stored in splunk of different services.
Would like to find a way to analyse the flow between microservices which can help in monitoring or finding anamolies

https://redd.it/dnq8j7
@r_devops

Anyone use azure stack here? If so what’s your opinion on it?

See title. We are looking at azure stack to create more of a hybrid cloud for some of our higher compliance items. Just wondering if anyone here knows some pros and cons about it.

https://redd.it/dnm7x0
@r_devops

Tool for monitoring Linux cron jobs duration and exit status using Prometheus Node Exporter. Written in Go.

I wanted to get notified if a cron job failed or was running for more time than it should. Changing the actual cron job command code was not an option so I decided to create a wrapper around it that monitors the exit status and the duration. The tool writes to a file in the Prometheus format. The node exporter textfile collector parses the file and exposes it to Prometheus with the other metrics it provides.

I'm posting it here perhaps it helps someone out. Any contribution is welcome.

[https://github.com/abohmeed/cronmanager](https://github.com/abohmeed/cronmanager)

https://redd.it/dlhb2a
@r_devops

SSL certificates for yyy.gov.zz domain

I was wondering if we as a private business have rights to generate SSL certificate for the domain like yyy.gov.zz. More specifically the .zz part is a country specific code, and the second level name is .gov.

Long story short we have a governmental client and one of the far far countries which doesn't want or cannot generate SSL certificate for the specific subdomain and wants us as a software supplier company to purchase/generate one for them. So the question is can we both technically and legally purchase an SSL certificate for gov.zz like domains?

We have full access to the web server of the given project so we can verify the domain technically if requested by the SSL provider.

https://redd.it/do7yt6
@r_devops

Kubernetes Patterns : The Init Container Pattern

**Folks,**


In Kubernetes, an init container is the one that starts and executes before other containers in the same Pod. It’s meant to perform initialization logic for the main application hosted on the Pod.

Here's this week article [Kubernetes Patterns : The Init Container Pattern.](https://www.magalix.com/blog/kubernetes-patterns-the-init-container-pattern)

**What's inside:**

* The Initialization Pattern.
* What are Init Containers?
* Init Containers Design Considerations.
* Init Containers “Requests” And “Limits” Behavior.
* What Would Have Happened If We Hadn’t Used Init Containers?

[https://www.magalix.com/blog/kubernetes-patterns-the-init-container-pattern](https://www.magalix.com/blog/kubernetes-patterns-the-init-container-pattern)

https://redd.it/do809w
@r_devops

Tutorial: Deploy a Three Node Kubernetes Cluster on Fedora 30 on DigitalOcean

I wrote a short tutorial on how to deploy a small Kubernetes cluster on DigitalOcean using Fedora 30 as the base OS. It uses `containerd` as the container runtime and Weave Net CNI. Hopefully someone will find it interesting and/or useful. :)

If you have any feedback on the article or the site, please let me know! :)

https://lunar.computer/posts/kubernetes-fedora-30-digitalocean/

https://redd.it/do82n1
@r_devops

Is AppDynamics a robust enough monitoring platform? What else is typically needed?

Fowler recommends [that basic montoring is a prerequisite for microservices](https://martinfowler.com/bliki/MicroservicePrerequisites.html), and of course I think it would be a prerequisite for any kind of decently scaled software system.

So if we have AppDynamics set up that can show us the health of our various services, and we configure some rules and/or alerts, do you think this should make us confident we are in a good place with our monitoring, assuming we pay attention to it and refine it? Or would AppDynamics monitoring be unable to monitor certain key aspects? If so, what are they?

https://redd.it/docnua
@r_devops

Choosing the right place of work

Imagine you have two very good job offers on the table.

Company 1: Mid to large startup. Offers a B2B video analysis product with a solid customer base. You're very impressed with the level of professionalism and positive personal interactions with everyone you've met so far. Stack is .NET, mixed Windows / Linux, Azure Cloud.

Company 2: Mid-size established company with millions of end users. Offers a product aiming to solve a global-scale real world problem that you're very passionate about. You're impressed by the intelligence and dedication of the people you met during your interviews. The stack is all Linux, deployed on AWS, mixed Kubernetes and serverless.

Both companies are offering the salary you asked for. Benefits are roughly one to one. Both companies are about the same distance from home. All the quantifiable things are equivalent. The difference boils down to, in essence, people vs. product.

You need to make your decision by tomorrow.

Who do you choose?

https://redd.it/dodruw
@r_devops

Storing your secrets in Git just got a whole lot dumber

it was dumb af to begin with

but now this tool shows you other people's secrets in real time. Github, Gitlab and Bitbucket

[https://shhgit.darkport.co.uk/](https://shhgit.darkport.co.uk/)

https://redd.it/dobh8r
@r_devops

Free book: Kubernetes Up and Running, Second Edition

Microsoft is giving away this book if you are interested: https://azure.microsoft.com/en-us/resources/kubernetes-up-and-running/

https://redd.it/docxy7
@r_devops

TLS in Kubernetes

Pardon me for the noob question.

I have a spring boot web app that I want to deploy to a kubernetes cluster - for example in IBM Cloud. A requirement for this web app is that it should be exposed via https.

I have read from online articles that I could use Let's Encrypt to generate a certificate for my domain, but the problem is I don't have a domain, what I have is the IP address and port of the kubernetes node where my web app is deployed to.

What do I need to do in order to enable https on my web app?

TIA!

https://redd.it/dofnx1
@r_devops

Getting kubernetes logs to ELK stack?

Greetings,

​

In my organization, all our VMs syslog, nginx etc get sent to a logstash instance in the same VPC, then forwarded to a central logstash cluster which inserts them in elasticsearch/kibana. Unfortunately I am not the one who set this all up, so I am doing some archaeology here.

​

I have now provisioned a few k8s clusters in **GKE** which by default sends container/ingres etc logs to **StackDriver.**

​

I am trying to find the best solution for getting these logs to our central logstash /ELK systems.

​

​

I found this: [https://github.com/GoogleCloudPlatform/pubsubbeat](https://github.com/GoogleCloudPlatform/pubsubbeat) .

I also found this:

[https://kubernetes.io/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana/](https://kubernetes.io/docs/tasks/debug-application-cluster/logging-elasticsearch-kibana/)

​

​

I'm not married to using StackDriver if I can get the logs in a more direct way. I'm wondering if anyone else is putting their kubernetes application etc logs into ELK, and how you are doing it. Bonus points if its also on GKE.

​

Thanks folks

https://redd.it/dok2oy
@r_devops

GoLang App from AWS to Azure

Hello there DevOps nation.


So I work at small start up and we're trying to set up DevOps environment. I'm the person who's in charge of this as we don't have many personnel. Somehow I found it extremely hard to set up CodePipeline & Elastic BeanStalk on AWS than Azure. So I was wondering.. Did azure really caught up to AWS and might be better in some cases now?


How does Azure compares to AWS?


I feel like Azure is much easier to use and has more to offer as they offer team management tool (VSTS, Git, Kanban Board and more) but idk. I'm just getting stepping into this DevOps world.


Please let me know which one is better Cloud Service. I need to set up our CodePipeline and Load Balanced Instances.

https://redd.it/dokx22
@r_devops

What does the JEDI contract mean in terms of the playing field between AWS & Azure?

AWS is clearly still the leader but where does everyone see Azure within 3-6 years, and should one focus on becoming versed with Azure?

https://redd.it/dokfd3
@r_devops

DevOps decisions being made without DevOps input, and other growing pains

Throwaway, in case someone from work comes across this.

I started as a DevOps engineer about a year ago at a fairly small company (~10-15 people) and we've now grown to almost double during that time. During the first several months of my employment here, DevOps just meant make cloud infrastructures and do IT. Finally I was able to expand DevOps into actual DevOps, such as CI, CD, automated testing, etc etc, and eventually the company hired another DevOps person to work with me.

During this time we've grown so much that we're having some massive communication and project management pain, and the company is scrambling to find a way to mitigate this. We've started using Jira and Freshdesk.

With the recent rise in CircleCI outages affecting us for hours, apparently the management has made the decision that we should start using Azure DevOps without talking to the DevOps team whatsoever. Both of us think this is the absolute wrong direction to go in.

We're not a Microsoft shop, and 90% of our infrastructures are in AWS. We use Node, Golang, Ruby, Python, .NET, and more that I'm not recalling right now.

It seems like DevOps here is just a title with no meaning. When it comes to standards and practices, every dev will use their own ideals, including deciding to turn of testing and other bad ideas, and I have no way to get them to follow these ideas or convince them, and DevOps is the last step in the software development process, only being included when it's time to deploy.

Am I wrong in feeling pissed of about this, and does anyone have any advice for this situation?

https://redd.it/dofckl
@r_devops

Auto Discovery

Hi all,

do you know any open source tool / scripts in order to discover all traffic in an unknown infrastracture?
I want to create a map with application and hosts interactions.

Thanks

https://redd.it/doo3s9
@r_devops

Tutorial: Run macOS Mojave using Vagrant

I wrote a tutorial on how to launch macOS Mojave (and soon Catalina) VMs using Vagrant. I've mostly used it for development and testing of Ansible playbooks targeted at configuring headless builders for iOS and macOS apps (I'll write a tutorial on that as well).

Hopefully someone will find it useful. Please let me know if I can improve the tutorial or the site. All feedback is much appreciated! :)

https://lunar.computer/posts/vagrant-macos-mojave/

https://redd.it/doonf6
@r_devops

Kubernetes Newsletter

Can someone help me find the best kubernetes newsletter that can help me tracking the latest updates in kubernetes?

https://redd.it/doq40b
@r_devops

How to establish a DevOps culture?

First post to reddit; this seems like a reasonable group.

I work for a smallish (\~100 staff) company in a 'devops team' but for me the term has always been more about building a collaborative work environment using development principles to deliver infrastructure or other systems; tooling helps but changing how the organization operates is what it's really about. We're not at the sharp end of automation practices, but our products need to be easier to deploy.

What are the best ways of accepting contributions (features and fixes) from operations and support teams to an in-house 'automation' tool that will be never be bought or used by customers?

* Is it really the case that PCI-DSS forbids direct contributions to an in-house tool codebase even though it has been written in the development?
* Is it fanciful to try and break the silo and remove the notion of development ownership of tool written for ops people? They hitherto have not much input into its design and development.
* What are the best strategies for ensuring that narrow targeted (possibly customer-specific) features and fixes can be worked into the ongoing development and release cycles?
* Is forking the master copy to a different repo (or even git server) and accepting pull requests viable?

https://redd.it/dovtuj
@r_devops