Are there in good AWS DevOps Training and Job Placement Programs?

I have over 10 years IT experience. 3 years as a computer tech and 7 years as a network tech. I have a BS and MBA in Business. I have CCNA. I recently left my job due to a lack of opportunities and no upward movement after 7 years. I am looking to get into AWS DevOps. I plan to take the Cloud Practitioner Exam at the end of the month.

​

My question is what is the best way to get into a junior DevOps role?

Are there any job training and placement programs for DevOps?

Any assistance would be greatly appreciated.

https://redd.it/zaryzl
@r_devops

Renovate with Terraform?

Hey all, anybody using men Renovate https://www.mend.io/free-developer-tools/renovate/ with terraform? It works really well, it automatically scans and updates any terraform module version tags. However, say for example it creates 3 PRs on a repo to update version tags for various different terraform modules. In our case, when a PR is opened our GitHub actions straight away starts running a terraform plan job. This means that terraform plan is running at the same time on 3 different PRs for the same repo which means the state file is locked and you get an error on 2 PRs saying as such.

Anybody know of a renovate or terraform configuration which will "pause" the creation of PRs when working with terraform? The only way i have come up with is to set the number of concurrent PRs to 1, and then simply only tick one at a time from the dependency dashboard and wait until each one is applied and merged before ticking the next one.

https://redd.it/zaor3e
@r_devops

How should microservices/pods communicate in a Kubernetes cluster?

I recently joined a start up as a DevOps engineer (first time in a DevOps role and I'm loving it), so please bare with me. :)

We have an AKS cluster running behind an Azure Application gateway. The cluster runs over 30 microservices currently. We don't use any form of message broker.

I thought microservices in a cluster are supposed to communicate via services (the communication stays inside the cluster), but just recently discovered that they are communicating through the AGW: if a pod wants to talk to another pod, the request goes out of the cluster, through the public network and interfaces through the AGW back into the cluster, where it eventually goes through one of the K8 servies to reach a pod (the AGW rotes to the corresponding microservice).

This seems somewhat inefficient to me? Why not communicate directly with a K8 service (can also load balance and can also provide DNS). We don't need TLS internally. Going through the AGW for every communication attempt between pods also adds SSL/TLS termination overhead etc.. Am I missing something or am I lacking in some knowledge?

How do you do it? How are your microservices communicating? If they are talking to each other internally via K8 services, do you provide the K8 service DNS in the code somewhere (for example in the config files)?

https://redd.it/zbckrs
@r_devops

How do you handle STANDARDISING your deployment scripts?

Was just wondering how you guys handle standardising your CI/CD pipelines across many small repos? For example I'm using bitbucket pipelines right now and there's no way to share pipelines between repos, or have the pipelines file be sourced from a standard place. If I had 10 terraform repos I'd have to copy and paste the file across all the repos with all the potential for mistakes that brings with it...

When I used Jenkins I would traditionally have one pipeline that operates on all my terraform repos- I just have a list of terraform projects and the script goes and clones the repo for the project then runs the terraform command against it. Nice and neat and the deployment process is centralised for everything.

I feel like I'm missing something now the world seems to be moving on from Jenkins...

EDIT: For some reason OSX has capitalised a random word in my title

https://redd.it/zaoq3f
@r_devops

Problem solving techniques?

Been in the industry for 3 years and I find myself coming across new stuff all the time. This means I'm constantly having to get to grips with what I'm dealing with, understand the issue and then solve it. It can also mean I need help from a senior person to be given direction or for them to tell me something I wouldn't have known unless I spoke to them, that can trigger a 'oh why didn't I think of that' moment. Also it means it can take me longer to complete the task.

What are some problem solving techniques people use when coming across a new problem to help solve it?

https://redd.it/zbgbrq
@r_devops

Configuration using config scripts



Hello devops

## Goal

I am a bit new to k3s and I am trying to install it on this machine

## Machine Specs

$ uname -a

Linux localhost 5.15.0-47-generic

#51-Ubuntu SMP

Thu Aug 11 07:51:15 UTC 2022

x86\_64 x86\_64 x86\_64

GNU/Linux

$ lscpu

Architecture:            x86\_64

CPU op-mode(s):        32-bit, 64-bit

Address sizes:         48 bits physical, 48 bits virtual

Byte Order:            Little Endian

CPU(s):                  1

On-line CPU(s) list:   0

Vendor ID:               AuthenticAMD

Model name:            AMD EPYC 7601 32-Core Processor

CPU family:          23

Model:               1

Thread(s) per core:  1

Core(s) per socket:  1

Socket(s):           1

Stepping:            2

## Reference

according to the k3s documentation: https://docs.k3s.io/installation/configuration

## Installation Scripts

curl -sfL [https://get.k3s.io](https://get.k3s.io/) | INSTALL\_K3S\_EXEC="--flannel-backend none --token 12345" sh -s -

curl -sfL [https://get.k3s.io](https://get.k3s.io/) | INSTALL\_K3S\_EXEC="server --flannel-backend none" K3S\_TOKEN=12345 sh -s -

curl -sfL [https://get.k3s.io](https://get.k3s.io/) | INSTALL\_K3S\_EXEC="server" sh -s - --flannel-backend none

curl -sfL [https://get.k3s.io](https://get.k3s.io/) | K3S\_TOKEN=12345 sh -s - server --flannel-backend none

curl -sfL [https://get.k3s.io](https://get.k3s.io/) | sh -s - --flannel-backend none --token 12345

## Response from all of the scripts after the first

Job for k3s.service failed because the control process exited with error code.

See "systemctl status k3s.service" and "journalctl -xeu k3s.service" for details.

## Logs

- journalctl is empty

-systemctl status k3s.service

$ systemctl status k3s.service

● k3s.service - Lightweight Kubernetes

Loaded: loaded (/etc/systemd/system/k3s.service; enabled; vendor preset: enabled)

Active: activating (auto-restart) (Result: exit-code) since Fri 2022-12-02 13:57:45 UTC; 3s ago

Docs: [https://k3s.io](https://k3s.io/)

Process:  2811368 ExecStartPre=/bin/sh -xc ! /usr/bin/systemctl is-enabled  --quiet nm-cloud-setup.service (code=exited, status=0/SUCCESS)

Process: 2811370 ExecStartPre=/sbin/modprobe br\_netfilter (code=exited, status=0/SUCCESS)

Process: 2811371 ExecStartPre=/sbin/modprobe overlay (code=exited, status=0/SUCCESS)

Process: 2811372 ExecStart=/usr/local/bin/k3s server --flannel-backend none (code=exited, status=1/FAILURE)

Main PID: 2811372 (code=exited, status=1/FAILURE)

Tasks: 68

Memory: 122.6M

CPU: 215ms

CGroup: /system.slice/k3s.service

├─2312312   /var/lib/rancher/k3s/data/7c994f47fd344e1637da337b92c51433c255b387d207b30b3e0262779457afe4/bin/containerd-shim-runc-v2  -namespace [k8s.io](https://k8s.io/) \-id 84186aa17eacd09b65a48bb78b84822a67b47a01>

├─2312330   /var/lib/rancher/k3s/data/7c994f47fd344e1637da337b92c51433c255b387d207b30b3e0262779457afe4/bin/containerd-shim-runc-v2  -namespace [k8s.io](https://k8s.io/) \-id 7ef39405ee7f145c995375f87a21cc08081c2ea9>

├─2312465   /var/lib/rancher/k3s/data/7c994f47fd344e1637da337b92c51433c255b387d207b30b3e0262779457afe4/bin/containerd-shim-runc-v2  -namespace [k8s.io](https://k8s.io/) \-id 4bd78bdd08a3970f27f8b383fa5d8105663b01cd>

├─2313984   /var/lib/rancher/k3s/data/7c994f47fd344e1637da337b92c51433c255b387d207b30b3e0262779457afe4/bin/containerd-shim-runc-v2  -namespace [k8s.io](https://k8s.io/) \-id 9a5eaab5432998e4fee70f98bae3caa8a7cc1612>

└─2314108   /var/lib/rancher/k3s/data/7c994f47fd344e1637da337b92c51433c255b387d207b30b3e0262779457afe4/bin/containerd-shim-runc-v2  -namespace [k8s.io](https://k8s.io/) \-id 9f157e898f689ebb128a9c64f52a559647f11ab8

## Question:

What Am I doing Wrong?

https://redd.it/zanyae
@r_devops

Versioning and deploying microservices in k8 using blue-green deployment

Hi Guys, I'm currently managing the development of a microservice-based solution that we're going to launch in the next couple of months. Since we're wrapping up development and heading into UAT, we naturally start having conversations around versioning, release cycles, deployment, etc. So far we've agreed on the following items:

Deploy services and React portals in GCP's Kubernetes
Use the blue-green deployment technique to simplify our release flow and enable instant rollbacks

The remaining elephant in the room is versioning where I personally don't have much experience (it's the first time I run the dev team). Can you suggest articles or books that I can read to learn more about versioning for microservices? Should each service has its own version or should the whole product have a version? Or both? How to handle versioning using Azure? These are the questions on my mind and I'd appreciate if you could point me in the right direction.

Thank you.

https://redd.it/zbjh3j
@r_devops

Monorepo?

I have always been very against monorepo's in the past, however, I seem to be coming up against many difficulties where monorepo may be a better fit.

Looking for the wider community's input and thoughts on what architecture you prefer, or what you like and don't like about monorepo's.

https://redd.it/zbkgzt
@r_devops

Self-hosted Jira: BitBucket vs GitLab

Hi! Together with colleagues we're thinking of a self-hosted, relatively cheap devops solution (5-10 devs). We're thinking Jira because of the prior experience, although considering that they're ending support for their Data Center plan in 2024, it might not be the best choice?

But our main concern is repos. Assuming Jira - GitLab requires more steps to integrate than Bitbucket and would probably be more expensive. What would you say should be considered when deciding between the two? What other drawbacks are there when integrating Jira with external repo providers?

Thanks in advance!

https://redd.it/zamos0
@r_devops

Getting into the DevOps

I have no experience, I would like to get into DevOps! Would the transition be possible? Where should I start? Roughly How long would it take? Roughly how long to get a job based on personal experience.

https://redd.it/zbos26
@r_devops

Apache airflow

Best practices for running apache airflow on kubernetes?

https://redd.it/zam0c8
@r_devops

Is there a tool for finding newer Helm chart versions within ArgoCD apps?

I'm using ArgoCD for deploying Helm charts. I was not able to find a tool that checks the index file for newer versions... I know there is Nova from Fairwinds for plain Helm charts but this does not work with ArgoCD apps.


Any ideas?

https://redd.it/z9n94r
@r_devops

Server used for ssh attack

I am a newbie DevOps engineer. Our Aws ec2 instance was used to brute attack other server.Do anyone have any idea how our server might be a victim of ssh attack. The attack was sending payload to another server that it was attacking.

https://redd.it/z9r1j0
@r_devops

Can I run Dokku itself as a single container?

Can the whole Dokku run inside a single container? So then the apps should be nested each in its own container, Docker inside Docker?

Is that being described here, did I understand it correctly?

https://dokku.com/docs/getting-started/install/docker/

https://redd.it/z9ogh9
@r_devops

What happened to r/opsnodev?

One of you savages made a troll sub, called something like ops-no-dev… where is it!?

There was an actually brilliant definition of devops (by saying what it wasn’t)

I would love to reference it in an upcoming lightening talk.

One of you has to remember it, or be the troll who did it.

Help?

https://redd.it/zbwiei
@r_devops

What to expect from coding interview?

As I moved internally to my DevOps/Infrastructure role from a net/sys engineer role, I never had to do a coding interview. Well, I have one coming up now. Specifically, I need to solve a "DSA problem in the form of a systems problem".

I will be tested on my "file system" and DSA knowledge. I did think this position was more of an infrastructure rather than a systems role.

Also, the "quality" of the code is very important as this was underlined. No where in the job description did they mention any type of coding requirement and my resume certainly doesn't illustrate that I do much development outside of Terraform, CLI, and Kubernetes.

I'm not really sure what to expect and any examples or resources to help me prepare would be helpful? Any pointers?

https://redd.it/zbvwge
@r_devops

Advice Needed: CKAD, CKA, or AWS Certified DevOps Engineer?

Hello everyone!
Looking for some advice on what should be the next step for DevOps career growth.
I have been working as a DevOps engineer for 6 years now (switched from QA), and have been in the same company for this duration. I'd like to keep my skills updated through certifications that would add value to my resume and knowledge base.
I did my AWS SysOps Certification in 2021 and am planning my next cert for the next few months (2022 was too busy to prioritize a cert)


I'm confused between CKAD (I have 2 years of hands-on k8s experience, but wouldn't call myself an expert since I did not set it up from scratch) or continuing the AWS path which leads me to the AWS Certified DevOps Engineer. Any advice as to which should be pursued next? Either/OR or Both?


CKA material seems to be way out of my depth at this point, so I'm not even considering it as the next step tbh.


TIA! Looking forward to the answers!

https://redd.it/z8yz83
@r_devops

Project for study

Hello everyone, I'm a french student, I'm at my last year of study, and we have to create a project on the technologies we want. With my friend, we want to approach a DevOps / CICD method with this tech :

\- Kubernetes
\- GitLab

But we don't have a lot of knowledge, so I'm asking you if you have any idea for us to do a good project and acquire some skills.

Thanks in advance everyone.

https://redd.it/z8np7i
@r_devops

junior devops engineer

I am junior devops engineer and every time i apply for a job it's either i get rejected or no reply even if i the requirements are not hard for me

How can i find a job? or why i don't get a chance to be in an interview?

https://redd.it/z8by44
@r_devops

Searching for a good bash course to improve my scripting skills

It can be a book or video course it whatever. My only requirement is to be a complete guide ( not post for solving a specific problem).

Thanks.

https://redd.it/zc2jss
@r_devops