Exporting JFrog Artifactory Bundles?

We're looking at Artifactory for solving a problem related to moving containers between completely isolated environments. The bundles feature is appealing, but I haven't found a way to Import/Export bundles, just entire systems and repositories. Is there a way that just isn't in the documentation I'm looking at or are the only two export levels system and repository?

https://redd.it/e6jv4k
@r_devops

Is there a key value parser for fluentd where you can change what the quote character should be?

Is there a key value parser for fluentd where you can change what the quote character should be?
I want to use `¤` as the quote character and my logs look like this:

```
key: ¤value with space¤, foo: ¤i can "quote"¤, bar=¤I hope nobody uses my special quote character inside a value¤
```

The built in parsers **ltsv** can't even handle values with quotes. Se the example below:

```
<parse>
@type ltsv
delimiter_pattern /\s+/
label_delimiter =
</parse>
```

The following example:
```
level=info ts=2019-12-05T07:39:24.487738226Z caller=operator.go:1050 msg="sync prometheus"
```

becomes:
```json
{
"level": "info",
"ts": "2019-12-05T07:39:24.487738226Z",
"caller": "operator.go:1050",
"msg": "\\"sync",
"prometheus\\"": null
}
```

https://redd.it/e6hggy
@r_devops

Handling multiple API version

Hey guys newbie OPS guy here,

Recently I received the task to provide support for our API and that this API will have multiple versions running at the same time as latest, current, to be discontinued ( something like this ). The first thing that came to mind was multiple infrastructures to support each of the versions, but I'm not very fond of this idea if you can share your experience and how you worked with this challenge your help is much appreciated.

thanks.

https://redd.it/e6gukz
@r_devops

Kubernetes Guided Install & Configuration

A month or two ago I was learning Kubernetes and got some really good insight/help here. I decided to blog about it and document how to do it. It was one of the learning experiences that made me decide to write a blog. I wanted to share and return the favor for anyone new coming across Kubernetes and wanting to setup a lab and test it out.

This is a multi part article that walks through setting up Kubernetes using Photon (Fusion/VMware friendly). Some of the paths/parts take you through network overlays, Kubernetes dashboards and briefly SSL.

[Intro to Kubernetes](https://blog.woohoosvcs.com/2019/10/intro-to-kubernetes/)

Apologies if this comes across as breaking rule #4. My intent is definitely not spam. Hope this is useful to someone!

https://redd.it/e7hyme
@r_devops

What are some best courses on Azure DevOps that teach you CI/CD with GitHub?

I am a full stack developer (read .NET , Angular and SQL database).
I am new to DevOps. I am primarily interested in learning only what would help me function smoothly as a developer in an organization.
I am talking creating CI/CD pipelines. Automated deployments etc of .NET and angular applications. May be also a bit of kubernetes and docker.

What video courses do I need to watch? I say video courses because i am a slow reader. So slow that i lose interest after just few minutes of reading.

https://redd.it/e7jbps
@r_devops

When do you apply your application artifact?

I have always worked under the assumption that the application artifact and configuration should be applied to the container outside of the build process at runtime. This keeps the underlying container seperate from the application and configuration allowing for easy updates of the container and or the application depending on need.

Update the application / artifact in the repo, or update the configuration parameters in the parameter store and run a new container to get the updated application / configuration keeping turn around times low.

Or build a new container to update the os and under lying libraries with out changing the artifact or configuration. Allowing us to update / fix errata without rebuilding an artifact.

This means a developer pulls an existing prod container and applies his new artifact to it and configuration is pulled from a param store. Xhe does not need to build a new container or touch a dockerfile or run a Packer build. Turn around is very short as testing a new build is as simple as running an existing container.

Am I wrong in this? Is this an anti pattern? I am having what amounts to a religious debate with a dev about this, I am willing to be "wrong" but it feels right to me..

https://redd.it/e7jeel
@r_devops

CI/CD for CI/CD

At what point, if ever, does our automation become so complex that it itself must go through a CI/CD process?

https://redd.it/e7j46k
@r_devops

what makes an application a sidecar?

Hey guys, so we have two containers running in a pod.. the idea is to have main container doing the job( receiving request) and a secondary container doing a background task of constantly checking the main app network status

i have my deployment file with the secondary container coming up first and then the main container coming after, please check code snippet below [https://gist.github.com/dapseen/51bc7e59b96d934938a4afce34c615bb](https://gist.github.com/dapseen/51bc7e59b96d934938a4afce34c615bb) Is it because of the placement of container i.e fund worker coming starting up first that makes it the main app and other container coming up after makes it secondary container.

&#x200B;

Is there a special annontation in k8 that can tell cluster or kubernetes the container to make side car

&#x200B;

Thanks

https://redd.it/e7noxn
@r_devops

What DevOps solutions (if any) would you pick if it were up to you?

I have worked as a System Administrator and Programmer for decades. To me the term DevOps means Developers and Operations working together. For years, the industry seems to think that DevOps almost exclusively means AWS/Chef/Jenkins/Docker/Kubernetes. A few years ago, I worked for a small firm which had inadvertently paid to have many of their processes encoded into ansible so that they could scale out and build thousands of copies of their one LAMP solution in different environments (which they didn't even imagine doing). One of the owners made motions to me suggesting that all I (or any other IT guy) really wanted to do was to have my way with his backside. No one could understand why they ended up this way or why they had to pay me to undo this. I build out solutions on Digital Ocean, work primarily from the shell using vim, and publish my changes into github. Other than that, I don't really feel that DevOps (aka AWS/Chef/Jenkins/Docker/Kubernetes) is particularly helpful. Folks are more interested in having a two page website with a contact button that works. So my questions is this: If it weren't for the fact that your particular company had made it their missions to migrate their legacy operations into the AWS (Google or Azure) cloud and implement DevOps tools, would you chose to operate this way on your own?

https://redd.it/e7hv9e
@r_devops

How do you manage service accounts?

I work at an older company that primarily uses Microsoft; our service accounts are just special users with passwords that never expire, as most of our tools only support LDAP.

A recent audit uncovered that teams are being reckless with these (production) credentials—sharing them publicly on Bitbucket, Sharepoint, etc.—and re-using them across many different projects and systems. Due to the latter, changing exposed passwords will likely have a significant impact... but not changing them gives bad actors access to an untold number of production systems.

How is your company managing service accounts / long-running system-to-system access?

I'd like to learn some best practices and talk to management about how we can avoid this mess in the future.

https://redd.it/e6gj5h
@r_devops

AWS cross-account CI/CD without IAM

Im interested in the best options for cross account CI/CD. I am moving from single to multi account architecture. I currently have a Jenkins instance and I am not interested in rebuilding it (Default VPC) in order to use direct connect.

My client does not want to use IAM for this.

&#x200B;

What are you guys thinking ?!

https://redd.it/e6jb8m
@r_devops

How often do you get network partitions or node failures in your clusters?

Been experimenting with distributed tools like NSQ and DGraph. My side projects are consequently quite costly per month, because I like to have my clusters simulate production-like settings in the cloud, using purely IaaS.

It got me thinking how necessary full distribution is in a real world scenario, and whether these tools offering first class support for distribution is because of "just-in-case", or to fulfil an SLA, or if because cluster failures are actually commonplace, be it nodes or networks.

Knowing the frequency of downtimes in the real world can help me or anyone interested decide how much we can get away with doing SPOF deployments for a production env, or how long, before it becomes a real potential issue.

Would also appreciate links to surveys or stats. Either there's not much on the topic, or I have shitty googling skills.

https://redd.it/e7p4lw
@r_devops

A visual guide on troubleshooting Kubernetes deployments

Deploying an application just to find out that it doesn't work is frustrating. It's hard to remember what to do in each possible error scenario (Pods stuck in *Pending*, Pods crashed, Pods *Running* but not *Ready*, etc.).

Here is a flowchart that visualises common troubleshooting steps for the most common error conditions: [https://learnk8s.io/troubleshooting-deployments](https://learnk8s.io/troubleshooting-deployments)

https://redd.it/e6fhnn
@r_devops

VM scaling/redundancy for on-prem

Short version: we have VMware between three DCs, and I want to have a rule, when a VM fails I want to create a new VM in a new DC (effectively a different region) which I use Terraform for and then run an Ansible playbook to install relevant services.
The rule is basically an auto-scaling group with a minimum of one and a maximum of one.
Would anyone share some ideas/methods for performing such a task?

https://redd.it/e6eihj
@r_devops

What tool do you use for scanning containers for CVEs?

Preferably OSS free one, but commercial products are also an option. Thanks!

https://redd.it/e7sj5h
@r_devops

How to enable websocket on the Application Load Balancer

Is anyone used websocket with ALB?? I am trying to make it work using aws-ingress-controller but getting issue.[https://github.com/kubernetes-sigs/aws-alb-ingress-controller/issues/189](https://slack-redir.net/link?url=https%3A%2F%2Fgithub.com%2Fkubernetes-sigs%2Faws-alb-ingress-controller%2Fissues%2F189)

P.S I am using [https://github.com/apollographql/subscriptions-transport-ws](https://github.com/apollographql/subscriptions-transport-ws)

Can someone provide me any documentation or sample how I can enable the websocket in the existing alb setup.

https://redd.it/e5x65g
@r_devops

DevSecOps: From Theory to Practice

DevSecOps is a strategy that extends DevOps efficiencies to software security.

But when you sit down and actually start implementing DevSecOps, things can get trickier. There is no switch that you can flip to achieve DevSecOps. Nor is there a specific tool you can acquire, or even a particular process to follow.

Instead, implementing DevSecOps requires you to perform a broad evaluation of your existing IT resources and DevOps processes, then build a holistic strategy that integrates stronger security into all of them.

[Full Article](https://resources.whitesourcesoftware.com/blog-whitesource/devsecops)

https://redd.it/e7tk4o
@r_devops

How to do centralized logging and DevOps that scales

Hi there.

At my company we are buying an elasticsearch cluster service which is surrounded by a Kafka-queue, i.e. you're only able to deliver log events to the queue and not directly to elasticsearch.

We are using Filebeats to collect logs from our applications on virtual servers and OpenShift. These filebeats then ship log events to a central Logstash instance which parses the events and ships them to the Kafka queue.

However, the logs collected from each application (or team) of course need different parsing in Logstash - this parsing should be configured by the team who owns the application. This means that many teams are contributing to the Logstash configuration, which I think is not ideal: Logstash is now a single point of failure in the way that one team can screw up things for the rest. At the same time, I want to set the developers free and let them handle their configurations themselves.

My thoughts right now are, that the teams should have their own dedicated Logstash instance.

How have you guys handled log collection from numerous different applications?

https://redd.it/e5xw7r
@r_devops

Capital One DevOps Glider Computer Screening

Hey Everyone, did anybody give CapitalOne Screening test on the Computer? If so what was your experience?

https://redd.it/e5mhde
@r_devops

I, too, want to teach someone DevOps principles and tools

Inspired by the wonderful /u/very_veritas, I too want to offer DevOps teaching in very much a similar style.

I'll follow his idea as far as **format**:

* general questions and answers will be open nearly full time. How quickly I'm able to respond depends on my situation. Others are of course welcome to chime in.
* I intend to run a biweekly workshop. Weekly would be nice, but I can't handle the workload. Topic to be decided by the community. I'll either hold it myself, or find someone who can do it in my stead.
* I also intend to have 2 hours of office hours every week, for those who would like more immediate conversation with me. This will be via Zoom
* I'll run a weekly video roundtable. I'll be present, but as a moderator. This roundtable is for conversation among yourselves, to foster community and reinforce learning together.
* I'll watch over this community strictly. I want it to be a positive, welcoming place for learning. There will be no tolerance for talking down to others, or any kind of asshattery. I I've gone through the training of having two toddlers -- believe me, you have nothing on them.

​**What's in it for you**, dear reader:

* access to a community
* accountability -- your friends will help you stay on track
* learning from experts -- but you get to have a say in the curriculum

**What's in it for me**:

Reasonable question. So here's the full disclosure.

* I'm a professional DevOps trainer/coach/consultant. Being exposed to your questions will help me serve my clients better
* I get to try new ideas and approaches
* honestly, I just like watching people grow -- I hope I get to watch a bunch of people grow a bunch! That would make me really happy
* no beating around the bush: If this initiative would lead to new contracts for me, that would be fabulous -- but that's not the goal here; it would just be a nice bonus

Same as with /u/very_veritas: this is not a training course or a bootcamp.

**Who is /u/InternetOfStuff ?**

* DevOps practitioner for about a decade (since before I knew the term)
* experienced trainer
* thanks to my trainings, lots of insight into what's happening in the (European) industry
* keenly aware of the cultural side of DevOps

**How do I get in?**

Reply to this post, and I'll reach out to you. We'll have a quick conversation to see if our goals and interests align, and if so, you'll be invited to a Slack.

https://redd.it/e5e5b7
@r_devops