Packer + VirtualBox + start from VMDK. How?

I have a VMDK file (or a VDI file), and I want to feed that into Packer-with-virtual box to build a new image (after running some provisioners)

With the qemu builder, there is a "disk_image" boolean flag that lets me pass a img file instead of a true ISO file to the "iso_url" config. is there an equivalent for virtual box?

I know one way to do it would be to build a VM in virtualbox with the VDI file attached, and then use the virtualbox-vm builder. Alternatively I can put in a series of vboxmanage commands that effectively removes the ISO and puts my VDI in.

Is there a more idiomatic way of doing that in Packer?

https://redd.it/ed4j4c
@r_devops

Looking for Postman help or what to Google: How to pass multiple values of same key from GET response to POST

Sorry if my title isn't correct. I'm still new to this.

If my response with some amount of values that look something like this:

"value": [
{
"id": "af9b966a-0d3a-40b2-aa7f-89f3d67d6ba3",
},
{
"id": "dbcb3ee4-8f0b-46d3-a935-de612c56349d",
},
{
"id": "384e8d9a-d1f7-4272-acf7-d1bc0eed197d",
}

How do I then create same amount of POSTs, each using the "id" value as a variable in the URL?

I hope I'm not being too general. It seems like knowing how to do this will come up pretty often so I want to learn how to use this interchangeably.

https://redd.it/ed5ndv
@r_devops

Had anyone had success forwarding logs from Jira Cloud to Sumo Logic?

Looks like sending logs from Jira Server to Sumo Logic is pretty straight forward. Don't agree with the concept that "cloud is managed so you shouldn't have to worry about the logs. I've only found vague references from people who have used Jira Cloud Webhooks to forward events to a SEIM. Has anyone here had success? Any resources you could point me toward?

https://redd.it/ed5gl5
@r_devops

SonarQube with ReactJS - false positive on duplicates and coverage on new code

I'm trying to analyze ongoing ReactJS project using SonarQube (first time with that tool) version 6.7.5 but after second code scan I'm getting Quality Gate failed due to 0% Coverage on New Code and 5% Duplicated Lines on New Code.

First problem - I have no clue why I'm getting it at all (no coverage on new code) when I see new code got picked up by SonarQube. It looks like most of functional components are not covered by tests

Second problem - duplicates. Most of them are false positive like import statements or declarations (ex. react-table and columns declaration). Is there any way to mark them as non-duplicate? Or is there any workaround to get those kind of code blocks as valid (not dups)?

https://redd.it/ed4t0s
@r_devops

Free Course! Introduction to Site Reliability Engineering and DevOps

Sharing is caring!


\> [https://www.linuxfoundation.org/press-release/2019/12/linux-foundation-training-announces-a-free-online-course-introduction-to-site-reliability-engineering-and-devops/](https://www.linuxfoundation.org/press-release/2019/12/linux-foundation-training-announces-a-free-online-course-introduction-to-site-reliability-engineering-and-devops/)

https://redd.it/edbe20
@r_devops

Conditional statement for choosing node(agent) in Jenkins pipeline?

Hi guys! I'm new to jenkins pipeline. We are using scripted pipeline.


I'm trying to do the following in my jenkinsfile with the purpose that if "master" is being used, then run in "slave". Is that what the following conditional does in scripted pipeline? If not, is there a better/right way?


node ("master||slave") {
.....
}

https://redd.it/ed3nsw
@r_devops

Most advanced GitHub Actions examples?

My team and I are re-evaluating SaaS-based replacements for Jenkins. with one of those being GitHub Actions. Let me say we’ve been able to achieve some fairly advanced Jenkins pipelines having started with evolving shared libraries that abstracted the underpinnings for building and deploying a wide variety of projects with a high degree of control.

I would appreciate links to projects or what not showing off the current limits that people are pushing GitHub Actions including any technical articles on some of the best practices around them.

Thanks!

https://redd.it/ed0obe
@r_devops

Use GitHub actions at your own risk

[https://julienrenaux.fr/2019/12/20/github-actions-security-risk/](https://julienrenaux.fr/2019/12/20/github-actions-security-risk/)

TL;DR: Using GitHub actions with branch names or tags is unsafe. Use commit hash instead.

Something to keep in mind when you use GitHub actions marketplace!

https://redd.it/edbs4q
@r_devops

[stable/prometheus-operator] ldap sync grafana dashboard keeps logging out

Do anyone face the below issue or some solutions ?

\*\*Describe the bug\*\*

grafana dashboard keeps logging out after setting up the ldap configuration

lvl=eror msg="Failed to look up user based on cookie" logger=context error="user token not found

​

\*\*Which chart\*\*:

prometheus-operator-8.3.3

​

\*\*What happened\*\*:

After setting up the below config to integrate grafana with AD, able to login with AD creds for a second(only first time) and when i browse any dashboards it keeps logging out

​

Next attempts, there is a green tick it's authorized but not able to login

lvl=eror msg="Failed to look up user based on cookie" logger=context error="user token not found"

​

Config

grafana.ini:

paths:

data: /var/lib/grafana/data

logs: /var/log/grafana

plugins: /var/lib/grafana/plugins

provisioning: /etc/grafana/provisioning

analytics:

check\_for\_updates: true

log:

mode: console

filters: ldap:debug

\# session:

\# cookie\_secure: true

security:

\# cookie\_secure: true

cookie\_samesite: "none"

auth:

login\_maximum\_inactive\_lifetime\_days: 7

login\_maximum\_lifetime\_days: 30

token\_rotation\_interval\_minutes: 600

api\_key\_max\_seconds\_to\_live: -1

grafana\_net:

url: [https://grafana.net](https://grafana.net)

\## LDAP Authentication can be enabled with the following values on grafana.ini

\## NOTE: Grafana will fail to start if the value for ldap.toml is invalid

auth.ldap:

enabled: true

allow\_sign\_up: true

config\_file: /etc/grafana/ldap.toml

​

ldap:

enabled: true

config: |-

verbose\_logging = true

​

\[\[servers\]\]

host = "[adhost.com](https://adhost.com)"

port = 3269

use\_ssl = true

start\_tls = false

ssl\_skip\_verify = true

bind\_dn = "BindAddress\\\\%s"

search\_filter = "(sAMAccountName=%s)"

search\_base\_dns = \["dc=xxx,dc=com"\]

​

\[servers.attributes\]

name = "givenName"

surname = "sn"

username = "sAMAccountName"

member\_of = "memberOf"

email = "mail"

​

\*\*What you expected to happen\*\*:

Dashboard should not automatically logout for every few seconds

​

\*\*How to reproduce it\*\* (as minimally and precisely as possible):

I see some of the page showing same issue, but none of them resolved

example: [https://community.grafana.com/t/after-upgrade-from-grafana-5-to-6-dashboard-keeps-logging-out/14931/61](https://community.grafana.com/t/after-upgrade-from-grafana-5-to-6-dashboard-keeps-logging-out/14931/61)

https://redd.it/ediee8
@r_devops

How do you handle database for dev / staging and migrations for production?



https://redd.it/edhzym
@r_devops

Why the outrageous pricing on Web Summit and other tech events?

Just got an email saying I would get a discount and pay 50% on the tickets for the next summit, and that would be 950 euros. So, the full price will be 1900 euros, and it's likely to be higher as it come closes to the date. Not only websummit, but AWS reinvent tickets were around 1800 dollars.


How they justify the pricing?

https://redd.it/ede13j
@r_devops

Just published first version of Ansible for Kubernetes, my second book!

I'm excited to share that I just published the first early version of Ansible for Kubernetes ([blog post here](https://www.jeffgeerling.com/blog/2019/ansible-kubernetes-my-second-self-published-book)), and it's available on LeanPub—DRM free, with free updates forever.

I self-published my first book, Ansible for DevOps, a few years ago, and have been updating it regularly since. I hope to do the same with this book, and plan on adding another five chapters before reaching '1.0' status.

In the blog post, I discuss more about why I chose to write on Ansible + Kubernetes, and my timeline for completing the book (barring any more annoying health issues that have been hampering my writing in the past!).

https://redd.it/edbcm2
@r_devops

How we customize continuous delivery pipelines

The story of customization Jenkins declarative pipelines: [https://medium.com/@aatarasoff/how-we-customize-continuous-delivery-pipelines-4ff6a360000d?source=friends\_link&sk=4f56d725ba473443afa04f5afc5689cb](https://medium.com/@aatarasoff/how-we-customize-continuous-delivery-pipelines-4ff6a360000d?source=friends_link&sk=4f56d725ba473443afa04f5afc5689cb)

https://redd.it/edqz6o
@r_devops

Got first potential job offer for DevOps position, but it's remote. Should I accept it?

The title is self-explanatory but let me add more info.
I currently work as a net admin and from some time ago I started to learn more skills for a DevOps job.

Eventually started applying and got a potential job for a (junior)DevOps but with full remote work.
I honestly think it would be crippling for my first job as DevOps to be 100% remote.
Maybe after couple of years, I would go for full-time work from home but jumping to that from the start seems bad for me.

The company is well aware that this will be my first gig and they said it shouldn't be a problem for me. I will contact with the other team members through slack and should consider it.
I think it should be better to first start with the job in an office environment with the team, and after some time gradually start working remotely. Maybe once a week.

Thoughts, explanations, info? Thanks

https://redd.it/eds1el
@r_devops

DevOps: A simple example workflow pattern featuring Go, Docker, Kubernetes, CircleCI

Here is a quick video explaining through an **example** about a typical workflow along with what all types of **tools** that might be required in general in DevOps including very brief introduction on containerisation(Docker), container orchestration(Kubernetes), Auto-testing/deploying(CircleCI), Monitoring and Load Balancing.

This should be useful for a **beginner** to get a brief general overview.

[https://www.youtube.com/watch?v=9pVd2Fjbaew](https://www.youtube.com/watch?v=9pVd2Fjbaew)

https://redd.it/edryu1
@r_devops

Advice for Kubernetes infrastructure setup for a project.

I got a project to deploy to Kubernetes.

Project itself is Python Flask REST api and is split into multiple microservices.

My knowledge is not on some high level and this is my first time to work in a microservice based env, besides that first time actually doing something with Kubernetes.

With my limited knowledge this is a list of services from a docker-compose file:

\- Billing service ( Stripe ) ( links: rabbitMQ, Postgres )

\- User management service ( links: rabbitMQ, Postgres, Redis )

\- Video compression service ( links: rabbitMQ )

\- Video watermark service ( links: rabbitMQ, Postgres )

\- Rest api service ( links: rabbitMQ, Postgres )

\- Notification service ( links: rabbitMQ )

​

From these services my first guess is that some of them asks for more resources than other. Video services for sure.

​

Any advice on how to approach this in Kubernetes deployment?

https://redd.it/edsgnr
@r_devops

Android app for AWS Lambda

I'm sharing an Android app I've been working on that makes it easy to invoke AWS Lambda functions from an Android device. Link: https://play.google.com/store/apps/details?id=com.alexsci.android.lambdarunner
I've been using it to trigger release scripts and other DevOps helper Lambda functions from my phone. More info: https://alexsci.com/android-apps/aws-lambda-invoker/getting-started.html

https://redd.it/edtvja
@r_devops

Use Helm for deploying bespoke apps?

Do you guys use helm to deploy your own apps by writing private chart?

Or just use it to deploy the published apps from the repo?

https://redd.it/edm3lc
@r_devops

Forbid to push in production on Friday is a #DevOps anti pattern

More than just make Dev and Ops working better together, DevOps aims at delivering as soon as possible any developed and tested features to our users, get the expected value and having quick feedbacks.

Forbid to deploy on Friday is to lose 20% of time to deliver this value to your users. Sometimes, we even forbid it on Thursday afternoon or before Bank Holidays, thus forbid more than 30% of time !


More than lose this important time, we give the impression that we are not confident of our CI/CD pipeline, of our tests, maybe not even trust our teams. If you are not confident to deploy on Friday, why are you to do it any other day?


This rules implies than deploying is dangerous, risky. We should not FEAR to deploy in production.


If you believe you are #DevOps, you should be able to deploy any times, nights and days, even on Friday!

More details here : https://rochefolle.com/index.php/en/2019/12/08/devops-what-if-we-deploy-on-friday/

https://redd.it/edn3cz
@r_devops

Terraform Access Key/Secret and IAM best practices

I am creating a new IAM user/role that will be used from my CI server. This part is trivial.
When terraform creates this new resource, because I am using `resource "aws_iam_access_key"` it creates a new access key. Which I need, so that I can use it from my multi-account CI server. I want to know what the best practices are regarding the storage and retrieval of said key.

So for example, is it okay for it to be stored in terraform state?
Would I just retrieve this value from state when I want to add it to my CI server?

Would it be best to manually create these keys before hand? (I feel like this would defeat the purpose of IAM via IaC)


How are you guys handling this issue?
Any insight will be much appreciated !

https://redd.it/edeiw3
@r_devops