Walkthrough: CI/CD Pipeline with GitHub Actions to Deploy Python App on Kubernetes

I recently created a **video walkthrough** on setting up a CI/CD Pipeline with GitHub Actions to Deploy Python App on Kubernetes



**In this video, I cover:**

How to create a CI/CD pipeline using GitHub Actions

Build and push Docker images automatically

Deploy Python apps on a Kubernetes cluster

Use kubectl and K8S manifests in GitHub Actions workflows



I focused on practical steps , so it might be helpful for folks looking for practice examples or deeper control.



Here’s the video:

https://www.youtube.com/watch?v=OTjuKgekChk

https://redd.it/1my4mu7
@r_devops

Proxmox-GitOps: self-contained, extensible GitOps base for Proxmox

A while ago I shared the first steps of Proxmox-GitOps – an extensible, self-bootstrapping GitOps environment for Proxmox. 
By now it feels in a good state to share properly, and maybe some of you may be interested in trying it also as a Homelab-as-Code starting point. 

Github: https://github.com/stevius10/Proxmox-GitOps

One command bootstrap: deploy to Docker, Docker deploy to Proxmox

Consistent container base configuration: default app., config users, automated key management, tooling etc. for deterministic, idempotent container setup

Application-logic container repositories: container repositories hold only application logic; shared libraries, pipelines, and integration come by convention

Monorepository representation with recursively referenced submodules: suitable for VCS mirrors, modularized at runtime, automatically extended by libs

Pipeline concept
- GitOps environment runs identically in a container; pushing its codebase (monorepo and container libs referenced as submodules) into CI/CD
- This triggers the pipeline from within itself after accepting pull requests: each container applies the same processed pipelines, enforces desired state, and updates references
- Provisioning uses Ansible via the Proxmox API; configuration inside containers is handled by Chef/Cinc cookbooks
- Shared configuration automatically propagates
- Containers integrate seamlessly by following the same predefined pipelines and conventions, both at the container level and within the monorepository

The control plane is built on the same base it uses for the containers, verifying its own foundation implies verified container base. A reproducible and adaptable starting point for container automation 🙂

It’s still under development, so there may be rough edges — feedback, experiences or just a thought are more than welcome! 

https://redd.it/1my99j2
@r_devops

I vibecoded the ultimate set-and-forget IaC ubuntu hardening. Am I getting popped?

Today I hyperfixated on this IaC configuration for the ultimate bulletproof set-and-forget Ubuntu Server.

The goal was to make it as rugged as possible without requiring no active periodic monitoring/maintenance, with a fully-featured email-based alert system. (just in case of anomalies, no periodic emails).

Among basic access and ssh hardening, it configures clam, aide, rkhunter, fail2ban, apparmor and unattended-upgrades, as well as running a one-time Lynis scan at the end.

I was curious about any feedback on it, and on whether you'd change/add anything. Do you think any non-negotiables are missing?

https://github.com/benvigano/ubuntu\_sturdy

https://redd.it/1mycv2y
@r_devops

Library for AWS cloud infrastructure manager with minimal code — looking for developer feedback

As a Backend and Deep Learning developer, I’ve always found managing AWS on my own pretty complicated. Many times, when we’re coding in Python, we don’t want to stop and jump into the AWS console just to run a quick test or train a model.

AWS is the most affordable and flexible cloud provider, which is why most of us end up using it. I’m working on a library to make that workflow much simpler:

1. Just import the library, provide your AWS API keys, and that’s all the configuration needed.
2. Run your Python function or program directly with this library. The syntax is extremely simplified (I’d love suggestions: what minimum parameters would you expect as developers to keep it short?).
3. Once the function or program finishes, the instance shuts down automatically, so it behaves almost like a serverless service.
4. While running, you can call dashboard(), which spins up a local dashboard to configure things like domain setup and view resources — all simplified.

What do you think of this idea? Would this be useful in the developer community? Any feedback on how to shape it further is really appreciated!

https://redd.it/1mye9ca
@r_devops

How are you using AI in your day to day DevOps work?

I’ve been seeing a lot of mixed opinions about AI in DevOps. Some say it’s just hype, while others swear by it for productivity. I’m curious to hear directly from this community:

Do you use AI in your daily DevOps workflow?
What are your go to AI tools (ChatGPT, GitHub Copilot, Cursor, Windsurf, Claude Code, Augment Code etc.)?
How exactly are they helping you (infra automation, troubleshooting, writing pipelines, documentation, monitoring, etc.)?
Do you think AI is genuinely improving DevOps practices, or is it still more of a “nice to have” at this point?

Would love to know how others are integrating AI into real-world DevOps work.

https://redd.it/1myg7to
@r_devops

What’s it like working at Oracle as a DevOps/SRE?

Hey folks,

I recently applied for a DevOps/SRE role at Oracle and wanted to hear from people with first-hand experience there. The position I applied for is focused on cloud infrastructure, CI/CD, Kubernetes, Terraform, observability, and supporting Oracle Analytics services in a 24x7 environment.

I’m curious about the day-to-day reality:
• Is Oracle a very bureaucratic and “heavy process” kind of company, or do teams actually work in an agile way?
• How is the culture in terms of innovation, autonomy, and tooling do engineers get freedom to propose improvements, or is it more about following strict procedures?
• What’s the balance between firefighting (incidents, on-call, troubleshooting) and building/engineering new solutions?
• How is career growth and recognition for technical roles?

I know Oracle is a huge company with a long history, so I’m trying to figure out if the experience leans more towards a traditional/slow enterprise environment or if some teams are more modern and fast-moving.

Would love to hear honest feedback (positive or negative) from current or former Oracle engineers about what it’s actually like working there.

Thanks in advance!

https://redd.it/1myis5t
@r_devops

I don't know what career to choose?

Hi everyone,
I’m based in Australia and I’m trying to figure out the best future career path for me in tech. Right now I’m looking at DevOps, Cloud Architecture, or Data Engineering, but I’m not sure which one to focus on.

About me:

Early in my career (currently High School)
I enjoy problem-solving, coding and making projects
My goals are: good salary, able to take days to work from home, and clear career progression

My questions are:

Which of these fields has the best long-term future in Australia?
What’s the typical entry-level pathway into each one?
If you were starting out now, which would you choose and why?

Any advice or personal experience would mean a lot—thanks!

https://redd.it/1myjq7k
@r_devops

What are some uncommon but impactful improvements you've made to your infrastructure?

I recently changed our Dockerfiles to use a specific version instead of using latest, which helps make your deployments more stable. Well, it's not uncommon, but it was impactful.

https://redd.it/1myon4u
@r_devops

Finally a complete guide to exec into ECS containers that actually works!

If you've exec into an ECS container in the past then you know it's painful.

There are too many guides out there that only cover the basics, but you won't find a detailed doc like this anywhere else. This one actually covers fundamentals properly - enabling it on your service, checking if it's working at both service and task levels, handling IAM permissions, and dealing with VPC endpoints for private subnets.

What makes this different is the complete Terraform example to give deeper understanding of how everything connects. Shows you the actual networking, permissions, and VPC endpoints instead of just telling you to "add some permissions."

Also has a troubleshooting script that checks your config and tells you exactly what's broken.

Worth reading if you're setting this up for the first time and want to understand what's actually happening under the hood.

 https://www.kubeblogs.com/use-ecs-exec-to-access-fargate-containers-with-terraform/

Upvote0Downvote


https://redd.it/1mysg72
@r_devops

Load shedding choice

Hey all,

So we've got a pretty usual stack, AWS, EKS, ALB, argocd, aws-alb-controller, pretty standard Java HTTP API service, etc etc.

We want to implement load shedding with the only real requirement to drop a percentage of requests once the service becomes unresponsive due to overload.

So far I'm torn between two options:

1) using metrics (prom or cloudwatch) to trigger a lambda and blackhole a percentage of requests to a different target group - AWS-specific, doesn't seem good for our gitops setup, but it's recommended by AWS I guess.

2) attaching an envoy sidecar to every service pod and using admission control filter or some other filter or a combination. Seems like a more k8s-native option to me, but shifts more responsibility to our infra (what of envoy becomes unresponsive itself? etc).

I'm leaning towards to second option, but I'm worried I might be missing some key concerns.

Looking forward to your opinions, cheers.

https://redd.it/1myscyw
@r_devops

My current title is “Senior Software Engineer” but I do DevOps. I am getting zero bites on my resume. Is it because of my title?

I work at a software company in the Platform Deployment organization. We do EKS, Terraform, Jenkins, Grafana, etc… My daily job is DevOps. However, everyone in Platform Deployment gets the title “Software Engineer”.

I am a senior level, 15 YoE since college, trying to find a new job, but getting zero bites on my resume. Is it because my current title is not DevOps-related? I know the market is bad, but surely not this bad, right?

https://redd.it/1myy29h
@r_devops

Which AWS service for streaming voice + text to AI providers?

Greetings fellas,

I want send a voice recording along with some text to an AI provider. Will stream from the user's computer & also with an HTTP request backup.

>User computer >---stream/http--> AWS >---http--> AI provider
‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ ‎ |
User computer <--------http-----< AWS <--------http----/

My Question is, Which AWS service is best suited for this?

AWS will be there as the middleman to authenticate the request, process it and then return the response. Problem is I saw that there is a payload limit of 6mb with Lambda functions. The first stream/http will easily be over 6mb manytimes :( So would need something that accommodate more requests at least 10 - 20mb.

User authentication is already implemented using Supabase. I can't use supabase edge functions for the above though because of the delay. I got the 200$ AWS free trial haha 😂

Your kind advice is highly appreciated <3

https://redd.it/1myz7ci
@r_devops

4 yoe in production support, observability and disaster recovery management, should I give up the ambition to move to DevOps?

I'm stuck in tutorial hell and idk where to go from here because I'm burnt out because of work and upskilling - should I just give up and move to something less dense? I chose DevOps because I've been great at solving prod issues and getting it working asap and plus I understand the ideology but the plethora of tools is making it tough, I'm through the basics, linux, networking, shell and what not, I know the roadmap I know what I need to do but idk if I have the strength to do it, what do you guys think?

https://redd.it/1mz12gj
@r_devops

Career switch

Hello everyone! Need an advice from experienced people. Few weeks ago I was working on a project as QA engineer (Python). Before that I almost have never talked to DevOps engineers and didn’t even think about what they do, but then I’ve discovered a lot of interesting stuff about DevOps. I really felt that I would really like to dive into it and probably do career switch. But I don’t really know what would be the best way to start my way. I know Python enough to write auto tests for API and with Playwright, and I heard it’s one of best languages for DevOps. In general, I have small experience with Docker and Linux (Month ago I installed Ubuntu as a main OS, but now I think about arch), know basics of networks and git.

But one of biggest problems - I don’t have an experience of development, I worked only as a QA, and I only studied development, not worked as a developer.

Anyway, I don’t really know what would be the best way to start in my situation. And is this even possible, what do you think?

https://redd.it/1myz69b
@r_devops

"What are the essential and even the underrated VS Code extensions that are widely used by devops/cloud?"

How many extensions do you use for devops usecases?
which extension you think is the best that everyone should use in day to day life??

comment your favourite extensions that you cant't live without it

https://redd.it/1mz3ihy
@r_devops

Building an AI-Powered Compliance Monitoring System on Google Cloud (SOC 2 & HIPAA)

GCP compliance monitoring system by implementing a multi-agent setup using the crewai\_coding\_crew template from the Agent Starter Pack.

https://medium.com/@rasvihostings/building-an-ai-powered-compliance-monitoring-system-on-google-cloud-soc-2-hipaa-eecf7a5c30e4

https://redd.it/1mz8w0r
@r_devops

Best way to approach DevOps?

Pardon me if this question has already been asked.

I am looking to venture into the world of DevOps. I am quite a dedicated learner and I have a deep passion for the field and as such I should have no problem learning the same and putting it to practice. However, it is to my understanding that DevOps is not a Junior Role and as such I have decided to start learning System Administration then make my way up from there. My question is, is it feasible to focus entirely on System Administration courses for starters then learn the rest of DevOps content while carrying out sysadmin practices or I can just learn DevOps and still be knowledgeable enough to land a junior sysadmin role?

https://redd.it/1mzaecv
@r_devops

what's the point of devcontainers if it forces standardization?

I was under the impression that devcontaineres are a way to:

-> Specify a base image for everybody
-> If you use vscode, great, semaless layering. Else, add a few post-install scripts to drop waht you need into the project, great.

Then you have a base container with just only the needed build dependencies.

But like in practice, there's no such thing as "version controlled developer specific devcontainers", you have to centralize while not checking in core changes to the main repo.

My neovim setup might tick off, either somebody else's vim setup or someone who just wants vscode and nothing else (and I certainly don't want to pull in extra vscode stuff). Our project might not use python, but for my tooling I will get python anyways (neovim stuff). perfect use for devcontainers, I just install python post-install but committing that to the main repo? That... can easily get cluttered, if other people's devcontainer configs are there too.

Also, there are some user namespacing things (set uid gid etc) that might not belong in a build container but we'll worry about that later (also I think in practice you should have a separate deploy container, but we have not gotten to that level of automation yet, we have just started using build containers lol).

I guess, from more experienced developers, how do you deal with this issue where 5 different people have 5 different ide/dev workflows and you want minimal frictoin integrating with a devcontainer workflow?

https://redd.it/1mzc191
@r_devops

Starting My Cloud Career — Which Certification Should I Pursue Next? Terraform, Kubernetes, or Azure Cloud Architect?

Hi everyone,

I'm at the beginning of my cloud career and looking for advice on which certification I should pursue next to boost my skills and job prospects. I have around 13 years of experience in telecom, networking, and IT fields, and a little hands-on cloud experience. I also have a solid foundation from my current certifications, which include:

* AWS Certified Solutions Architect – Associate
* Multiple Azure certifications (3x)
* Alibaba Cloud certifications (3x)
* Oracle Cloud Infrastructure Generative AI Professional
* CompTIA CySA+, Security+, PenTest+, Network Security Professional, Security Analytics
* CCNA
* ITIL Foundation

Given this background, I’m considering between:

1. Terraform Associate Certification (infrastructure as code)
2. Kubernetes Certification (container orchestration)
3. Azure Cloud Architect Certification
4. something else? please mention in comments

My goal is to solidify my cloud skills and eventually specialize in telecom cloud or cloud security.

For those experienced in the field, which certification would provide the best return on investment, credibility, and market demand? Also, is there a preferred order to take these certifications for someone starting out? Any insights or personal experience would be greatly appreciated!

Thanks in advance!

https://redd.it/1mzelgi
@r_devops

Kodecloud subscription vs Udemy course for Kubernetes, docker etc

I know there are a lot of courses available, even for free but I have not been able to self study or learn something since quite some time. I believe something like might help and I have heard they have good kubernetes resources. Kodecloud pro is very costly but it gives the benefit of playgrounds so I don't have to setup everything for which i often procrastinate.

So is kodeckoud pro worth it or should I stick to their udemy course?

https://redd.it/1mzi2lj
@r_devops