Am I crazy?

Our dev ops engineer can make pipelines. That’s great. But when it comes to a repo and branches. He knows almost nothing. Is that normal? I always considered branches and repo management the core of dev ops.

https://redd.it/1n0ktii
@r_devops

What are metrics in OpenTelemetry: A Complete Guide

A comprehensive guide to understanding metrics in OpenTelemetry. What they are, how they work, and how to implement them effectively with practical code examples.

https://oneuptime.com/blog/post/2025-08-26-what-are-metrics-in-opentelemetry/view


https://redd.it/1n0ljit
@r_devops

Building an AI-Powered Code Reviewer with MCP (Part 1)

Hi everyone,

I recently published the first part of a series on building an AI-powered code reviewer using the Model Context Protocol (MCP). This article dives into designing a scalable architecture that integrates GitHub, Large Language Models (LLMs), and MCP to automate code reviews while ensuring compliance and data security.

Key Highlights:

System Design: Integrating GitHub, MCP Server, and LLMs for automated code reviews.

Compliance Considerations: Addressing GDPR and Intellectual Property concerns when using external LLM APIs.

Scalability: Ensuring the solution scales across multiple repositories and teams.

This is Part 1 of a series. Stay tuned for the upcoming hands-on implementation guide!

👉 Read the full article here: https://medium.com/@yassine.ramzi2010/building-an-ai-powered-code-reviewer-with-mcp-part-1-36f68906f900

https://redd.it/1n0nyhv
@r_devops

Building Tool to Automate Cloud Security and Compliance with AI Fixes (OSS core)

Hey r/devops,

Manually checking cloud configs for security and compliance is a pain; think misconfigured S3 buckets or chasing CIS benchmarks across AWS, GCP, and Azure. A few months ago [Kexa.io](https://kexa.io) has been released, an open-source tool to automate these checks using simple YAML rules. (project incubated at Euratechnologies Cyber Campus)

We recently added a web interface and some AI-powered features:

* **AI Remediation**: After a scan, Kexa generates step-by-step fixes (e.g., AWS CLI commands to lock down an S3 bucket failing a CIS check).
* **Multi-Agent Support**: Run local agents in your VMs for real-time monitoring.
* **Coming Soon**: AI to suggest or create rules tailored to your cloud setup.

The open-source core is free and handles scanning, rule creation, and alerts. There’s also a premium version (4urcloud.eu) with the web UI and AI features for teams needing more automation.

What’s the biggest issues you face with cloud security or compliance? Any features you’d love from a tool like this?

I'd love to hear your feedbacks, also if you like you can star the project on github for support : kexa/kexa-io

Thanks reddit !

https://redd.it/1n0m1jk
@r_devops

I am building a command hub for Windows — run and control everything from the keyboard

So I am building a tool that acts like a command hub with powerful(programmable) shortcuts, fast search, and simple controls all in one place.

With it, I can:

Launch apps, files, or websites instantly

Create workflows (open multiple things with a single hotkey)

Control general system actions (Mic, audioSources, volume, brightness, shutdown, etc.)

A better and more rapid search

Stay fully in keyboard mode without reaching for the mouse

It’s free and made to just get out of your way.

Still Building it but soon it will be the daily driver.

Would love to hear your thoughts and advice

If you’d like to try it early or help shape the direction, I’ve put up a waitlist here: https://www.getriser.app/

https://redd.it/1n0n412
@r_devops

Commit hash pinning in GitHub Actions: secure, but at a cost

I looked into pinning actions by commit hash after CodeQL was flagging things left and right, and I noticed some tradeoffs that made me question this security best practice. Wrote a short post about my findings https://developerwithacat.com/blog/202508/github-actions-commit-hash-pinning-tradeoffs/

Wanted to share it here for feedback; I'm not in DevOps, but I somehow ended up often doing this kind of work in the last couple of product teams I've been in.

https://redd.it/1n0tl0o
@r_devops

I just wrote a small tool inspect kubernates

It's as small as it gets. Just using plain rust to interact with cluster. Instead using some closed source tools, it can be really helpful. Last time I checked lens was closed source. That's when I thought maybe I can write one too. But I was busy. But now I am almost unemployed to implement this, so I did.

Source code: https://github.com/maifeeulasad/kube-inspector

https://redd.it/1n0undi
@r_devops

Please help me from going insane with Backstage template development

Our enterprise uses a flavor of backstage. Our team builds templates and it's PAINFUL. PAINFUL. I've done everything I can to make it better, but dry run is broken for most actions, testing is horrifically difficult due to no retry or rollback functionality, and the tokenization syntax feels esoteric and difficult to test locally in a rapid fashion. Failed runs result in orphaned resources, broken links, etc. Lower quality AI models fail miserably when interacting with templates, but newer/more advanced ones (Gemini, Claude) do reasonably well but still need a lot of help. Templates can't be split up or nested so files are often 3000-5000+ lines. Please share ANYTHING that's helped you in building templates. I'm going absolutely insane.

https://redd.it/1n0si3d
@r_devops

Tips on productivity and organization

I've recently been on a leave from work and will be going back soon. I want to change the way I work in terms of:

1. How I organize and plan my days
2. Productivity tips / any particular Mac apps that can help
3. Task management
4. Notes taking


Any tips on this are greatly appreciated. I would love to know what works for you.

Thanks

https://redd.it/1n0layw
@r_devops

Best practice for staging environments? Shared cloud? Everyone running locally?

What are you folks doing for staging environments? I feel like the perfect solution would be for everyone to be able to deploy to their own production-life environment in the cloud whenever they want. That's complicated though so it seems like the two more common options are:

1) Deploying locally to an environment that is similar to production but makes some compromises. Another downside of this is people may be less willing to do it for smaller changes if they don't want their machine tied up.

2) Deploying to a shared staging environment in the cloud. It's nice that it is possible for this to be very similar to production and doesn't tie up local machines but conflicts are inevitable which reduces the amount of smaller changes that get deployed and tested.

https://redd.it/1n0yxbj
@r_devops

Combining DevOps platforms with internal developer portals

I’ve been thinking about how different teams use platforms, and I’m curious to hear from others experience here.

In many companies, DevOps teams adopt or build platforms focused on infrastructure automation etc At the same time, developers benefit from IDPs that help them onboard faster, discover services, and get self-service tools.

Is it realistic to have a single platform (something like an IaC/DevOps-focused setup) that also doubles as an idp? Or are those two goals usually kept separate because they serve different audiences?

If you’ve seen or used platforms that try to cover both sides, what worked and what didn’t?

https://redd.it/1n0yk2w
@r_devops

3 Months to Prepare for a DevOps Job Switch : What Should I Prioritize?

My background:
- ~2.5 years of experience in Software Development for a DevOps CI/CD tool
- CKAD certified
- Not super strong in DSA yet

My Situation:
- I’ve decided to quit my current job. My 3-month notice period will run Oct–Dec 2025.
- I want to use this window to seriously prepare for a job switch into either a DevOps Engineer or Software Developer (DevOps-heavy) role.
- I have clarity issues: i like DevOps but in my current role its mainly development and not much on DevOps. (Dont know where to focus)

My Questions:
- If you had 3 months to prepare in my shoes, what would you focus on?
- What skills / projects actually make a difference in DevOps interviews?
- Any roadmaps, resources, or personal tips you’d recommend for someone at this career stage?
- If you’ve hired for these roles, what stood out to you in candidates?
- how much DSA is prioritised for Devops role


https://redd.it/1n167ww
@r_devops

OS presumptions - Python

Would you expect to find a version of Python on most stable, popular OSes?

I'm asking about the supported versions of Debian, Ubuntu, RHEL, Rocky/Alma, SUSE.

My presumption is that a version of Python will always be available on a system built with these OSes.

https://redd.it/1n182rx
@r_devops

5 DevOps interview questions that actually helped me prep

I failed my first few DevOps interviews. I learned about CI/CD pipelines, container orchestration, configuration tools, and more, but the real questions weren't "What does this flag do in kubectl?" They were more scenario-based.

Over time, I noticed a pattern. The questions that really mattered were:

- Describe a time you debugged a production outage.

- How did you decide what to monitor?

- Describe your incident response process.

- What was the most painful deployment you've ever experienced? What changed since then?

- How do you collaborate with developers/QA when things get tough?

I started practicing these questions with the IQB interview question bank from beyz interview helper. This made me go beyond simply listing tools and actually explain what happened, what I did, and what changed.

https://redd.it/1n192f3
@r_devops

Trying to create a platform to reduce aws cloud bill

Hey guys ,

So I'm a devops engineer by profession, who has specialised in the cloud cost reduction for major companies, im planning to create a platform that will automate the RI/savings plan and rightsize instances and will charge a one time 20% on whatever the platform saves , it comes with the least privileged iam role to access cost explorer data and reseved instance marketplace that's it!! never any access to your instances , would you be willing to try this out in your organisation or for personal projects?

https://redd.it/1n19pkz
@r_devops

Replacing Datadog with Grafana

I've been tasked with creating PoC to replace Datadog with Grafana/Prometheus/Loki/Alloy stack, possibly more to come from Grafana house (Tempo etc.). This is all on AWS and stack would run on EKS. I have over 30 accounts to monitor, mostly serverless stuff. While AWS did great job with ability to share cross-account logs and metrics, seems there is still no capability in open-source (otel collectors) to actually make use of it and it's been quite some time since it was released (it's been over a year or more). There were even PRs to merge such functionality but they were not merged upstream. So far I'm able to scrap logs by setting up IAM roles on each account and use Otel Collector (Alloy) to scrap it per account basis (sadly currently Otel Collectors cannot "discover" cross-account shared metrics/logs) and using Kinesis streams to deliver logs from accounts to Firehose Receiver (Alloy) but having difficulty to actually add proper tags to delivered logs (apart from internal labels like Log Group, Account ID). Also need to setup each metric namespace and each metric by hand per account, seems quite daunting. I've been wondering, has anyone been able to make it happen and get rid of Datadog using this stack? I did not found single post in Web about such undertaking and feels like I'm about to have quite some work just to get basic functionality, no one does it cause it's so hard? In the end, that's why you pay for SaaS like Datadog but I'm curious on your experiences.

https://redd.it/1n1c2xq
@r_devops

Looking for some Street Art DevOps

Hello girls and guys,

I'm Kash, 39 from Belgium and I'm a solo developer looking for some mentorship, guidance, support.

This is my first big solo project, it's a mobile app (flutter/dart) that uses camera and send data to a worker thought an API then is send to data storage. Kind of Instagram but for Street Art. It's "StreetAR"

The Pokémon Go of Street Art, where you will be able to collect and share your finest finds in a Table Card Game dynamic.

A public feed will allow crowd to grade and source your best pictures.

In the future, everything will be connected to the Blockchain, you'll mint for every finds and notable actions on the platform.

And all the pieces will become a gigantic street art encyclopaedia.

Using AR on location you will be able to go back in time like in Google street view but for real.

Using real world AR anchor, you will be able to display your favorite pieces anywhere you like.

The journey still begins, I have almost finish the proof of concept, with an android app, and a web server running, sometimes.

I'm working by implement, trying to add one feature at a time. And I'm using GenDev tools such as Codex, Copilot, or Warp and Cursor. I haven't study or learn how to code but I'm passionate enough to find solution to any of my problems so far.

So if anyone is interested into street art and DevOps on mobile, fell free to reach me.

Thanks

https://redd.it/1n1e778
@r_devops

Anyone going to apidays London 2025?

I came across apidays .com and it looks pretty interesting it’s happening September 22–24. From what I’ve read, it’s one of the bigger conferences focused on APIs, AI, and digital ecosystems. It seems like it attracts developers, architects, product managers, and business leaders, with sessions on API design, governance, monetization, security, and more recently AI integrations.

I’ve never been before, so I’m wondering if anyone here has? Was it worthwhile in past years? I’m debating whether to grab a pre-sale ticket before the price goes up, but not sure what the actual experience is like.

https://redd.it/1n1dqxz
@r_devops

How do you deal with the fear of installing potentially risky tools?

There are some open-source tools—popular and widely used—that I’m honestly a bit scared to run on my work laptop (since it has access to credentials, production servers, etc.). For example, I always feel a little nervous about installing something like k9s.

This all started after the xz backdoor incident. Since then, I can’t shake the thought that if I install the wrong thing, it could mess things up really badly. At the same time, these tools could make my life at work so much easier.

Emacs is another example. With or without packages, it installs a bunch of stuff I don’t really understand. Because of that, I usually just stick to the basics: VS Code, Terraform, kubectl—tools I feel safer with because they come from well-known sources.

So I’m curious: how do you deal with this? Do you ever worry about your work machine getting compromised because of an open-source tool you installed? Any advice is appreciated.

https://redd.it/1n1gvwl
@r_devops

How do I implement a custom log storage system? something similar to grafana loki

I am building a software system and one of the features it requires is log storage and having the ability to query those logs, just like Grafana loki does. Do to organisation policy, using Loki or any external log storage system is not an option.

Anyone have an idea on how i can do this?

https://redd.it/1n1g36n
@r_devops