Top k8s resources + looking for more

Solid list overall. Was already following some of the obvious contenders like The Google Cloud podcast, Docker blog & DZone. I was also already following most of these on twitter. Can anyone recommend and other blogs worth following?

[https://www.portshift.io/blog/kubernetes-cloud-resources-devops/](https://www.portshift.io/blog/kubernetes-cloud-resources-devops/)

https://redd.it/f375qb
@r_devops

Which CI/CD tool?

Hi all

I am searching for CI/CD tool to deploy my microservices into K8s.
The question, which CI and CD tool should I use.
For CD, Spinnaker sounds very promising.

Thanks

https://redd.it/f38jvs
@r_devops

O'Reilly for infra/sre/devops peeps

Hi, I want to become a member of O'Reilly but the platform is so expensive, does anyone know when it goes on discount? Also anyone here that has it think it's worth it?

https://redd.it/f37qk0
@r_devops

Improve and Secure your own Jenkins instance by implementing the Jenkins best practices

[https://medium.com/@wshihadeh/5-tips-for-hosting-your-own-jenkins-instance-64b058ad2c2a](https://medium.com/@wshihadeh/5-tips-for-hosting-your-own-jenkins-instance-64b058ad2c2a)

https://redd.it/f36g9c
@r_devops

Rubban - Kibana Automatic Index Pattern Discovery and Other ELK Curating Tasks

I create a light tool to automatically create Index Pattern and I am planning to add more curating tasks that have to be done manually in Kibana. you should run it in a container beside Kibana and forget about it.

[https://github.com/sherifabdlnaby/rubban](https://github.com/sherifabdlnaby/rubban)

https://redd.it/f3v5k9
@r_devops

The cloud - Trust yet Verify EVERYTHING!

No Cloud migration is ever without pain. Moving a business application from a datacenter to a cloud will always create concerns around security, privacy, availability and performance. While each of these can be mitigated, there is always an element of "trust" that has to be believed. Your basically giving some control over to the cloud and hoping they (whoever they actually are) do exactly what they say they will do.

The benefits in terms of cost and scale can be wonderful, but it doesn't help a CIO sleep better knowing that youve given up some level of control.

It can be very hard to trust , yet verify without adding layer upon layer of monitoring that didn't exist previously.

https://redd.it/f3vd9e
@r_devops

Infra.app - Desktop app for managing Kubernetes

I saw this Mac app from the r/Kubernetes thread for managing Kubernetes clusters. The experience is great so far.

Check out the longer thread there: [https://www.reddit.com/r/kubernetes/comments/f3m85m/infraapp\_desktop\_app\_for\_managing\_kubernetes/](https://www.reddit.com/r/kubernetes/comments/f3m85m/infraapp_desktop_app_for_managing_kubernetes/)

https://redd.it/f3u2bc
@r_devops

On-prem Jenkins over k8s VMs storage

How would you tackle the persistent storage part?
Cluster will be built upon 3 worker nodes.

We have a cifs storage mount in the office, and from my reading, there is a cifs driver on GitHub(as currently no official cifs drivers by kubernetes) but repo not really alive.. https://github.com/fstab/cifs

Thinking to bring up a VM running NFS server, and connect the cluster nodes, but it is not so good approach as single point of failure when this VM will crash.(and it will ..)

Any fruitful thoughts?

https://redd.it/f3tqwd
@r_devops

GitHub CLI (Beta) for more efficient PR's

Check out my video on the new GitHub CLI tool which is currently in Beta!

It allows you to create, get the status of, and view in the browser all Issues and Pull Requests for a repo straight from the CLI!

Great tool!

[How to create a PR in the new GitHub CLI Tool](https://youtu.be/_QnZpeCOM_s)

https://redd.it/f3ygea
@r_devops

I love you -whatif

I'm not asking for nothing than the super power of -whatif IRL XD

https://redd.it/f3zt5f
@r_devops

Ideally, enterprises should not have a designated DevOps team, according to Jennifer Davis, co-author of Effective DevOps and senior software engineer at Chef Software

Thoughts? We have lots of different app teams at my company. I wouldn't expect these developers to maintain cloudformation scripts, ansible playbooks, develop codebuild/codedeploy scripts, configure pipelines... If the Devops team can interface among these disparate entities and automate their build procedures--what's wrong with that?

https://redd.it/f3ydq3
@r_devops

Looking for a career change into DevOps; where to start?

Some background: I’ve been working in tech for about six years as a scrum master/“agile delivery lead” as my new company calls it. Problem is, I just don’t find it interesting anymore.

I care very much about efficient software delivery, but I’m seeing less and less value in my current role to influence that. I’m a process dork so I find devops as a craft fascinating and super valuable, and at this point I’d rather do that than argue with yet another group of product people about the importance of addressing technical debt proactively, investing in testing, and not fucking setting mandatory meetings for engineering teams for hours a day. I’m burned out on that.

So where do I start? I’ve been lucky enough to be well loved by some fantastic engineering teams in my career, so I’ve picked up a fair few tips and tricks... but I don’t have a solid, cohesive framework to fit it all in. I get the philosophical and process aspects, but outside of some basic java and python and experience with truly antiquated programs (uDeploy and ESP) I don’t know any tools.

https://redd.it/f3zjp2
@r_devops

Wrote a tutorial on Hashicorp Vault for Encryption as A Service

check it here [https://medium.com/@AndroidAdvance/hashicorp-vault-encryption-as-a-service-tutorial-6b3f79318574](https://medium.com/@AndroidAdvance/hashicorp-vault-encryption-as-a-service-tutorial-6b3f79318574)

https://redd.it/f3qux3
@r_devops

Looking for recommendations on Alerting - Grafana vs Prometheus Alertmanager

Hi we currently use Prometheus and Grafana for monitoring and I like the solution, however the previous admin has configured alerting really badly form what I can tell and looking for advice as I new to Prometheus / Grafana.

From what I can tell we have two instances of Prometheus setup in different DC’s. Each Instance monitors its own DC. Then they have alert manager configured in a cluster between the two sites and have some rules setup for alerting (don’t understand the rules fully).

Grafana is installed on each Prometheus box and is configured to query both instances. Some Alerts have been setup on a single Grafana instance. These alerts seem more easy to understand.

What I would like is some recommendations on what I should use for alerting Prometheus alertmanager or Grafana? My only requirement is that alerting works between the two sites.

Thanks

https://redd.it/f425yr
@r_devops

Practical Operations: Observability Best Practices

Do you build things on the Internet and monitor them? Ever wonder *what* you should be monitoring? Or how to build common practices for instrumenting code? Join us for episode 84 of the Practical Operations Podcast where we chat about methods to instrument for metric data, and how to define common practices for getting the most out of your log data! Find us at the URL below or where ever you find your podcasts.

[https://operations.fm/episodes/84/](https://operations.fm/episodes/84/)

We talk about tagging standards. Also, covering the RED, USE, and Four Golden Signals methods.
Last but not least how to get the most out of your structured logging with fields. Feedback and comments welcome!

https://redd.it/f426u4
@r_devops

How janky are Expect Scripts when they start to interact with CI/CD pipe-lines?

I'm thinking primarily of Jenkins and Bamboo.

Anything you know about this in a sort of high level way, or by way of recommendations, would be much appreciated.

I'm currently building a set of automated-testing scripts from scratch, and I've found Expect scripts to be helpful, but these scripts have not yet interacted with Jenkins or Bamboo.

https://redd.it/f41tjy
@r_devops

Elastic Beanstalk like deployments for DigitalOcean

Still in development but I would welcome any comments.

I like the simplicity of Elastic Beanstalk and wanted to recreate this environment on Digitalocean.

[https://www.npmjs.com/package/@mitjafelicijan/unfold](https://www.npmjs.com/package/@mitjafelicijan/unfold)

https://redd.it/f3xumi
@r_devops

PSA: phpList Authentication Bypass exploit in v3.5.0 due to type juggling with '==' auth condition (CVE-2020-8547). Here's a guide to securing phpList in Cent7

Elier this week, it was announced that phpList had a critical security vulnerability permitting an attacker to bypass authentication and login as an administrator using an incorrect & carefully-crafted password in some cases. This bug is a result of the fact that \[a\] PHP is a loosely typed language and \[b\] the phpList team was using the '==' operator to test for equality of the user's hashed password against the DB. This security pitfall has been known in PHP since at least 2010 (a decade ago!), but I'm sure the same mistake will be made again..

[https://tech.michaelaltfield.net/2020/02/14/phplist-hardening-security/](https://tech.michaelaltfield.net/2020/02/14/phplist-hardening-security/)

https://redd.it/f3xrw1
@r_devops

DevOps Bookmarks Back at another Domain [devopsbookmarks.org]

Hello all,

I noticed recently that the [devopsbookmarks.com](https://devopsbookmarks.com) site has been down, which was a really cool site! I took it upon myself to fork the repo and create [devopsbookmarks.org](https://devopsbookmarks.org). All credit goes to the people who've contributed to the [devopsbookmarks.com](https://devopsbookmarks.com) repository. I decided to revive this project and take it over. The .org site has a totally different repository and contributions are welcome! To contribute, the links are on the site.

https://redd.it/f465wp
@r_devops

Terraform Noob

Hey DevOps people,

I'm trying to save some cloud budget and therefore I've decided to use terraform as the main tool for my project.

So the basic idea of the project is to not let servers running all the time, but only during working hours when they are needed. I am very new to Terraform so I'm using this as an opportunity to learn it as well.

​

Right now I have a [main.tf](https://main.tf) file with around \~20 resources for servers, each of them should create a snapshot by the end of the day and delete the server, in the morning I want to create these 20 servers based on the snapshots that are saved. Right now my snapshots are saved in the same file as the servers, so running the \`terraform destroy\` command deletes the snapshots too, how would I go about this, I also want to only have the latest snapshot saved the older snapshots should get deleted as well.

If someone can just point me up a blueprint of the workflow in terraform I'd really appreciate it.

https://redd.it/f3w6nq
@r_devops