Infra.app - Desktop app for managing Kubernetes

I saw this Mac app from the r/Kubernetes thread for managing Kubernetes clusters. The experience is great so far.

Check out the longer thread there: [https://www.reddit.com/r/kubernetes/comments/f3m85m/infraapp\_desktop\_app\_for\_managing\_kubernetes/](https://www.reddit.com/r/kubernetes/comments/f3m85m/infraapp_desktop_app_for_managing_kubernetes/)

https://redd.it/f3u2bc
@r_devops

On-prem Jenkins over k8s VMs storage

How would you tackle the persistent storage part?
Cluster will be built upon 3 worker nodes.

We have a cifs storage mount in the office, and from my reading, there is a cifs driver on GitHub(as currently no official cifs drivers by kubernetes) but repo not really alive.. https://github.com/fstab/cifs

Thinking to bring up a VM running NFS server, and connect the cluster nodes, but it is not so good approach as single point of failure when this VM will crash.(and it will ..)

Any fruitful thoughts?

https://redd.it/f3tqwd
@r_devops

GitHub CLI (Beta) for more efficient PR's

Check out my video on the new GitHub CLI tool which is currently in Beta!

It allows you to create, get the status of, and view in the browser all Issues and Pull Requests for a repo straight from the CLI!

Great tool!

[How to create a PR in the new GitHub CLI Tool](https://youtu.be/_QnZpeCOM_s)

https://redd.it/f3ygea
@r_devops

I love you -whatif

I'm not asking for nothing than the super power of -whatif IRL XD

https://redd.it/f3zt5f
@r_devops

Ideally, enterprises should not have a designated DevOps team, according to Jennifer Davis, co-author of Effective DevOps and senior software engineer at Chef Software

Thoughts? We have lots of different app teams at my company. I wouldn't expect these developers to maintain cloudformation scripts, ansible playbooks, develop codebuild/codedeploy scripts, configure pipelines... If the Devops team can interface among these disparate entities and automate their build procedures--what's wrong with that?

https://redd.it/f3ydq3
@r_devops

Looking for a career change into DevOps; where to start?

Some background: I’ve been working in tech for about six years as a scrum master/“agile delivery lead” as my new company calls it. Problem is, I just don’t find it interesting anymore.

I care very much about efficient software delivery, but I’m seeing less and less value in my current role to influence that. I’m a process dork so I find devops as a craft fascinating and super valuable, and at this point I’d rather do that than argue with yet another group of product people about the importance of addressing technical debt proactively, investing in testing, and not fucking setting mandatory meetings for engineering teams for hours a day. I’m burned out on that.

So where do I start? I’ve been lucky enough to be well loved by some fantastic engineering teams in my career, so I’ve picked up a fair few tips and tricks... but I don’t have a solid, cohesive framework to fit it all in. I get the philosophical and process aspects, but outside of some basic java and python and experience with truly antiquated programs (uDeploy and ESP) I don’t know any tools.

https://redd.it/f3zjp2
@r_devops

Wrote a tutorial on Hashicorp Vault for Encryption as A Service

check it here [https://medium.com/@AndroidAdvance/hashicorp-vault-encryption-as-a-service-tutorial-6b3f79318574](https://medium.com/@AndroidAdvance/hashicorp-vault-encryption-as-a-service-tutorial-6b3f79318574)

https://redd.it/f3qux3
@r_devops

Looking for recommendations on Alerting - Grafana vs Prometheus Alertmanager

Hi we currently use Prometheus and Grafana for monitoring and I like the solution, however the previous admin has configured alerting really badly form what I can tell and looking for advice as I new to Prometheus / Grafana.

From what I can tell we have two instances of Prometheus setup in different DC’s. Each Instance monitors its own DC. Then they have alert manager configured in a cluster between the two sites and have some rules setup for alerting (don’t understand the rules fully).

Grafana is installed on each Prometheus box and is configured to query both instances. Some Alerts have been setup on a single Grafana instance. These alerts seem more easy to understand.

What I would like is some recommendations on what I should use for alerting Prometheus alertmanager or Grafana? My only requirement is that alerting works between the two sites.

Thanks

https://redd.it/f425yr
@r_devops

Practical Operations: Observability Best Practices

Do you build things on the Internet and monitor them? Ever wonder *what* you should be monitoring? Or how to build common practices for instrumenting code? Join us for episode 84 of the Practical Operations Podcast where we chat about methods to instrument for metric data, and how to define common practices for getting the most out of your log data! Find us at the URL below or where ever you find your podcasts.

[https://operations.fm/episodes/84/](https://operations.fm/episodes/84/)

We talk about tagging standards. Also, covering the RED, USE, and Four Golden Signals methods.
Last but not least how to get the most out of your structured logging with fields. Feedback and comments welcome!

https://redd.it/f426u4
@r_devops

How janky are Expect Scripts when they start to interact with CI/CD pipe-lines?

I'm thinking primarily of Jenkins and Bamboo.

Anything you know about this in a sort of high level way, or by way of recommendations, would be much appreciated.

I'm currently building a set of automated-testing scripts from scratch, and I've found Expect scripts to be helpful, but these scripts have not yet interacted with Jenkins or Bamboo.

https://redd.it/f41tjy
@r_devops

Elastic Beanstalk like deployments for DigitalOcean

Still in development but I would welcome any comments.

I like the simplicity of Elastic Beanstalk and wanted to recreate this environment on Digitalocean.

[https://www.npmjs.com/package/@mitjafelicijan/unfold](https://www.npmjs.com/package/@mitjafelicijan/unfold)

https://redd.it/f3xumi
@r_devops

PSA: phpList Authentication Bypass exploit in v3.5.0 due to type juggling with '==' auth condition (CVE-2020-8547). Here's a guide to securing phpList in Cent7

Elier this week, it was announced that phpList had a critical security vulnerability permitting an attacker to bypass authentication and login as an administrator using an incorrect & carefully-crafted password in some cases. This bug is a result of the fact that \[a\] PHP is a loosely typed language and \[b\] the phpList team was using the '==' operator to test for equality of the user's hashed password against the DB. This security pitfall has been known in PHP since at least 2010 (a decade ago!), but I'm sure the same mistake will be made again..

[https://tech.michaelaltfield.net/2020/02/14/phplist-hardening-security/](https://tech.michaelaltfield.net/2020/02/14/phplist-hardening-security/)

https://redd.it/f3xrw1
@r_devops

DevOps Bookmarks Back at another Domain [devopsbookmarks.org]

Hello all,

I noticed recently that the [devopsbookmarks.com](https://devopsbookmarks.com) site has been down, which was a really cool site! I took it upon myself to fork the repo and create [devopsbookmarks.org](https://devopsbookmarks.org). All credit goes to the people who've contributed to the [devopsbookmarks.com](https://devopsbookmarks.com) repository. I decided to revive this project and take it over. The .org site has a totally different repository and contributions are welcome! To contribute, the links are on the site.

https://redd.it/f465wp
@r_devops

Terraform Noob

Hey DevOps people,

I'm trying to save some cloud budget and therefore I've decided to use terraform as the main tool for my project.

So the basic idea of the project is to not let servers running all the time, but only during working hours when they are needed. I am very new to Terraform so I'm using this as an opportunity to learn it as well.

​

Right now I have a [main.tf](https://main.tf) file with around \~20 resources for servers, each of them should create a snapshot by the end of the day and delete the server, in the morning I want to create these 20 servers based on the snapshots that are saved. Right now my snapshots are saved in the same file as the servers, so running the \`terraform destroy\` command deletes the snapshots too, how would I go about this, I also want to only have the latest snapshot saved the older snapshots should get deleted as well.

If someone can just point me up a blueprint of the workflow in terraform I'd really appreciate it.

https://redd.it/f3w6nq
@r_devops

Moving from on-premise to AWS Aurora Serverless

Hi devops,

We are currently maintaining a MySQL database on bare metal, which handles all of our production load. It has served us well, but in the past months, it has started to become too small for our load during peak times. We have a very inconsistent load on our production, where during the days it is very low, but peaks during evenings and weekends. While idle, we have somewhere around 100k hits/hr, while during peak it could go as high as 5M/hr or sometimes even 15M/hr. These spikes happens about every second to every third day, so not so frequently.

I have looked into different options on how to tackle this issue, and to find a long term solution that would suit our needs and take the issue off of our hands. Naturally, since we are in the AWS echo system with a lot of our services, we looked into what they could offer and found out about Aurora Serverless. It has got some limitations when it comes to functionality, but it all seems fine to us and should not bother us in any way as of how we are using MySQL right now.

Searching for experience on maintaining production workload on Aurora Serverless is quite small, at least according to my Google-fu. Most users seem to use it for test environments and staging since it is able to scale down to 0 ECU's, and therefore keeping the cost down.

Our main take is that it would suit our needs based on the spiky loads, and therefore not having to set up an instance able to handle those large loads while staying idle most of the time, at least if it works as good as AWS states that it does, and thereby keep the costs down.

Does anyone have actual experience with Aurora Serverless in production environments? Are there better solutions for scaling things like this, when it comes to AWS and MySQL?

https://redd.it/f3tj8o
@r_devops

Which Programming Language should I Use to Create a Project Tracker?

Hi,

I am looking at phasing out the use of EXCEL in my company, but I also think this would be a good project to begin to learn a new programming language, before I pick a language I thought I would ask for advice. Below are the main features I need from this application.

​

1. It must be a desktop application.
2. It must have a login for all users, ideally which can be linked to their Office365 accounts.
3. It must given the option to open a specific project from a list of project(s) a user has access to.
4. It must allow the user to list all programs for the specific project.
5. If must allow the user to add program attributes like program author, modified date, comment.
6. It must allow multiple users to update the project areas via a "shared" feature and not a "check-in - check-out" method.
7. It would be nice to have a feature which allowed a user to export the data from the application into EXCEL.

If you want more details let me know.

TL;DR - i want to create an application to replace a shared EXCEL file but not sure what programming language to use.

Thanks
Craig

https://redd.it/f47nnl
@r_devops

Can someone help me solve this task.

Task: need to dockerize Jenkins
Need dockerized Jenkins to use docker containers to run jobs.
CANT have docker-indocker. Must spawn sibling docker containers how to write dockerfile.

https://redd.it/f3nm36
@r_devops

How to build a catalog of multiple services

Hi

We have got around 80 micro-services in our product. We make quarterly release of our product. In order to identify which version of service is going on which release, we maintain a manifest file in every release. Our manifest files are growing dramatically and we don't like it. Is there a better way to maintain this catalog? Have you used any tool which helps you maintaining this application catalog?

https://redd.it/f35ymf
@r_devops

Tasks for a struggling junior DevOps?

Due to some organisational shuffling, my team absorbed a smaller team of operations engineers. Our setup is now that we're the sole operations/DevOps/SRE squad of eight people, for an engineering org of about a hundred, in a fast growing startup of 200 or so.

I'm not an experienced manager, but I joined the company early and was one of the people who initially laid down our DevOps tooling and culture, so was lucky enough to be in the right place at the right time when the company was large enough to need a DevOps lead.

Of the team that was folded into my team, one of the guys is very junior, with no prior experience in systems adminstration, scripting, programming, computer science, cloud infrastructure, etc. He has a background in desktop IT support, and moved to Linux/cloud operations for a team that was intended to do relatively traditional manual IT work. Unfortunately, the manager who pushed for the creation of that team left just after this guy passed probation, and there wasn't anybody to continue to run it, so the headcount was moved to me.

My team focuses on IaC, automation, and building an internal PaaS. I've been trying to give him the benefit of the doubt for months, but he's just not picking up this role at all. He needs his hand held through essentially any scripting task, is unwilling or unable to take feedback from code review, struggles with basic source control, and asks very basic questions incessantly without doing even cursory research. After six months, progress has been slow to nonexistent.

Things he has been able to handle: manning an internal service desk for basic operations that we have not yet automated (mostly user management on legacy systems that aren't yet integrated with our SSO). That's pretty much it, and any ticket that gets raised that requires insight into how the platform works has to be raised to a more senior team mate.

I'm trying to figure out what other tasks he could be assigned that would add value, but not require him to be babysat by a senior engineer whose time could be spent implementing features or fixing bugs. Me and most of my team came to DevOps from more the Dev side of the industry, so maybe there are things I'm missing about how Ops people are usually trained up?

Does anybody have any suggestions of what else I could get this guy to do to that creates value and that could encourage him to learn and grow into the role?

https://redd.it/f34whp
@r_devops

Deploying your front end websites to s3 with cloudfront for fun and profit

[https://ilhicas.com/2020/02/15/Serving-Javascript-S3.html](https://ilhicas.com/2020/02/15/Serving-Javascript-S3.html)

https://redd.it/f4fa9p
@r_devops