Looking for a simple monitor tool

I need a very basic monitor tool for my python server, It needs to support multiple servers, logs, notifications, and server CPU usage, ETC.

Remote actions on the server would be nice (Optional).

All the tools I found are either too complex / complicated or extremely expensive.

Thank you.

https://redd.it/f4fdlk
@r_devops

Need some advice solving this project.

Problem Statement:

We need to allow only Authorize people to access our Application


Features to be implemented:

       - create a Rest endpoint to validate user

       - if user not exist then return response to signup

       - try allowing maximum attempt for login as 3

       - if it exceed maximum limit of attempt then block that user for 5 minutes


Acceptance Criteria:

1. Pass User information for login in header with encrypt format

2. Provide SSO features

3. User authentication should be done with database

4. Handle proper exception

5. Make hour API completely decoupled

What can be the easy steps and which program (Python, groovy,html) and application(tomcat, httpd) can be used.

https://redd.it/f4fzwm
@r_devops

What’s the point of kubernetes secrets?

Kubernetes Secrets are just a base64 encoding of some text. If intercepted, it’s easily decoded. Why not encrypt secrets and then just use a ConfigMap? The code running in the container would have to know how to decrypt the secret.

I’d like to hear a little more about good security practices regarding secrets in kubernetes.

https://redd.it/f4eoli
@r_devops

What are the next DevOps moves for an e-commerce?

We have our MVP ready. And basically all we have is Gitlab CI/CD tool on our server. I'm considering tools like Sentry to track errors on clients' machine, I'm also considering simple monitoring tools to at least gives us an alert when servers go down. I've found Prometheus suitable for monitoring purposes (suggest a better alternative in case you know one).

So what's the next step? If we have a long-term (say 2 years) plan to build a better and more reliable service, what DevOps actions and tools we need to gradually adopt, what's the DevOps roadmap for businesses?

https://redd.it/f4j30n
@r_devops

How to manage CICD between Isolated Environments?

Hi Team,

I’m interested to hear your thoughts on the following use case:

PROD environment is completely isolated in DataCenter 1 in different region

DEV/TEST/Stage environment is in DataCenter 2 in another region.


Apparently we will require two separate CICD tools. What do you think of possible challenges? How to sync application configs?

https://redd.it/f4do0i
@r_devops

Travis for tests that rely on a proprietary server running?

I have written a python application which wraps a legacy, proprietary C API. I want to open source my application on Github and integrate it with Travis, in order to display a build failing/pass icon on Github.

All of the tests, however, rely on the proprietary server application being up and running, as well as the header/shared objects to compile the application. "unit tests" for this particular app wouldn't be useful - the only useful tests are those that actually connect to the server. I do not want to have Travis attempt to install this proprietary server so that it can run the tests. I'm pretty sure that I would not be allowed to do this and that it would take too many resource for the Travis instance.

Instead of having Travis even install the app or run any of the tests, my idea is to manually run the tests and commit the results of the tests into the repo, and then have Travis run a script that checks if the results of the test make sense relative to the code in the repo (for example, if the tests say foo.bar has 100 lines, but the actual code for foo.bar has 125 lines, then the committed tests are invalid and the build should fail). Additionally it should check the code coverage indicated by the results and fail if the level is too small.

I think I could write something myself to do this, but I'm hoping that something similar to this exists.

Does this idea make any sense? Is there a better approach to integrating with Travis when tests rely on a server?

---

My big concern is that when I leave my current company, I will want to make a former coworker the administrator. I just want to semi-ensure that the new owners are running the tests if they decide to create a new release on Pypi. If it was just me, I wouldn't even bother with Travis since I know I would run the tests beforehand.

https://redd.it/f4e9pn
@r_devops

Convince me to move from kops to Terraform/Ansible or whatever else there is.

In the beginning, after learning about kubernetes, I thought it would be a better fit for our startup when we were starting out, I looked up into how to spin up a kubernetes cluster on AWS (we had credits at the time) and there I found out about kops, which lets me configure the cluster, which kubernetes version image, etc... and it would spin up one that is ready to use.


Reading from various subreddits, there is this idea that keeps popping up that one must learn Terraform and Ansible, I've tried to read about Ansible and still have no idea how this could be useful in my case, and Terraform seems to be like an abstraction layer where I can define the cloud infrastructure there instead of relying on kops, but in the end they seem to achieve the same goal.

What I'm saying is, I keep feeling pressured that I should move on to use these tools instead of relying on kops, and I can't convince myself to do that.



So... Change my mind.

​

(Note: I know that some people might say well if kops is enough for you then I shouldn't worry about it, I understand that, but I would like to learn more about scenarios where one relied on kops all the time until they hit a roadblock, or something like that...)

https://redd.it/f4dfmt
@r_devops

Ansible Tower vs Jenkins

I am very new to the topic and I'm struggling to understand whether Tower and Jenkins are interchangeable. I am trying to choose among the two solutions.

I understand Jenkins is a CI server, with some CD functionalities, reachable mainly thanks to plugins. It can also use Ansible for CD.

Can Tower be used also for CI? If so why should someone use Jenkins (except for it being open-source)?

https://redd.it/f4bo5h
@r_devops

How to create a Bind in Docker with 2 different zones for 3 DNS clients in the same server?


I need to create a Bind in Docker with **2 different zones** for **3 DNS clients** from the same server where:
- **1 client has access to one zone** and **the other 2 access to the other zone**


I need to use Bind and Docker for this.

https://redd.it/f4bi5x
@r_devops

A few questions about CI pipelines

I've been using an azure-pipelines.yml file for defining my project's pipeline and have a few questions:

1. I see I can define the branches that trigger the pipeline in the file itself. I'm confused how this works. What is stopping someone from adding `my-awesome-untested-branch` as a trigger and configuring it to push to production, then pushing to that branch?

2. Is there a consensus on whether YAML definitions are better or worse than Azure's UI/Classic pipeline configuration?

3. If I'm doing unit and integration testing in my pipeline and then building a Docker image only after those tests pass, should I have a custom Dockerfile that is only for building via CI since I've already built the project?

https://redd.it/f48uv1
@r_devops

How to secure ssh / sftp customer into container?

Hello.

As we know every container runs as its user, some of them runs under root and other as database user etc. etc.

I am wondering if I could give ssh / sftp access to that container and how?

i should install ssh client in dockerfile and expose the port?

I think i should run every container as arbitrary user then

https://redd.it/f48mdr
@r_devops

Thoughts about The Unicorn Project?

I read The Phoenix Project and really enjoyed it, but The Unicorn Project seems more...tech general? Anyway, thought I'd ask around before picking up a copy.

https://redd.it/f54gzn
@r_devops

Azure DevOps - experience/ perspective?

People - what are your thoughts on the Azure DevOps tooling?

Is anyone invested / using it heavily?

https://redd.it/f5gj1b
@r_devops

Using Argo to deploy my microservices

Hi all

I would like deploy my microservices into Kubernetes automatically and need a CD tool.
Looking at Argo, my thought it is the right CD tool.

Argo has many tools, these are Workflows & Pipelines, CD, Rollouts and Events. For deploying my microservices, which tool do I need? What is the difference between Workflows and CD? Which tool to use for deployment?

Would be nice, if someone could give me advices.

Thanks

https://redd.it/f57z7m
@r_devops

DevOps market in Canada advice

Hi, I want to know what market situation is in Canada as I want to move there an get permanent citizenship, I am English Russian speaking person and as far I know in some city's they speak France, What advice could you give me guys.

https://redd.it/f545ng
@r_devops

A Talk on distributed systems in college

\[Beginner talk\] Here is the recording of a talk I gave at a college in India: [https://youtu.be/9mEJZlD8c7k](https://youtu.be/9mEJZlD8c7k)

I try to take a simple application and discuss various places where it can fail and then come up with strategies to solve them.

Looking for some feedback from the community!

Cheers, and please do consider subscribing to the channel if you are benefiting from it.

https://redd.it/f4s9l2
@r_devops

Unable to recieve options requests on EKS

Hey everyone, I was hoping someone could link me or explain how to get a nginx ingress controller on an EKS cluster uisng a classic LB to allow CORS. I think I am having an issue related to CORS because my OPTIONS requests from my front end (axios) is coming back 405 method not allowed

Below are my ingress resource annotations that relate to the nginx issue.

​

kubernetes.io/ingress.class: "nginx"
cert-manager.io/cluster-issuer: "letsencrypt-prod"
# needed to allow the front end to talk to the back end
nginx.ingress.kubernetes.io/cors-allow-origin: "https://portal.pageanengineer.com"
nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
nginx.ingress.kubernetes.io/enable-cors: "true"
nginx.ingress.kubernetes.io/cors-allow-methods: "GET, PUT, POST, DELETE, PATCH, OPTIONS"
# needed for aws elb
service.beta.kubernetes.io/aws-load-balancer-backend-protocol: "http"
service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "https"
service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout: "60"

This setup works fine on a KOPS cluster with the same type of LB created. I am having a hard time figuring out why my requests are being blocked

https://redd.it/f5k1tg
@r_devops

Running Things Locally

How do you guys solve the issue of allowing developers to develop services locally, and keeping the local environment in sync with dev/prod?

What does the workflow look like for running one of those services against external dependencies?

I'm using kubernetes. What I'm thinking is that while a given service is being developed, external dependencies can be proxied from minikube to localhost to allow that service to be run normally (with a debugger or whatever else).

Then, when that service is done, the container can be deployed to minikube for other services to use.

https://redd.it/f5j6ws
@r_devops

Docker-on-Docker vs. Continuous Integration?

I have been experimenting with tutorials and `jenkinsci/blueocean` image and related tutorials. It uses ***Docker-on-Docker*****^(†)**, but this is considered an anti-pattern (and dangerous). This is intended for local development use cases, such as building `Jenkinsfile` pipelines.

But what I was wondering, given that running Jenkins services in a container (such as Kubernetes) is quite useful, how is ***Docker-on-Docker*** avoided, but still have the ability to build and push docker images?

I imagine this is not just Jenkins problem, but any CI solution that requires build/push docker images, where the service is running in a container.

† ***Docker-on-Docker*** (in case anyone unfamiliar with the term) is running the docker client tools inside of docker, mounting the unix socket into the container, which allows you to build/push docker images, but also allows the container access to a daemon running with root privileges.

https://redd.it/f5ivfn
@r_devops

Automatically version and deploy your documentation via github actions

Hey guys,

I created two github-actions that allow you to automatically version and deploy your documentation.

You get the simplicity of keeping your documentation versioned in git, without the annoyance of having huge PR's due to auto-generated-doc updates.

Right now the only hosting provider implemented is netlfiy, however more are planned.

[https://github.com/bobrown101/version-docs](https://github.com/bobrown101/version-docs)

[https://github.com/bobrown101/deploy-branch](https://github.com/bobrown101/deploy-branch)

I would appreciate any feedback and stars on github.

Thanks,

Brady

https://redd.it/f5es79
@r_devops