Self hosted sentry issue

We are running a self-hosted Sentry deployment on EKS using the official Sentry Helm chart. Due to cost constraints, we removed the larger instance types and currently only have "t3a.large" nodes. As expected, we are facing bottlenecks, primarily related to memory, since many Sentry components are quite memory-intensive.

Additionally, the same node group is hosting other workloads, so adding larger instance types is not currently feasible due to existing constraints.

Has anyone faced a similar situation? How did you optimize costs while keeping Sentry stable? Are there any recommendations for reducing resource consumption in self-hosted Sentry, or would migrating to managed Sentry be a better option in this case?

https://redd.it/1uy717p
@r_devops

How would you all

So I just wanted to ask what is the best way to learn and master

Devops

Imran teli udemy course , Techworld with nana or anything else ??

Like I watched nana vids she said focus on Basics

And I feel that's right

So I wanted to get advice on

Courses or learning paths , the mistakes not to make and ways



https://redd.it/1uy1hh2
@r_devops

Hosting Experience Comparison

For deployment to microvms (lambda like) vs container based deployments ? Which experience are the best for developers ? Whats the hardest/limitations for each kind ?

https://redd.it/1uydet0
@r_devops

Regrets leaving previous DevOps role as I am not enjoying the new company

Last month I left my previous DevOps role for a new one. The pay increase was the main reason I left. My old role had good colleagues, interesting work, and an office I could go into whenever I wanted, but I just didn't feel I was being paid enough for the work I was doing. It was a fairly big company and I'd been there 7 years.

The new company is smaller and fully remote. I'm starting to feel like the grass isn't always greener on the other side. Here are the pain points I'm facing:

Autonomy - The security team always needs input on infrastructure designs, and the process adds way too much time before I can actually deploy anything. Some of their recommendations are just overboard, like I get the idea behind them but they're not practical. Security are quite a big blocker and I have had to ask them to keep granting me more access to help debug production issues, which takes them over 6 hours to implement.

AWS accounts galore - When running Terraform, you have to keep logging into different profiles just to plan and apply. It gets confusing, and the way they've split up the accounts feels excessive.

High expectations, no tools - Senior software engineers want fast progress, but the security team hasn't signed off on giving people in my role access to AI tools. Security and software engineers have AI, but DevOps doesn't, because we have SSH access to prod clients.

Meetings galore - There are so many "syncs" throughout the day/week. 2 daily syncs plus another 1-2 meetings most days. In my previous role I had maybe one stand up a week.

Manager - My manager doesn't really have a backbone and doesn't fight for us. When senior software engineers change direction, instead of pushing back and telling them what our path is, he just makes us appease them. He doesn't code or help with the workload either, he's literally just a manager. My old manager was also an engineer I could go to for help.

High turnover - After being here a while I've noticed quite a few people have left, and most of the people who are here are pretty new. They've hired around 7 engineers this year in DevOps, but even the person who interviewed me, who seemed pretty strong, has already left.

The work itself isn't that difficult, it's dealing with people in these meetings that's annoying, and they expect me to move faster than what's actually possible given the tools I've been given. I'm not sure if the company's just in a bad place, if I'm too used to my old company, or if this is just what changing companies is like.

Wondering what your thoughts are, and whether you think I should start looking for new roles ASAP. I don't want to go back to my previous company but they would take me back if I was to apply. I would rather try somewhere else.

https://redd.it/1uygsci
@r_devops

System Admin for 2+ Years but I Feel Like I Never Learned SysAdmin. Want to Transition to DevOps. Where Should I Start?

Hi everyone,

I've been working as a System Administrator for a little over 2 years, but I honestly feel like I haven't gained the kind of experience most people associate with system administration.

I work at a very old/traditional company where my day-to-day work is mostly repetitive:

* Installing the same software over and over
* Basic monitoring
* Following predefined SOPs
* Very little troubleshooting, automation, or infrastructure work

Because of this, I feel like I've missed many of the fundamentals that most SysAdmin pick up along the way.

I want to transition into DevOps, but I'm starting almost from scratch. I know it's not an entry-level role, and I'm prepared to put in the effort to learn properly.

If you were mentoring someone in my position, what would your roadmap look like?

Some questions I have:

* What core System Administration topics should I master first ??
* Which Linux concepts are absolutely essential??
* What networking knowledge is expected ??
* Which scripting language should I prioritize (Bash or Python) ??
* When should I start learning Docker, Kubernetes, Terraform, Ansible, CI/CD, and cloud platforms like AWS ??
* What projects would actually help me build real-world skills instead of just collecting certificates ??
* Are there any resources, books, YouTube channels, or courses that you genuinely recommend??

My goal is to become job-ready for a DevOps role, even if it takes several months of consistent learning.

I'd really appreciate any roadmap, advice, or lessons you wish someone had told you when you started.

Thanks in advance!

https://redd.it/1uyizr3
@r_devops

What areas of IT should you focus on when graduating?

I’ve been working as a SysOps engineer for a year, and it’s what I’ve been doing since I graduated.

I was wondering: if you were in my shoes, what would you invest your time in?

How do you see the future of our profession with the rise of AI?

https://redd.it/1uyhiek
@r_devops

Learning Azure ADO

Can someone give me review for https://www.azuredevopslabs.com. I am trying to learn devops and then devsecops. My main goal is to learn devsecops. Can anyone guide me to some resource for Azure ADO like some guided labs.
Thank you in advance!

https://redd.it/1uyorl7
@r_devops

Announcing v1 of OpenTelemetry Go Compile-Time Instrumentation
https://opentelemetry.io/blog/2026/go-compile-time-instrumentation-v1/

https://redd.it/1uyrggy
@r_devops

Recently Deployed n8n on ECS fargate on AWS

I recently deployed n8n on ECS fargate on AWS eith Terraform by keeping the n8n UI accessible with in the VPN and webhook endpoint to be publicly accessible.

Happy to answer questions and discuss if someone is facing issues with the n8n deployment.

https://redd.it/1uyt5v3
@r_devops

What cleanup proof do you expect after an agent runs tests locally?

For people who care about reproducible dev/test environments: where do you draw the line for "done" when an automated helper runs tests?

I do not mean whether the test passed once. I mean what happens after: Docker containers, simulators, browser processes, temp files, dev servers, occupied ports.

I have had a test run leave a dev server on an old port, and the next debugging session made no sense until I noticed I was hitting the wrong process.

With human-run scripts, this is already annoying. With AI agents, it feels easier to miss because the tool says the task is complete and you move on.

Would you require a teardown log or post-run check before accepting the result? Or is that too much for local development?

https://redd.it/1uyqljo
@r_devops

How to combine MD5 hash + code sign

We build and package our installer files using Advanced Installer. Up until last years version, we code signed using a .pfx and had the AI(Adv. Installer) also embed MD5 into the files. So both hashing and code signing is handled by the same tool, bing bong works fine.

But now, our team wants to move away from using a dedicated .pfx file, and instead wants to code sign it using a signtool.exe on the buildmachine, with the private key stored on a remote KMS. Thus, i integrated our pipeline to also have a task that code signs the installer. Now, when i tested installing with the installer,it is corrupted. Looked up on release notes, the custom signing via 3rd party does exist,but its on v17, my company is on v16 💀.

I tried disabling hashing via the AI, and let the build machine handle it (ofc via the preset task in pipeline), but just found out im only calculating MD5 hash value for the files, not embed the values IN the actual files

I really need some ideas, i feel like im trying to do the impossible here.

https://redd.it/1uyvds8
@r_devops

How do you keep release notes from just dying after a few sprints?

Hey,

I'm a developer looking into the way other teams create release notes and weekly updates together when the work is scattered across different tools e.g. Jira, GitHub and Azure DevOps.

We start with good intentions once every couple of months but after a while nobody updates the release notes anymore. It takes to much time and nobody enjoys to create them and it's not published to the stakeholders so nobody feels the urge to keep the release notes up to date.

How do you guys manage this?

https://redd.it/1uyv825
@r_devops

DevOps professionals in Australia - how much should I ask?

Been working as a DevOps / Cloud engineer for just over 6 years. Mostly in AWS shops. Know a bit of everything but quite good with linux, AWS, containers and orchestration, GitHub actions, Python / Node / PHP. Hold following certifications. AWS Solutions Architect Associate, DevOps Engineer Professional, LF Certified Kubernetes Administrator, Hashicorp Certified Terraform Associate.

Based in Melbourne, VIC, and currently paid AUD 100,000 + super. Wanting to see if I could demand more.

TA

https://redd.it/1uz25xp
@r_devops

How do small teams manage shared AI context without losing their minds?

Hey, we're building a project with 3 people using Cursor and Claude Code and keep tripping over the same thing.

One dev changes a port or finds a bug in a library and patches it with a workaround, the other has no idea and burns three hours figuring it out. The AI in the IDE has zero clue about team context and keeps suggesting stuff we already moved past. How's everyone dealing with this? Running some shared MCP server, a team version of something like claude-mem, or just dumping everything in Slack Telegram Discord manually?Curious especially from tech leads and small teams how do you not lose your mind to context chaos.

https://redd.it/1uz6jw9
@r_devops

How do teams using multiple git provide (github, gitlab, bitbucket) manage their daily workflow?

I'm curious how teams working across multiple Git providers manage their day-to-day work.

If your organization uses GitHub + Bitbucket or GitHub + GitLab (or more), how do you:

Track pull requests?

Find stale branches?

Monitor releases?

Keep track of work across providers?

Is it a pain point, or is it basically a non-issue?

https://redd.it/1uz8gk8
@r_devops

Mobile to backend end-to-end tracing: worth it? How do you keep the public ingest from being a DDoS target?

We're adding tracing to our mobile app and want the spans to connect to our backend traces (same trace\_id, so a user action in the app links to the API calls it triggers).

Backend goes OTLP -> Alloy -> Tempo already.

However, the mobile ingest endpoint has to be public, so it's an open, unauthenticated write endpoint which is an obvious DDoS/abuse target.

For now it's a simple one shared Tempo, and push all the protection to the edge instead: Cloudflare rate limiting, per-IP limits at the proxy, plus a sacrificial Alloy gateway that samples, memory-limits, and strips high-cardinality/PII attributes before anything reaches Tempo.

Questions for anyone who's done this:

* Do you actually ingest **mobile app traces end-to-end into your backend tracing**, or keep them separate (RUM-style) and just link by ID?
* Is chasing the unified mobile to backend waterfall worth it, or should we just drop it?
* How do you protect a public OTLP endpoint in practice?

Genuinely curious what's held up for people in production. Thanks.

https://redd.it/1uza6ko
@r_devops

standing api keys vs scoped tokens for ai agents in prod — what are you actually doing?

disclosure up front: i build an ai agent product, so i live this from the vendor side of security reviews.


been through a few enterprise reviews this year and the credential question is the one that keeps stalling. the reviewer asks what the agent authenticates with, and the honest answer for most teams is the same standing api keys a human would get, just never rotated and never scoped. one compromised prompt and the agent can do anything those keys can.


what actually moved reviews for us was short-lived scoped tokens the agent never sees in the clear, plus a per-action log the reviewer could replay. suddenly the question had a real answer instead of a promise.


curious what this sub is doing. still standing keys, scoped tokens per run, or something in between that actually works?

https://redd.it/1uzc66o
@r_devops

What is the one automation you have added, that you are proud of?

As DevOps, we all work on automating tasks to make our lives easier. What is the most satisfying automation you have ever implemented that truly saved you time?

https://redd.it/1uze2sz
@r_devops

Anyone considered code signing as a problem with respect to the P-Q transition?

Most of the discussions I ve heard regarding postquantum cryptgraphy fcus on TLS or key exchange protocls. I’d argue that code signing will probably be a much bigger problem. There are too many things associated with code signing, such as artifacts, build pipelines, firmware signing, package repositories, EV certificates, HSMs, delegated signing, legacy clients, rollbacks, and long-lived binaries. In fact it is possible that transport encryption will be subject to renegotiation in each session. But the signed artifact can continue to be checked many years later by systems that rely on a specific algorithm or certification chain. As I delved into the topic, I’m still quite hesitant in case I’m missing something fundamental.

https://redd.it/1uzorvm
@r_devops

Solve you kubernetes cluster issue using kubeagnet.
https://www.reddit.com/r/kubernetes/comments/1ux1g6w/weekly_show_off_your_new_tools_and_projects_thread/oy8fsq6/

https://redd.it/1uzuacq
@r_devops