Thoughts on my path to become a Jr Dev Ops as a new grad?

My resume looks like this:

\-BS in CIS @ Cal Poly Pomona.

\-IT Summer Intern at a radio station. Mostly help-desk, also did a capstone presentation creating a survey using HTML which the company still uses

\-Technical Administrative Support Team at my university. Mostly tier 1, 2 tickets. (2+ years by the time I graduate, 20 hours a week)

\-IT Engineer internship at Amazon this upcoming Summer

\-CCNA (building a home lab)

\-Currently studying for the RHCSA.

I know that landing a dev ops role as a new grad is hard, but I don't want to limit myself or put myself in a bubble. Does anyone have any suggestions/tips on how I could do this? I still have 1.5 years left until graduation.

https://redd.it/g0f5rq
@r_devops

DevOps for database

What are the common automations related to database for enterprise usage (on premise)? I can think of database release deployment, DBaaS for developers.

https://redd.it/g0z4y6
@r_devops

how I can deploy an app using TeamCity?

So I have a server on which I have TeamCity and I would love to have my apps deployed there(dev, stage) envs.


I've already achieved to have GitHub pull request status, builds etc.I have only one build step which builds the application, install dependencies, run tests - all of it in docker (command line step with docker container)


How can I set up automated deployments to my local server without using Octopus (from what I've heard it's running only on Windows, my machine is using Linux)?
I'm starting my journey with DevOps and I may be not accurate with my questions

https://redd.it/g0soyc
@r_devops

AWS SSO vs Self managed identity account

Hello,

Currently, I am trying to setup a AWS multi account infrastructure, with a single identity account containing only IAM users that can be used to switch roles into their respective accounts.

I've read multiple blogs, articles where people had been doing the exact same thing. Creating self managed roles inside new accounts and allowing users to switch into them from the central identity account.

But recently I read about AWS SSO which makes user access to child accounts so brutally simple. My question is why don't people just use SSO in the first place? I would then think to switch to SSO myself as it free also, but I just want to make sure if I'm not missing something?

https://redd.it/g0sb2z
@r_devops

Branching model for nightly deploys

I'm a lead developer for a small B2B SaaS company, using Django and AWS. We currently run biweekly deploys after hours with a mostly-automated custom Fabric-powered tool.

We're currently exploring options for moving to fully-automated nightly deploys, but want to move to a different branching model to support this.

Right now, topics are branched from dev and merged to dev, a long-running branch which is merged wholesale with --no-ff into master during the biweekly prod deployment process. This necessitates a feature freeze on release days, to ensure that broken code isn't merged right before a release, and isn't really a great solution.

My current plan is to move to a more branch-oriented workflow, similar to Gitworkflow: https://github.com/rocketraman/gitworkflow. This would allow us to merge feature/bug branches individually to dev, then only merge to master the branches (corresponding to Jira issues) that have passed manual QA.

Is this a good approach?

In my mind, there are a few potential open questions, like how to handle issues/branches which have failed QA, and should be removed from the dev branch/environment. I suppose that instead of reverting commits, we could then "refresh" the dev environment by overwriting it with master, and re-merging all branches currently undergoing QA...

https://redd.it/g0s7a9
@r_devops

How to determine which APM solution for all our application stack?

Hi,

My team is looking for an App Performance Monitoring‎ for all our stack (front-end, micro-services back-end, and even data pipelines). We are looking on both open source solutions (like Prometheus + Grafana) and SaaS solutions (like New Relic and Data Dog, to only name few).

Because we are using AWS, we thought we could be fine with just CloudWatch, but we are experiencing hard time looking for logs to help debug. That's why in addition to building the right Log Strategy, we are looking for right tools.

Given your experiences, what do you recommend that can help us choose the right solution? We are mostly developers with no prior experience with any APM tool, so any choice will bring learning.

https://redd.it/g15zr2
@r_devops

Anyone here want to team up to do mock interviews?

I know sites exist like Pramp where you can do practice interviews related to a technical topic, but there is nothing really specific for Devops. If you are doing datascience or frontend development, there are tons of resources to help you prepare, but actually practicing with someone is helpful to rehearse ahead of time. Is anyone here willing to partner up to do mutual practice interviews, I guess we can prep questions ahead of time and then rate each other. It helps getting feedback in a less stressful and risk free environment.

https://redd.it/g1ds48
@r_devops

Manage your GitHub Actions secrets, with a simple CLI

I've created a githubsecrets cli - https://github.com/unfor19/githubsecrets

Install with pip
```bash
pip install githubsecrets
```

Or use with Docker (you must supply all arguments, prompts are not available in Docker mode)

macOS and Linux
```bash
$ docker run -v $HOME:/root unfor19/githubsecrets --help
Usage: ghs [OPTIONS] COMMAND [ARGS]...
```

Windows
```bash
$ docker run --rm -v c:/Temp:/root unfor19/githubsecrets --help
Usage: ghs [OPTIONS] COMMAND [ARGS]...
```

https://redd.it/g1d7su
@r_devops

What exactly is a DevOps Architect?

As a DevOps Architect, I get a lot of questions about what that means and how do you become an "architect" vs. a DevOps Engineer, so I did a quick write-up to try to explain some of those differences. Let me know what you think! Does your organization have a DevOps Architect? Who plays that role if you don't have one?
[https://medium.com/@tjblogumas/what-exactly-is-a-devops-architect-a27e5a5c728b](https://medium.com/@tjblogumas/what-exactly-is-a-devops-architect-a27e5a5c728b)

https://redd.it/g1b75x
@r_devops

DIY Single Sign-on for SSH

[https://smallstep.com/blog/diy-single-sign-on-for-ssh/](https://smallstep.com/blog/diy-single-sign-on-for-ssh/)

This is a follow up to [a blog post from late last year about SSH certificates](https://smallstep.com/blog/use-ssh-certificates/) (that post is #15 for the year on r/devops; [discussion here](https://www.reddit.com/r/devops/comments/d3b7n1/if_youre_not_using_ssh_certificates_youre_doing/)).

By using OAuth OIDC to authenticate to your SSH certificate authority, you can use certificates to implement "single sign-on for SSH". That means:

* No more SSH public key management; SSH access is provisioned and deprovisioned when users are added / removed on G Suite (or whatever other OAuth OIDC identity provider you use).
* SSH credentials are ephemeral, rotated frequently, and never hit disk. It's much harder for an attacker to jump from a popped endpoint into your production environment via SSH.
* SSH trust on first use warnings and host key verification failures go away. You can safely rekey hosts and reuse hostnames.

Last time we posted here all of the pieces weren't in place to make this easy. We just pushed a new open source release, and now they are. This post explains how to use them. It uses the open source [step](https://smallstep.com/cli/) and [step-ca](https://smallstep.com/certificates/) toolchain, which have been upgraded since last time to address some of the issues that you guys raised. We also released a hosted product today where we run the CA for you, but this post is all about how to do it yourself with open source.

https://redd.it/g1aks9
@r_devops

Looking to do an informational interview with somebody in DevOps

Hello, I am an undergrad going through a career building program with my university, and one of the things we are required to do is perform an informational interview with someone in our field of interest, which for me is DevOps. I originally had someone local lined up but the insanity of this virus put that on hold. If anyone would be interested in helping me with this, it should be a fairly short interview (maybe 20 mins or so) which we can do over phone or a voice/video chat service of your choice. It will mostly be basic questions about your job duties and how you worked up to that position.

Leave a comment or PM me if you are interested, it would be a great help to me.

EDIT: I have received a couple responses, thank you!

https://redd.it/g1di7k
@r_devops

Ask /r/devops: What would you like to see in a weekly DevOps newsletter?

Hey all.

I've been trying to work out what the best content would be for a weekly newsletters about DevOps, CloudOps, Automation and the tools that we use day-to-day. I was wondering what it is you would want to see?

So far I'm thinking:

* Tips/tricks on the tools I use
* Commentary on ideas and thoughts shared by others in the community
* Answering a common question I see
* Providing links to use resources
* Taking in questions from the community and providing an answer to them in the newsletter

What are your thoughts? If you were to get a weekly newsletter about DevOps, CloudOps, Automation, tools, etc, what would you want to see? What would keep you reading? :-)

https://redd.it/g1dxns
@r_devops

Does anyone automate the generation of visio/architecture diagrams?

What tool do you use?

https://redd.it/g1j2m6
@r_devops

GitHub actions vs Gitlab CI

I’m currently using GitLab and I like the CI experience. However with GitHub’s new announcement, they’re becoming more and more of a viable competitor to GitLab.

Has anyone had experience with GitHub actions and how they compare with GitLab’s CI?

If GitHub’s CI offering is a viable option I would switch in a heartbeat since GitLab’s UI is pretty unintuitive at times. GitHub’s code review commenting and many other UI features are just much easier to use overall.

https://redd.it/g1i9mc
@r_devops

Working style for Devops

In your work, do you find yourself the only person on a project or are you usually paired up with someone on the job?

https://redd.it/g1hqyt
@r_devops

Why is inter-service TLS desirable?

I have a production load at the moment without TLS enabled between services nor between services an externally listening ingress. TLS terminates at the ingress from the client. Internal services have no public IP address. I am the only one with direct access to the cluster.

If it's a single cloud environment that can only be accessed locally does it matter? What are the risks / attack vectors? Or where can I learn more about it? Tell me why I'm an idiot.

https://redd.it/g1h41y
@r_devops

What would you invest in learning, Openshift, Splunk , Infoblox?

I've doing K8S tools for the last 3 years and I am not sure which of those 3 ( openshift, splunk or infoblox) would add more value to my Skillset. At this point I don't want invest more effort in learning or mastering K8S and just want to jump into something else.

Openshift . Pros - easier to learn given my k8s exp and the $ rate is above devops rates . Cons - I don't see many jobs requiring it.

Splunk . Pros - very valuable $$$$ niche skill . Cons - Takes a lot in time/$$$$ wise to learn it .

Infoblox - I had some experience in the past , and I've seen a couple of roles in the market paying above market rate for this skillset .

What do you think ?

https://redd.it/g1c91b
@r_devops

Infrastructure Automation with Terraform and Atlantis

If anyone out there is using Jenkins to automate Terraform , Atlantis is worth taking a look. I have been using Atlantis for quite sometime now and love it. Actively using to spin up production infrastructure. Here is my medium blog if anyone is interested
https://tech.boxed.com/infrastructure-automation-with-terraform-0-12-and-atlantis-1a5725ee247e

https://redd.it/g1ftgh
@r_devops

WTF is wrong with full remote positions?

I eventually found a local office job that is currently 100% remote due to COVID, I'll go back to office after all this and will be fine.

But I'd like to discuss weird remote job market I had recent experience with.

About half a year ago I decided that it's damn cool to have fully remote position, primarily because it's possible to live in a cheap place, commute to next room and work in pajamas. Then I started my search, and it was pretty bad.

First - amazingly few positions are posted. There are more offline positions here, in Greater Detroit (that is not Bay Area guys), than remote positions in whole US.

Second - terrible conversion rate. I was getting around 1 tech interview for every 5-10 applications for traditional jobs. For online it was like 1 tech interview for 30-50 applications. It's completely crazy.

I have 15+ years of experience in system admin, both win and linux, last 4 is in DevOps/Cloud - theoretically my skills are in demand, that's not the problem I guess.

What's your experience?

https://redd.it/g1i7lo
@r_devops

Reusing Serverless Environments in your CI Pipeline to Reduce Serverless Integration Test Runtime from 40 minutes to 7

Recently my team managed to reduce the time taken to run Integration Tests on our Serverless microservice via CI from 40 minutes to 7 minutes!

We used another Serverless microservice to manage the re use of Serverless envrionments and CircleCI’s parallelisation tools. Check out my article if you’re interested!

https://medium.com/serverless-transformation/reducing-your-serverless-integration-test-runtime-on-ci-from-40-minutes-to-7-a8982a47b655

https://redd.it/g19fdg
@r_devops