How do you juggle multiple API versions in testing?

I’m running into headaches when dealing with multiple API versions across environments (staging vs production vs legacy). Some tools now let you import/export data by version and even configure different security schemes.

Do most teams here handle versioning in their gateway setup, or directly inside their testing/debugging tool?

https://redd.it/1nnfhfx
@r_devops

How to handle this dedicated vm scenario ?

Pipeline runs and fails because it doesn't have the required tools installed in the agent

All agents are ephemeral - fire and forget

So I need a statefull dedicated agent which has these required tools installed in it

Required tools = Unity software

Is it good idea to get a dedicated vm and have these tools installed so that I can use that ?

Want to hear from experts if there's something I got be careful about

https://redd.it/1nnhr8c
@r_devops

Docker projects for beginners

#

I have recently been hired in a tech company as an intern and I have spent the past half month reading tutorials about docker. In your opinion what are some good projects in order to learn those technologies? I have done some exercises in KodeKloud but the fact that the answer is implied in the text and not always hidden behind a button makes me think that I don't actually solve the problem myself.

https://redd.it/1nnhm5o
@r_devops

How do you integrate compliance checks into your CI/CD pipeline?

Trying to shift compliance left. We want to automate evidence gathering for certain controls (e.g., ensuring a cloud config is compliant at deploy time). Does anyone hook their GRC or compliance tool into their pipeline? What tools are even API-friendly enough for this

https://redd.it/1nngzgl
@r_devops

Can I become a DevOps Engineer if my background is only IT Support (hardware & OS installation)?

Hey everyone,
I’m currently working in IT support, mainly handling hardware and OS installation/troubleshooting. I don’t have much experience in coding or advanced system administration yet, but I really want to transition into DevOps engineering.
Is it possible for someone like me to make this career shift?
If yes:
What skills should I start learning first?
Which tools/technologies are must-know for DevOps beginners?
Are there free/affordable resources or roadmaps you recommend?
How much time (roughly) would it take to become job-ready in DevOps?
I’m motivated and willing to put in consistent effort. Just need some guidance on the right path so I don’t waste time.
Thanks in advance! 🙏

https://redd.it/1nnj904
@r_devops

DevOps folks in India: Do you really have to sacrifice sleep and work life balance for career growth?

I need some real talk from people already in DevOps. I currently work as a server & network analyst with 3 years of experience, but I’m looking to transition into DevOps.

Here’s my worry: in my current company, rotational shifts and night shifts are draining me.

When I look at DevOps openings, I often notice irregular or rotational shift requirements and I don’t want to jump from one fire into another.

So I need your help:

1) How common are rotational/night shifts in DevOps roles in India?

2) Are they unavoidable, or can I aim for companies/teams where DevOps mostly works general shift?

3) For those of you already in shifts, how do you manage it and what’s your plan to eventually get out?

Any advice, personal stories, or even harsh truths are welcome 🙏


https://redd.it/1nnkpfo
@r_devops

Proxmox-GitOps: Extensible IaC Container Automation for Proxmox

I want to share the container automation project Proxmox-GitOps — an extensible, self-bootstrapping GitOps environment for Proxmox.

It is now aligned with current Proxmox 9.0 and Debian Trixie - which is used for containers base configuration per default. Therefore I’d like to introduce it for anyone interested in a Homelab-as-Code starting point 🙂

GitHub: https://github.com/stevius10/Proxmox-GitOps

It implements a self-sufficient, extensible CI/CD environment for provisioning, configuring, and orchestrating Linux Containers (LXC) within Proxmox VE. Leveraging an Infrastructure-as-Code (IaC) approach, it manages the entire container lifecycle—bootstrapping, deployment, configuration, and validation—through version-controlled automation.

- One-command bootstrap: deploy to Docker, Docker deploy to Proxmox

- Ansible, Chef (Cinc), Ruby

- Consistent container base configuration: default app/config users, automated key management, tooling — deterministic, idempotent setup

- Application-logic container repositories: app logic lives in each container repo; shared libraries, pipelines and integration come by convention

- Monorepository with recursively referenced submodules: runtime-modularized, suitable for VCS mirrors, automatically extended by libs

Pipeline concept:

- GitOps environment runs identically in a container; pushing the codebase (monorepo + container libs as submodules) into CI/CD

- This triggers the pipeline from within itself after accepting pull requests: each container applies the same processed pipelines, enforces desired state, and updates references

- Provisioning uses Ansible via the Proxmox API; configuration inside containers is handled by Chef/Cinc cookbooks

- Shared configuration automatically propagates

- Containers integrate seamlessly by following the same predefined pipelines and conventions — at container level and inside the monorepository

- The control plane is built on the same base it uses for the containers, so verifying its own foundation implies a verified container base — a reproducible and adaptable starting point for container automation

It’s still under development, so there may be rough edges — feedback, experiences, or just a thought are more than welcome!

https://redd.it/1nnl9l5
@r_devops

Advice desired... A million unmerged branches!

Okay, not a million. But a lot. In short, the situation is that I've been asked to take a look at the pipeline for our repos and streamline our processes and procedures, as well as put boundaries in place.

It seems that many, many people have not been merging their branches, and a lot of that code is in use right now. Can anyone offer good advice on how to handle reconciling all these branches and some good boundaries and processes to prevent that in the future?

I'd really appreciate any insight anyone has that's been through this before!

https://redd.it/1nnooay
@r_devops

From coding guidelines in docs to automated enforcement: Spotless + Checkstyle as a step toward CI/CD

When I joined a new company, I inherited a large Spring Boot monolith with 15 developers. Coding guidelines existed but only in docs.
Reviews were filled with nitpicks, formatting wars, and “your IDE vs my IDE” debates.

I was tasked to first enforce coding guidelines before moving on to CI/CD. I ended up using:

* **Spotless** for formatting (auto-applied at compile)
* **Checkstyle** for rules (line length, Javadoc, imports, etc.)
* **Optional pre-commit hooks** for faster feedback across Mac & Windows

This article is my write-up of that journey sharing configs, lessons, and common gotchas for mixed-OS teams.

Link -> [https://medium.com/stackademic/how-i-enforced-coding-guidelines-on-a-15-dev-spring-boot-monolith-using-spotless-checkstyle-and-d8ca49caca2c?sk=7eefeaf915171e931dbe2ed25363526b](https://medium.com/stackademic/how-i-enforced-coding-guidelines-on-a-15-dev-spring-boot-monolith-using-spotless-checkstyle-and-d8ca49caca2c?sk=7eefeaf915171e931dbe2ed25363526b)

Would love feedback on how do you enforce guidelines in your teams?

https://redd.it/1nnqtq3
@r_devops

Secure Server Access with Teleport

I just published a guide on how to set up Teleport using Docker on EC2 to provide secure server access across Linux, Windows, Kubernetes, and cloud resources.

I made this because I was tired of dealing with shared SSH keys, forgotten credentials, and messy audit trails. If you’re managing multiple servers, clusters or DBs, this might save you painful hours (and headaches).

Read it here: https://medium.com/@prateekjain.dev/secure-server-access-with-teleport-cf9e55bfb977?sk=aca19937704b4fafcfffd952caa1fc01

https://redd.it/1nno2o8
@r_devops

Octofer: a Rust framework for building GitHub Apss/Bots with ease!

Hi all,

In the last few months I’ve been working on Octofer, a framework for building GitHub Apps in Rust.

It’s inspired by Probot and uses octocrab under the hood.

Right now, it supports common events (issues, PRs, comments, etc.), typed payloads, and simple config via env vars. It’s still under active development, so feedback and contributions are very welcome!

It makes building bots/apps really easy, allowing you to introduce features and automation in little time.

Would love to hear what you think and what features you’d like to see!

P.S. its a simple project but I really enjoyed the process of building it!

https://github.com/AbelHristodor/octofer

https://redd.it/1nntlof
@r_devops

How do startups (and big companies) handle dependency/security updates?

Hey folks,

I’m sort of new to full stack development and running into some confusion with handling dependencies at my SaaS startup. Right now I’ve got Dependabot set up, and I usually merge updates every couple of weeks. But I’m not sure if this is really best practice.

Couple of questions I’d love advice on:

• How do startups typically manage dependency updates and security risks? Do you just patch as they come in, or batch them on a schedule?
• How do larger enterprises do this at scale? I imagine they have dedicated teams or processes, but I’d love to understand what’s realistic as a smaller company.
• What do you do when a dependency has a security vulnerability but updating it breaks other packages that rely on the older version? Do you pin it and accept the risk, fork it, patch it, or something else?

I feel like I’m either over-updating (lots of noise and breakage) or under-updating (leaving security holes open). Curious to hear how others approach this balance.

Thanks!

https://redd.it/1nnt2os
@r_devops

Azure CDN (Classic) deprecation

Had anyone else had just the worst experience with the CDN (Classic) migration?

To combat this migration, I had to update our ARM templates to deploy three different use cases tied to routing. First, a migrated custom domain, second a new CDN Custom domain and third, a CDN just using endpoints. I successfully did this and tested 20 different test cases before 08/15. I was blocked from Microsoft from using the built-in migration tool so we had to migrate after the cut off of new custom domain and CDN deployments.

Now that I've migrated our development environments, im facing a plethora of issues, inability to redeployment a custom domain, the profile itself (because it already exists or is in a region as opposed to global), and finally configuring routes.

The documentation seems so incomplete and support engineers don't seem capable of assisting with issues.

I'm using ARM templates because thats what works, but on the side, rebuilding everything with Terraform.

This whole thing has been a PITA and I've finally been able to get buy in from management to accept downtime so we can redeployment the profiles with new custom domains. It's been such a struggle. I cant way to be done with this.

Side Note: I keep receiving recruiter emails, specifically to work in the Azure Front Door department within the Networking team. How bad did they plan this?

https://redd.it/1nnwz80
@r_devops

Solo project making my head swim. What’s everybody working on?

I’d say I’m well in the weeds at this point. Got a backend VM running a Linux ISO and docker, frontend Electron app and client (browser) that all works immaculately in dev. My fun started when I tried to hoist it all centrally using Cloudflare and proxy the VM to the internet with cloudflared. Packer kept exploding so I’m just using vagrant to spare myself that headache for now.

Recently implemented OpenBao to try to get a CIDC and KMS going for a central auth. On top of CI/CD, of course. OpenBao persists locally on the VM and checks centrally, in theory, but keeps exploding at the moment. Separate repo made to manage those secrets. Now I’m working on a separate repo to manage all of this mess to just try and keep myself sane, while also managing the cert.pem and log distribution and health/telemetry.

I’ll figure it out but the whole “thinking” thing is giving me a mental blowout. What’s everyone else working on?

https://redd.it/1nnxn3n
@r_devops

🚀 Built a Multi-Container Todo App with Docker, Terraform, Ansible & GitHub Actions

Hey folks, I just finished a project from [roadmap.sh](https://roadmap.sh/projects/multi-container-service),

🐳 **Stack & Tools**

* Node.js + Express API
* MongoDB (Mongoose ODM)
* Docker & Docker Compose
* Terraform (provisioned VM on Google Cloud)
* Ansible (server setup + deployment)
* GitHub Actions (CI/CD pipeline)

📌 **What it does**
A simple unauthenticated **Todo API** with CRUD:

* `GET /todos` → list all
* `POST /todos` → create
* `GET /todos/:id` → read one
* `PUT /todos/:id` → update
* `DELETE /todos/:id` → delete

Todos are stored in MongoDB with persistent volumes.

🏗 **How I built it**

1. Started local with **Docker Compose** (API + MongoDB containers).
2. Used **Terraform** to spin up a VM on Google Cloud.
3. Automated setup with **Ansible** (Docker, Docker Compose, running containers).
4. Setup **CI/CD with GitHub Actions** → on push, build & push Docker image, redeploy via Ansible.
5. App accessible through the **external IP** of the VM in the browser.

✅ **Key takeaways**

* Learned how to connect multi-container apps with Docker Compose.
* Got comfortable with Terraform for infra provisioning.
* Automated repetitive tasks with Ansible.
* Built a working CI/CD pipeline from GitHub to cloud.

💡 **Next step / Bonus**
Planning to add **Nginx reverse proxy** \+ a custom domain instead of raw IP.

repo :https://github.com/yanou16/Multi-Container-Application


https://redd.it/1nnvgkp
@r_devops

SMS provider for system alerts + OTPs

I manage system notifications and OTP delivery for my company. Twilio has been our go-to, but latency and support have been issues. Looking for an alternative that gives fast delivery, solid logs, and predictable uptime.

https://redd.it/1no0amj
@r_devops

How would you handle copying prod databases to dev along with auth and other dependencies?

Our devs are requesting the ability to clone pod databases to a dev db for debugging and testing. Current dev environment shares a db and keycloak tenant with staging. I’m not sure the best way to satisfy this request.

Basically they want to be able to clone aspects of prod to a new dev db. They’re also requesting a separate keycloak for dev too. Where it gets challenging is our various integrations like Google and Xero. I don’t know how this could work and I’m not even sure what questions to ask.

Anyone have any thoughts here?

https://redd.it/1no58e6
@r_devops

Newbie Project

Hello All,

I am rather early into my own DevOps journey. A coworker gifted me a Lenovo Thinkcentre M75q-1. I plan to upgrade the RAM to 32gb DDR4.

I would like to use it to get hands-on experience. I was curious what might be some good first projects to try that I could iterate off of and grow it into more complex projects?

Thanks for any and all suggestions.

https://redd.it/1no6zgr
@r_devops

Stuck choosing between “too much responsibility” and “not enough growth”

I have two offers, and they feel completely different. I had a vague sense of this while preparing for the interviews. Although the noscript is the same, the actual work content and psychological pressure are very different.
At a startup, every conversation feels like a test to see if I can survive as the sole dev person. During my preparation, I constantly used leecode to review, practiced mock system design problems with beyz coding assistant, and even had gpt as my interview coach for mock interviews. cuz their information is very difficult to find online. Sure enough, they asked the same question: "If the cluster goes down and you're left alone, what would you do?"

At a large company, the atmosphere is different. Interviews focus on structured processes and teamwork. Even the interview question I found on the IQB interview question bank matched their question: "Tell me about a time you worked with a cross-functional team." Predictable, stable... but the opportunities for advancement seem slim.

So now I'm torn. Startups are unstable, but they can accelerate my learning process. Large companies won't suddenly collapse and go bankrupt. With mentors available, it can take years to master even a single part of devops. There's also the risk of layoffs. Any advice?

https://redd.it/1no8n27
@r_devops

Setting up fresh infra for my new freelancing work - is my strategy solid?

I’m setting up my new software development freelancing "company", and I’m currently in the planning phase. Would love some input from people who’ve done this before.

# Current Setup

I have two domains + two VPS/root servers:

|Domain|Server|Nickname|Usage|
|:-|:-|:-|:-|
||
|**myCompany.com**|4c AMD EPYC 9645, 8 GB DDR5 ECC, 256 GB NVMe SSD, 1 IPv4)|BaseFort01|Admin / Control / Company Website|
|**myCompany.cloud**|8c AMD EPYC 9645, 16 GB DDR5 ECC, 512 GB NVMe SSD, 1 IPv4)|BaseCamp01|Client SaaS platform|

I plan to add more BaseForts later (maybe 1 more, mainly for HA).
For BaseCamps, I’ll map subdomains for each client app. Some clients might have multiple apps, so scaling strategy is a question for me. Current subdomain strategy looks like this - app1.client1.mycompany.cloud, app2.client1.mycompany.cloud, app1.client2.mycompany.cloud etc..

# Planned Approach

1. BaseFort servers → Admin/control plane, company website, HA setup later.

2. BaseCamps → Client SaaS apps. Example:

>

# Questions

1. Does this sound like a reasonable starting strategy?
2. How would professionals approach this?
3. What all do I need to consider to use Dokploy?

Would really appreciate any pointers or criticism on my setup before I go too deep into it.

https://redd.it/1no9o7b
@r_devops

How do you manage ADO pull requests directly in VS Code?

Our team works with Azure DevOps Repos, and the constant context switching between the browser and VS Code for PR reviews is killing productivity. It feels clunky to review code in one UI while actually coding in another.

What would really help is being able to:
- Create new PRs right after pushing a branch
- List and checkout branches for review
- Block commits to restricted branches
- Approve/Reject/Request changes directly in-editor
- Add comments, reply, resolve threads
- Even make inline code suggestions with full IntelliSense and linter support

Basically, reviewing in VS Code itself instead of juggling tabs.

So my question is that Has anyone found a good way to handle PRs for Azure DevOps repos inside VS Code? Is there an extension, a noscript, or even a hacky workflow that makes this easier? Or is everyone just living with the browser workflow?

https://redd.it/1nobne3
@r_devops