Open-Source ACME server - 100% CertBot compatible - One binary

Hi everyone!

We have developed an Acme server for our use case. It is written in Rust, which means you only need to work with a single binary. In file mode, our test is 100% compatible with the existing Certbot solution.

For more details, visit: https://github.com/arxignis/ssl-storage

**Summary:**

✅ Written in Rust

✅ Fully compatible with Certbot

✅ Utilizes a Redis backend for storage

✅ Supports distributed mode (with Redis)

✅ 100% compatible with CertBot

✅ Redis backend as storage mode

✅ Distributed mode (with Redis)



https://redd.it/1othpt8
@r_devops

Browsing helm chart from terminal - LazyHelm


Hi community!

Sometimes, when I deploy or test some application, I prefer looking into helm charts using directly the terminal and I found using helm commands alone can get a bit tedious, so I tried to created something to make it easier.

So I tried to create (with ai helps) something that makes the process easier, LazyHelm.

It’s a small personal project I built to make my own workflow smoother, but I hope it might help someone else too.

What it does:

Organized menu system to browse local repositories or search Artifact Hub
Browse your configured Helm repos and discover all available charts
Find charts across Artifact Hub directly from the terminal
Add, remove, and update repository indexes with simple keystrokes
Inspect chart values with syntax highlighting and diff between versions
Modify values in your preferred editor ($EDITOR) with YAML validation
Fuzzy search through repositories, charts, and values
Copy YAML paths to clipboard or export values to files

All in your terminal. No need to remember helm commands or manually fetch values.

Installation via Homebrew:

You can install LazyHelm using Homebrew:

- brew install alessandropitocchi/lazyhelm/lazyhelm

GitHub: https://github.com/alessandropitocchi/lazyhelm

Any feedback, suggestions, or feature requests are very welcome!

Thanks for reading!




https://redd.it/1otopeq
@r_devops

QA team was cut in half, facing the same release pressure. thoughts?

we lost half of our QA team in the last round of budget cuts, but somehow leadership is still expecting us to keep shipping every 2 weeks. I mean manual regression alone takes most of the sprint, not to mention the pain of cross device tests as we're testing across web + android.

the team is already burned out and lacks resources now, higher ups say we can fix this with automation but setting up new frameworks feels like starting a new project and we can't afford to waste any more time experimenting nor do we have the engineering bandwidth now...

has anyone successfully automated testing across devices without hiring more engineers? AI tools? Low-code? we need something good and we need it SOON...

https://redd.it/1otts8b
@r_devops

Moving to a mid level position

Hey all,

So, I've been within the devops/platform engineering space for just under 2 years now. I come from a non tech background but I'm firmly in the tech space now.

But I wanted to understand how can I make that move from junior to mid level engineer? I have a good solid grasp of Terraform, GitLab CI. Some Docker and K8s skills (fairly new for a project on EKS). My main cloud is AWS for the past 3 years. I'm currently also getting involved with some other clouds like oci.

But I feel like I don't have a strong understanding of some basic stuff that an IT or tech guy should have. Networking skills are probably lacking tbh. I'd love to increase my security skills also.

I would love to have someone as a mentor to help guide and advise me through this process.

https://redd.it/1otu4z2
@r_devops

Policy as Code

I recently moved our company’s azure policy away from being manual process through the azure web portal to a pipeline using terraform. It’s working but it’s not great, I’m wondering how others manage their Azure Policy, or AWS scps

https://redd.it/1otyhkh
@r_devops

HTTP Parameter Pollution: Making Servers Disagree on What You Sent 🔀

https://instatunnel.my/blog/http-parameter-pollution-making-servers-disagree-on-what-you-sent

https://redd.it/1otzhyy
@r_devops

Tools Auto tagging

So I found a cool project called Yor by paloalto that does some great tagging automation.

Sadly project looks dead, docs are lacking, and it doesn't support OpenTofu.

Are there any other tools like this out there, that are actively maintained?
Looking for automating, git repo and project tags at a minimum.

https://redd.it/1otxnpf
@r_devops

Tools for solo PMs or very small PM teams?

Working as the only PM at a small startup and most PM tools feel like overkill. What do other solo PMs use that's not overly complicated but still helps stay organized?

https://redd.it/1ou0hwo
@r_devops

We at SigNoz shipped the 100th release of our open-source observability platform

When we started SigNoz, we wanted to build an "open" observability platform:

Open source
Based on OpenTelemetry
Self-host it in your infra if needed

All in one, with transparent pricing that doesn't punish you for actually using your monitoring tool.

v0.100.0 adds:

Span percentiles \- catch performance outliers in your traces without drowning in data
Infrastructure metrics in traces \- correlate app performance with resource usage
Cost meter alerts \- track your observability spend so you're not hit with surprise bills

Full changelog: https://signoz.io/changelog/

We're not trying to replace everything overnight, but if you're tired of vendor lock-in or paying per-host nonsense, might be worth a look :)

GitHub: https://github.com/SigNoz/signoz

https://redd.it/1ou4t81
@r_devops

Kodekloud Black Friday sales

I recall seeing the similar pricing and discount as regular days, am I missing something to apply the discount code for annual sub on this sales?


https://redd.it/1ou5xwl
@r_devops

Do your tools ever slowly stop reflecting what's actually happening?

Something I keep running into is that we set up the perfect board, workflows, dashboards, all of it and then two weeks later it’s already out of sync with reality. The plan and the actual work just start drifting apart. Tickets stay “in progress” when they’re blocked. Priorities shift but the board doesn’t. People share updates in side conversations that never make it back into the system.

It’s not that the tools are bad. We’ve tried Jira, ClickUp, even some of the more visual platforms. They all work at first. The real problem seems to be keeping things up-to-date once things get messy and priorities move. And that’s exactly when the visibility would matter the most.

So I’m wondering, how do you keep your source of truth accurate when the work is constantly changing? Is it the tool? The rituals? The culture?

https://redd.it/1ou6ae5
@r_devops

Offered 6LPA at a 5-year-old startup (3-month notice) — Accept or wait?

hey guys,
I got a full-time DevOps offer after my internship, 6 LPA package(Remote). The only catch is a 3-month notice period .Not getting many interview calls lately, but I’m worried this might limit my growth or make switching tougher later. Do you think it’s better to take it for now and gain some experience, or hold out for something around 7–8 LPA?
Would love to hear what others did in a similar situation.

https://redd.it/1ouaqy1
@r_devops

used ai for monolith to microservices migration. saved maybe 20% on configs, zero help on the actual hard parts

just wrapped up migrating our 80k line monolith to microservices. 5 months with 3 devops + 4 backend devs.

figured id try ai tools since everyones hyping them. mixed bag honestly.

stuff that actually helped:

k8s configs - copilot spit out decent yaml. still had to fix half of it but beat writing from scratch.

ci/cd pipelines - chatgpt gave me basic github actions structure. we added our deploy logic on top.

dockerfiles - claude suggested multi stage builds i hadnt used before. learned something new.

task planning - tried verdent and cursor for breaking down the migration phases. cursor gave me a list of steps but verdent actually showed dependencies between tasks and what order made sense. like it caught that we needed to set up the message queue before splitting the order service. helped us not miss steps for the complex services.

terraform modules - copilot again. generated basic module structure.

stuff that was useless:

service boundaries - ai suggested some boundaries based on data models. we obviously knew better but still spent 3 weeks with the team figuring out actual domain boundaries based on business logic.

data migration - kept suggesting saga pattern but didnt understand our constraints with payment processing. ended up doing event sourcing with phased rollout. ai had zero clue about our actual requirements.

observability - generated basic prometheus stuff but didnt understand our actual metrics or what we should alert on.

numbers:

estimated 6 months, took 5

ai probably saved 2-3 weeks on config and planning work

infrastructure costs up 40% tho (ai never mentioned that)

worst part was ai saying to migrate payment service all at once with feature flags. we do high volume transactions, cant risk that. took 3 weeks doing strangler pattern instead.

now we got 12 services, 10 in prod. still migrating the last 2 (reporting and analytics). deploying went from 45min for the whole monolith to 8min for whatever service changed. nice since we usually only touch 1-2 services anyway.

but distributed tracing is a pain now. more stuff to monitor, network latency issues, eventual consistency headaches. ai was zero help with any of that.

so yeah. ai good for boring config stuff. completely useless for actual architecture decisions. distributed systems are still hard.

anyone else migrate recently? what worked for you

https://redd.it/1oub853
@r_devops

Hi, is there here anyone configured gitlab cicd pipelines for OCI terraform ?

I am facing issues and need help from someone who did it already for OCI (Oracle Cloud)

https://redd.it/1ouamkg
@r_devops

Coroot 1.17 - FOSS, self-hosted, eBPF-powered observability now has multi-cluster support

For new users: Coroot is an Apache 2.0 open source observability tool designed to help developers quickly find and resolve the root cause of incidents. With eBPF, the Coroot node agent automatically visualizes logs, metrics, profiles, spans, traces, a map of your services, and suggests tips on reducing cloud costs. Compatible with Prometheus, Clickhouse, VictoriaMetrics, OTEL, and all your other favourite FOSS usual suspects.

We’ve had a couple major updates recently to include multi-cluster and OTEL/gRPC support. A multi-cluster Coroot project can help simplify and unify monitoring for applications deployed across multiple kubernetes clusters, regions, or data centers (without duplicating ingestion pipelines.) Additionally, OTEL/gRPC compatibility can help make the tool more efficient for users who depend on high-volume data transfers.

Feedback is always welcome to help improve open observability for everyone, so give us a nudge with any bug reports or questions.

https://redd.it/1ouf3l5
@r_devops

65% of Startups from Forbes AI 50 Leaked Secrets on GitHub

https://www.wiz.io/blog/forbes-ai-50-leaking-secrets

https://redd.it/1ouii3y
@r_devops

I Have an idea to automate parts of the CI/CD process. Need some feedback

Hi all,

I’m currently an intern on a DevOps team, and my company uses GitLab as our main git service. One challenge we keep running into is that every team handles their CI/CD pipelines differently, which becomes a huge pain when it’s time to integrate our products.

For example, one team might handle versioning, building, and artifact upload entirely inside a PowerShell noscript and just call that from their pipeline. Another team might use GitLab’s built-in CI/CD components. Some don’t even have a pipeline; they run everything manually with bash noscripts.

The result is a mix of inconsistent workflows, broken integrations, and duplicated effort that could easily be avoided if everyone followed some kind of standard.

I’m wondering: does anyone else see this problem at their org? The company I'm at is pretty big, but not a full on tech company per say so our engineering standards are probably lower than a FAANG+ company.

I’ve been thinking about building a tool that makes the pipeline development part of CI/CD more “plug-and-play”. something that helps teams generate, validate, and standardize pipelines with best-practice templates instead of starting from scratch every time.

Would love to hear if others run into this or if tools like this already exist.

ps.. gonna make this post on a few different subs to get maximum insight

https://redd.it/1ouhuko
@r_devops

Anyone else drowning in static-analysis false positives?

We’ve been using multiple linters and static tools for years. They find everything from unused imports to possible null dereference, but 90% of it isn’t real. Devs end up ignoring the reports, which defeats the point. Is there any modern tool that actually prioritizes meaningful issues?

https://redd.it/1ouj5wn
@r_devops

Send mail with Kubernetes

Hey folks 👋

It's been on my list to learn more about Kubernetes operators by building one from scratch. So I came up with this project because I thought it would be both hilarious and potentially useful to automate my Christmas cards with pure YAML. Maybe some of you may have some interesting use cases that this solves. Here's an example spec for the CRD that the comes with the operator to save you a click.

Project link/docs: [https://github.com/circa10a/postk8s](https://github.com/circa10a/postk8s)

apiVersion: mailform.circa10a.github.io/v1alpha1
kind: Mail
metadata:
name: mail-sample
annotations:
# Optionally skip cancelling orders on delete
mailform.circa10a.github.io/skip-cancellation-on-delete: false
spec:
message: "Hello, this is a test mail sent via PostK8s!"
service: USPS_STANDARD
url: https://pdfobject.com/pdf/sample.pdf
from:
address1: 123 Sender St
address2: Suite 100
city: Senderville
country: US
name: Sender Name
organization: Acme Sender
postcode: "94016"
state: CA
to:
address1: 456 Recipient Ave
address2: Apt 4B
city: Receivertown
country: US
name: Recipient Name
organization: Acme Recipient
postcode: "10001"
state: NY

https://redd.it/1oup1ln
@r_devops

Event based monitoring tool synchronization with ServiceNow

Hey All,

Has anybody did a full no operator based synchronization of the events appearing on the monitoring dashboard to ServiceNow tickets.

where events are addressed with ticket creation, notification to the concerned teams, some initial handlers performed ? kind of workflow.

Want to use native tools nothing out of the box solution.

Any ideas will be appreciated. Thanks

https://redd.it/1oupw7a
@r_devops

Sitio para probar APIs gratuito

Dejo un sitio para probar APIs completamente gratuito.

https://apitest.ar/

Estilo Postman, podés probar los métodos, Headers, parámetros, etc

https://redd.it/1our18e
@r_devops