Hi, is there here anyone configured gitlab cicd pipelines for OCI terraform ?

I am facing issues and need help from someone who did it already for OCI (Oracle Cloud)

https://redd.it/1ouamkg
@r_devops

Coroot 1.17 - FOSS, self-hosted, eBPF-powered observability now has multi-cluster support

For new users: Coroot is an Apache 2.0 open source observability tool designed to help developers quickly find and resolve the root cause of incidents. With eBPF, the Coroot node agent automatically visualizes logs, metrics, profiles, spans, traces, a map of your services, and suggests tips on reducing cloud costs. Compatible with Prometheus, Clickhouse, VictoriaMetrics, OTEL, and all your other favourite FOSS usual suspects.

We’ve had a couple major updates recently to include multi-cluster and OTEL/gRPC support. A multi-cluster Coroot project can help simplify and unify monitoring for applications deployed across multiple kubernetes clusters, regions, or data centers (without duplicating ingestion pipelines.) Additionally, OTEL/gRPC compatibility can help make the tool more efficient for users who depend on high-volume data transfers.

Feedback is always welcome to help improve open observability for everyone, so give us a nudge with any bug reports or questions.

https://redd.it/1ouf3l5
@r_devops

65% of Startups from Forbes AI 50 Leaked Secrets on GitHub

https://www.wiz.io/blog/forbes-ai-50-leaking-secrets

https://redd.it/1ouii3y
@r_devops

I Have an idea to automate parts of the CI/CD process. Need some feedback

Hi all,

I’m currently an intern on a DevOps team, and my company uses GitLab as our main git service. One challenge we keep running into is that every team handles their CI/CD pipelines differently, which becomes a huge pain when it’s time to integrate our products.

For example, one team might handle versioning, building, and artifact upload entirely inside a PowerShell noscript and just call that from their pipeline. Another team might use GitLab’s built-in CI/CD components. Some don’t even have a pipeline; they run everything manually with bash noscripts.

The result is a mix of inconsistent workflows, broken integrations, and duplicated effort that could easily be avoided if everyone followed some kind of standard.

I’m wondering: does anyone else see this problem at their org? The company I'm at is pretty big, but not a full on tech company per say so our engineering standards are probably lower than a FAANG+ company.

I’ve been thinking about building a tool that makes the pipeline development part of CI/CD more “plug-and-play”. something that helps teams generate, validate, and standardize pipelines with best-practice templates instead of starting from scratch every time.

Would love to hear if others run into this or if tools like this already exist.

ps.. gonna make this post on a few different subs to get maximum insight

https://redd.it/1ouhuko
@r_devops

Anyone else drowning in static-analysis false positives?

We’ve been using multiple linters and static tools for years. They find everything from unused imports to possible null dereference, but 90% of it isn’t real. Devs end up ignoring the reports, which defeats the point. Is there any modern tool that actually prioritizes meaningful issues?

https://redd.it/1ouj5wn
@r_devops

Send mail with Kubernetes

Hey folks 👋

It's been on my list to learn more about Kubernetes operators by building one from scratch. So I came up with this project because I thought it would be both hilarious and potentially useful to automate my Christmas cards with pure YAML. Maybe some of you may have some interesting use cases that this solves. Here's an example spec for the CRD that the comes with the operator to save you a click.

Project link/docs: [https://github.com/circa10a/postk8s](https://github.com/circa10a/postk8s)

apiVersion: mailform.circa10a.github.io/v1alpha1
kind: Mail
metadata:
name: mail-sample
annotations:
# Optionally skip cancelling orders on delete
mailform.circa10a.github.io/skip-cancellation-on-delete: false
spec:
message: "Hello, this is a test mail sent via PostK8s!"
service: USPS_STANDARD
url: https://pdfobject.com/pdf/sample.pdf
from:
address1: 123 Sender St
address2: Suite 100
city: Senderville
country: US
name: Sender Name
organization: Acme Sender
postcode: "94016"
state: CA
to:
address1: 456 Recipient Ave
address2: Apt 4B
city: Receivertown
country: US
name: Recipient Name
organization: Acme Recipient
postcode: "10001"
state: NY

https://redd.it/1oup1ln
@r_devops

Event based monitoring tool synchronization with ServiceNow

Hey All,

Has anybody did a full no operator based synchronization of the events appearing on the monitoring dashboard to ServiceNow tickets.

where events are addressed with ticket creation, notification to the concerned teams, some initial handlers performed ? kind of workflow.

Want to use native tools nothing out of the box solution.

Any ideas will be appreciated. Thanks

https://redd.it/1oupw7a
@r_devops

Sitio para probar APIs gratuito

Dejo un sitio para probar APIs completamente gratuito.

https://apitest.ar/

Estilo Postman, podés probar los métodos, Headers, parámetros, etc

https://redd.it/1our18e
@r_devops

Cake v6.0.0 Released - .NET 10 Support & New Cake.Sdk Runner 🚀

Just released Cake v6.0.0! 🚀🍰

What's New:

✨ .NET 10 & C# 14 support
🚀 New Cake.Sdk runner
📦 Cake.Template for getting started quickly with Cake.Sdk
🔧 Addin recommended version updated to 6.0.0

The new Cake.Sdk runner brings the modern "dotnet run app.cs" experience to Cake, working with .NET 8, 9, and 10. Get started quickly with dotnet new install Cake.Template and then dotnet new cakefile.

Full details: cakebuild.net/blog/2025/11/cake-v6.0.0-released

https://redd.it/1oupa99
@r_devops

Open Redirect Vulnerabilities: The Gateway to Phishing Paradise 🚪

https://instatunnel.my/blog/open-redirect-vulnerabilities-the-gateway-to-phishing-paradise

https://redd.it/1ouuvoy
@r_devops

I built an on-prem K8s cluster on Proxmox (Terraform + Ansible + RKE2) and I want to hear your opinions on my project.

Hey r/devops,

I'm a sophomore in Computer Science, but I'm finding I like this whole DevOps thing way more than my actual classes. I've been playing around with Docker and self-hosting stuff since high school. When I was looking at roadmap.sh, the DevOps path just... clicked with all the stuff I was already doing.

So, to really practice the tools on that roadmap, I just finished a big personal project, provision and bootstrap a RKE2 Kubernetes cluster on Proxmox. I'd really appreciate your opinion on it, and I really need some career advice.

Here's the rundown of the project:

Terraform: Spins up 12 VMs (6 dev, 6 prod) on my Proxmox homelab. This was my first time really digging into IaC: I built reusable modules, separated my dev/prod env variables, used cloud-init for setup, and set up remote state on a separate Minio server.
Bash: I wrote a simple bash noscript that parses Terraform's JSON output to auto-generate the Ansible inventory.ini file.
Ansible: Then Ansible takes that inventory and bootstrap a full, highly-available RKE2 cluster from scratch.
kube-vip for the control-plane HA and for LoadBalancer services.
Traefik as the ingress controller.
cert-manager for automatic SSL.
Longhorn for distributed persistent storage.
ArgoCD to get the cluster ready for a GitOps workflow.

Additionally, I also looking for career advices. I love doing automation, building platforms, and monitoring it. But when I look for internships, I see "Software Engineer Intern" or "IT Help Desk." I never see "DevOps Intern." It feels like the role doesn't exist for students.

This has me wondering...

Am I in the wrong major? Should I switch from Computer Science to an IT program? I couldn't even sign up Computer Networks on the next semester because there isn't anyone to teach on my major, and I couldn't sign up the course for IT as a CS student in my school. I also don't mind doing programming. The only thing I am afraid is that if I stay in CS, it will be harder for me to land an internship as a Software Engineer since I don't spend time doing LeetCode, learning languages like my peer do.
Is the only way into this field to start as a SysAdmin for a few years and then try to move into a DevOps role?

I'm just kinda lost on what the path is supposed to look like for someone my age who wants to get into this. Also as an international student in US, I know the market is more and more competitive right now, so I want to focus on one path and then learn all the skills required as soon as possible.

Here's the repo if you want to see the code: https://github.com/phuchoang2603/kubernetes-proxmox

Thanks for any advice.

https://redd.it/1ouw55p
@r_devops

DevOps Engineer (1 Year Experience) | AWS, Azure, Docker, GitHub Actions | Open to Remote or On-Site Roles

Hey everyone 👋

I’m a DevOps Engineer with about a year of hands-on experience, and I’m currently exploring new opportunities — open to both remote and on-site roles.

Over the past year, I’ve been working on cloud infrastructure, CI/CD automation, and containerized deployments across AWS and Azure environments. I’m passionate about improving developer workflows, building reliable systems, and automating everything I can.

Here’s a quick overview of my experience and skill set:

🌩️ Cloud Platforms: AWS (EC2, S3, IAM, Lambda, ECS), Azure (VMs, Storage, Azure DevOps)
⚙️ CI/CD Tools: GitHub Actions, Jenkins, Azure Pipelines
🐳 Containers & Orchestration: Docker, Kubernetes (EKS, AKS), Helm
🏗️ Infrastructure as Code: Terraform, CloudFormation
🧠 Monitoring & Logging: Prometheus, Grafana, CloudWatch, ELK Stack
💬 Scripting & Automation: Bash, Python, PowerShell
🔒 Version Control & Collaboration: Git, GitHub, Bitbucket
🧩 Other Tools & Concepts: Linux administration, Networking basics, Agile/Scrum, DevSecOps principles

I really enjoy problem-solving, optimizing CI/CD pipelines, and learning new cloud-native technologies. I’m currently expanding my knowledge in Ansible, ArgoCD, and observability tools to strengthen my automation and monitoring skills.

If anyone knows of teams hiring or looking for a motivated DevOps Engineer, I’d love to connect. Feel free to message me directly or drop a comment here.

Thanks for reading, and happy automating! 🚀

https://redd.it/1ouxaq5
@r_devops

Has anyone automated parts of their PR reviews with AI tools?

We’ve been looking for ways to reduce the review backlog in our CI/CD flow. Recently we trialed cubic and coderabbit to catch smaller issues before human reviewers step in.

I’m still wondering if they actually improve overall throughput or just add more noise.

Anyone here successfully built AI review tools into their DevOps pipelines? How did it go in practice?

https://redd.it/1ouwhpj
@r_devops

From Dba to devops/SRE/Platform Engineering

I work as a dba having 10 years of experience based in Pune. For last one year I have been preparing to make a transition into devops/SRE/Platform engineering. I've obtained AWS SA 03 certificate and trained rigorously on devops concept like Git, jenkins, docker, k8, helm, Gitops, python, AWS and few more things.

It's been more than a year preparing for this side by side. Now that I have almost covered everything, I'm unsure of how to make transition as I don't have proper experience in this field.

I need your guidance to under the further roadmap to make a successful transition.

https://redd.it/1ouyv8l
@r_devops

Does this MIT study on AI coding tools match what you see in prod?

MIT ran a study on developers using AI code assistants.

The takeaway (for me at least):

– AI makes it faster to get “some” answer

– quality and correctness can go down

– people feel more confident in those answers than they should

There’s a good walkthrough of the study here:

https://www.youtube.com/watch?v=Zsh6VgcYCdI

As someone who thinks a lot about reliability, this feels like a bad mix:

faster changes, more subtle mistakes, more confidence.

For those of you in DevOps / SRE roles:

– have you seen any change in incident patterns as your teams started using AI tools?

– are you doing anything different for impact analysis or change review now?

– or is it basically the same process as before, just with more “AI helped me write this” in the PR denoscription?

Very curious how this looks from the people who sit closest to prod.

https://redd.it/1ov0bnr
@r_devops

I want to start my career in Cloud + DevOps… need some suggestions 🙏

Hi everyone 👋,
I’m 23 and I know some basic Python. I’m planning to start my career in Cloud + DevOps, but I’m a bit confused on where and how to begin.

Can you please suggest:

How to start learning Cloud/DevOps (from basics)

Any good resources, YouTube channels, or certifications that actually help to get a decent job

Also, if there’s any other tech stack I should look into for a quicker job entry


This is my career starting point, so any genuine suggestions or guidance from your experience will really help

https://redd.it/1ov0wqk
@r_devops

How are DevOps teams keeping API documentation up to date in 2025?

It feels like every team I talk to still struggles with this.
Docs get out of sync the moment new endpoints are deployed, and half the time no one remembers to update the spec until something breaks.

We’ve been testing a few approaches:
Auto-generating docs from OpenAPI specs or annotations
- Syncing API tests and docs from the same source
- Integrating doc updates directly into CI/CD pipelines

Some of the tools we’ve explored so far include:
Swagger, Redocly, Stoplight, DeveloperHub, Apidog, Docusaurus, ReadMe, and Slate.
Each takes a different approach to collaboration, versioning, and automation.

Curious what’s working for your teams
Are you automating API documentation updates, or still managing them manually through version control?

https://redd.it/1ov1ohe
@r_devops

Best content management system decision for a small business website redesign

Our company website was built 8 years ago by a developer who's no longer with us and it's a mess of custom code that nobody knows how to update. We're redesigning from scratch and I'm trying to figure out what CMS to use. We need about 30-40 pages, a blog, contact forms, and maybe the ability to add a simple product catalog in the future. No ecommerce checkout needed right now. Budget is flexible but I don't want to pay thousands in hosting and maintenance annually.



https://redd.it/1ov0tr4
@r_devops

QA -> DevOps transition advices

Hi guys,

I am a QA Automation (3 years total xp).
I work on a networking and linux based project. (2 years xp here).

Currently I use python and robot for test automation, but I also have the opportunity to work with docker, ansible, wireshark and jenkins for CI. Our infra is on prem. Here I learned that I like to work with linux, networking and infrastructure more than I enjoy QA Automation.

Also, I built a homelab with opnsense and proxmox. On the honelab I managed to work with proxmox, docker, vms, ansible, terraform, jenkins, k3s, grafana, prometheus, dns server, nginx and NAS.

What should I focus on? I tried to apply for DevOps/Infra jobs but without luck, I didn't get any interviews.

If there are people among you who have made a transition like this, how did they do it?

Thank you!

https://redd.it/1ov3yw7
@r_devops

We’re exploring pipelines as code (GitOps). Any gotchas?

Thinking of moving CI/CD to pipelines-as-code with GitOps-style flows (app + infra changes via PRs, declarative configs, reviews, auto-promotions). What pitfalls should we watch for: repo sprawl/monorepo vs polyrepo, secrets/ephemeral creds, drift between pipeline runner and cluster, flaky approvals, environment promotion hygiene, or rollback complexity? Bonus tips on tooling (Argo CD/Flux + Tekton/GHA), handling per-env overlays, and keeping pipelines testable/versioned without slowing teams down.



https://redd.it/1ov64u3
@r_devops

what's cryptographic attestation for AI? security team is asking for it now

Security team came back from an audit saying we need "cryptographic attestation" for our ML pipeline and I'm supposed to implement it but honestly don't know where to start.

I did some digging and got hit with walls of text about hardware keys, secure enclaves, and TPM chips, way over my head. Is this actually something I can implement or is this a "call in expensive consultants" situation?

What does it even do that regular monitoring and access logs don't already do? Need to go back to security with either a plan or an explanation of why we can't do it.

Any devops folks dealt with this before?

https://redd.it/1ov7kix
@r_devops