Trying to transition to Devops

Hi all, pretty new here and was hoping on some advice.

Context: By trade I’m currently a civil design engineer was my uni background also being in civil engineering. I’ve been doing it for about 2 years now.

Recently I’ve been really interested in devops and I’m determined to transition my career. I started by learning python and I’m pretty confident as an intermediate level. I’ve also done my first azure certification (AZ-900) to get my fundamentals knowledge right. I have also done some fundamentals in network and I’m pretty confident with my understanding of the osi layers. I’m currently working on getting my admin associate certification (AZ-104). My plan is to the learn terraform afterwards as well as azure devops or GitHub actions (leaning towards GitHub actions). I’m learning powershell slowly on the side right now too.

Outside of my core learning I’ve done some high level research on containerzation and orchestration too knowing I’ll have to focus of those when the time comes.

Just wanted to get thoughts from people that already do it and steer on what would help, thanks.

https://redd.it/1p0mx4b
@r_devops

Ai and Cloud service perception survey for University (Anonymous)

Hello! If any of you lovely people have a couple minutes spare could you please do my survey, its for a marketing campaign I'm making at University. Cheers! https://forms.gle/Gmr4hqbnvRq6LxQz9

https://redd.it/1p0qgka
@r_devops

Is there anything new to learn in 2025?

Aside Kubernetes and Terraform, is there anything to learn as a software developer or DevOps engineer? What would you suggest and why?

https://redd.it/1p0sfmj
@r_devops

hello devops fam, I just passed my AWS SAA and wanna go straight to learning devops

hello fam I just pass my AWS course any recommended yt channel, courses, udemy, etc that you'd recommend to learn about devops? Any recommendations are greatly appreciated

https://redd.it/1p0t19c
@r_devops

What a day...

I spent the last 3 weeks working on a project management pipeline that was heavy in GitHub actions and was set to demo it today in a huge meeting in-front of all of the project managers and developers and started the demo at 3:30 EST this afternoon.

I started off at the user creation command line and created a new user, switched to them and ran a custom SSH and GitHub config wizard I wrote which abstracted away the burdens of dealing with configuring those for PMs.

It worked flawlessly. It ran the check, verified everything was good, pulled repos. It was golden.

I went further into the systems and went to have it send some project management files into a branch to be picked up by CI....

Suddenly git was broken, I was flabberghasted.

It was 3:40, GitHub was down. I sat there like an iditot fudging it for 10 minutes until the meeting moved to another presentation....

It was devastating....

What a day fellas (fellettes), what a day...

https://redd.it/1p0vx27
@r_devops

JWT Algorithm Confusion: Turning RS256 Tokens into HS256 Disasters 🔄

https://instatunnel.my/blog/jwt-algorithm-confusion-turning-rs256-tokens-into-hs256-disasters

https://redd.it/1p0wy52
@r_devops

When does Policy-as-Code become "The Slow Lane" for developers?

Hey r/devops,

I'm working on scaling up our internal developer platform (IDP) and one of the biggest points of friction is how we enforce DevSecOps and compliance policies without killing our velocity. We're trying to shift left, but it feels like we've just shifted all the pipeline friction right onto the developer's lap.

We moved from a few post-merge human approval tollgates to an aggressive Policy-as-Code strategy using tools like Open Policy Agent (OPA) with Rego on every pull request (PR).

The result? Our security posture is fantastic. Our IaC drift is near zero. But our average PR time is up 25%, and the team is starting to view the pipeline as an adversary, not an enabler.

The checks are running: SAST, SCA, Terrascan, custom checks for naming conventions, and resource tagging compliance. All before merge. The problem is that a failed low-severity SAST finding can hold up a critical patch that has a clean functional change.

My burning question to the community:

How are you balancing the enforcement of non-critical-but-mandatory policies (like resource tagging or specific naming conventions) in the pipeline?

1. Do you have an explicit 'fail fast/fail hard' policy only for critical security issues, and let minor compliance issues run through the main pipeline, alerting to a dashboard for follow-up? (i.e., making them blocking in pre-prod but non-blocking in the main CI?)
2. Are you using a separate, performance-optimized "compliance-only" pipeline that runs less frequently, thereby unblocking the core CI/CD flow?

I’m looking for actual tooling or architectural patterns that allow for selective blocking that doesn't rely on us writing custom logic in every single Jenkinsfile/GitHub Action workflow.




https://redd.it/1p0z7dp
@r_devops

Feedback Antigravity IDE for DevOps: Any feedback on integrations & automation?

Anyone tried using Antigravity by Google for DevOps workflows? I noticed the AI can suggest fixes/refactors and the IDE supports agent-like automation (e.g., review agent, code agent). Integration with Gemini 3 and VS Code style interface helped me resurrect a legacy web app.



\- Anyone tested Chrome extension/API or CI/CD integrations?

\- How's the support for Docker, containerized dev flows, pipelines?

\- Is the multi-agent system practical for DevOps use cases?

https://redd.it/1p10asi
@r_devops

I do not know what is going wrong and I am desperate for help. I cannot build an EKS Cluster for whatever reason and I cannot figure it out.

Hello,

I'm attempting to get into DevOps, and I'm trying to build a personal project as a way to learn and understand DevOps stuff.

My goal is to build an EKS cluster via Terraform, set up a prod and dev environment, and then slap in a dumb little website and load balance it.

I have followed EVERY TUTORIAL I COULD FIND and every single time, they give me code. I either download their code or set it up EXACTLY as they do (including the tutorial from Terraform themselves!) and for whatever reason, my ec2 instances NEVER JOIN AS NODES. It always always ALWAYS gives me the issue type of NodeCreationFailure.

I discovered that if I add the vpc-cni addon to the cluster, suddenly it works and everything is happy. So I thought maybe all I have to do in Terraform is specify that it should add the vpc-cni add-on before compute is built in the cluster and it solves everything.

BUT THEN I RAN INTO A NEW PROBLEM. The vpc-cni add-on ALWAYS finds conflicts, even on a new cluster, and will not install. I have tried every single thing I can try in Terraform to make it so that it will run with OVERRIDE on the conflicts, but it is not working. No matter which way I do it, I cannot set it to override, and therefore the vpc-cni addon can never be added to the cluster via Terraform.

I do not know what else I can do. I have tried everything and looked at every possible resource. This is driving me absolutely insane because I cannot find anything anywhere that solves my problem.

Please, if you know how to fix this, or at the very least, if you know how to help me troubleshoot this, please help me. I just want to get this project working so I can get experience. This is the first step and I'm already failing.

https://redd.it/1p11mnv
@r_devops

Is there a way to create jobs that I can trigger with certain parameters in Github Actions?

I've used Jenkins for a while, and sometimes other teams we worked with needed to e.g. onboard a client, and we created a Jenkins job that takes parameters (relating to their details) and runs a certain number of tasks for them to automate the onboarding process.

Is such a thing possible in Github Actions?

I'm thinking of things such as, lets say I want to hook up two VPCs, I just go to the job, I input the ID and CIDR range of VPC 1 and ID and CIDR range of VPC 2, and it automatically makes the API calls to create a Peering Connection between the two and updates their respective tables.


Or I want to whitelist a clients IP in our AWS WAF, so you input the parameter, and it runs the job. As far as I can see, there is no way to feed a parameter into a job in Github Actions?

Any advice would be much appreciated.

https://redd.it/1p131v1
@r_devops

Wrote a blog about things to focus on when starting a new DevEx role

Hey everyone! I've been working in the platform engineering/devex space for about 3 years now. Based on what I've heard from the community and my own experiences I put together a guide of things to focus on in the first 30 days of starting a new role. Hope this helps!

Read here: https://metalbear.com/blog/devex-engineer/

https://redd.it/1p131e9
@r_devops

Quarkus with Buildpacks and OpenShift Builds

Howcto build images for Quarkus apps with Cloud Native Buildpacks locally and in OpenShift: https://piotrminkowski.com/2025/11/19/quarkus-with-buildpacks-and-openshift-builds/

https://redd.it/1p12iih
@r_devops

Anyone else struggling because dev, devops and security never see the same context

I’m trying to understand how people are actually solving this, because in my environment it feels like we have one problem disguised as many:

Developers, DevOps, and Security all look at completely different versions of “reality.”
Developers only see issues if they show up in the build or during code review. Anything outside that path is invisible.
DevOps ends up maintaining integrations for every scanner/security tool under the sun, each with its own policies and YAML changes. Half the effort is just keeping the pipelines consistent.
Security gets flooded with findings that rarely map cleanly back to an owner, a commit, or a service. A good chunk of alerts conflict with each other or miss enough context to be useful.

The root problem seems simple:

no shared visibility across the pipeline, so every team ends up working in its own world.



I’m curious how other teams are handling this.

Are you using a single platform to unify everything? Stitching multiple tools together? Rolling your own visibility layer? Using something like Orca, Wiz, or something completely different?



https://redd.it/1p15v9t
@r_devops

Drowning in tools, saving nothing

Our team is using 5 different tools just to get one feature out the door Jira for bugs, Asana for sprints, Notion for documentation and then we still end up DMing each other on Slack because no one knows where anything actually lives. At this point, I genuinely think we spend more time searching for the right board than actually writing code. Every time we onboard someone new, we give them a tool map like its a museum tour. I just want one place that doesn’t make me jump tabs like I m speedrunning a browser challenge. Something flexible, something that makes sense. What are teams using that connects planning + code + reporting?

https://redd.it/1p15q0p
@r_devops

Sentry to GlitchTip

We’re migrating from Sentry to GlitchTip, and we want to manage the entire setup using Terraform. Sentry provides an official Terraform provider, but I couldn’t find one specifically for GlitchTip.

From my initial research, it seems that the Sentry provider should also work with GlitchTip. Has anyone here used it in that way? Is it reliable and hassle-free in practice?

Thanks in advance!

https://redd.it/1p18kjk
@r_devops

Need advise on release versioning

Hi all,

I would like some guidance in our packaging workflow and some feedback on best practices.

We build several components as .deb using jenkins and git buildpackage. Application code lives on main, and the packaging files (debian/*) are on a separate branch ubuntu/focal. For a release, developers tag main as vX.Y. When we decide to release a component, the developer merges main into ubuntu/focal branch, runs gbp dch --release --commit, and jenkins builds the release deb package from ubuntu/focal.

For nightlies, if main is ahead of the ubuntu/focal branch, jenkins checkouts main, copy debian/* from ubuntu/focal on top of main then generates a snapshot and builds a package with a version like X.Y-~<jenkins_build_number>.deb

It "works", but honestly it feels a bit messy especially with the overlay of debian/* and the build-number suffix. I would like to move towards a more standard, automated approach for tag handling, versioning for snapshots and releases, etc..

How would you structure the branches and versioning? Any concrete patterns or examples to look at would great. I feel there is a lot error-prone and manual work involved in the current process

Thank you

https://redd.it/1p1bhh3
@r_devops

OpenShift

In alot of roles I see OpenShift skill requirements. Mostly traditional IT environments. Does anyone see going on an education for OpenShift or is it easy to learn with the documentation when knowing Kubernetes?

https://redd.it/1p1aw4d
@r_devops

None of this is fun anymore

I can't put my finger on it but I'm just not interested in the work anymore....with everything going on with AI and how quickly things are changing,.I feel like I should be more excited, but work just no longer interests me and more so just feels like a burden.

Is it time to look for a new gig? I'm a staff level platform engineer.

https://redd.it/1p1dydv
@r_devops

Help please 😭

Hello everyone,
I hope you're all doing well.

I’m writing this because I genuinely feel lost, and I really need guidance from people who understand the tech field more than I do.

Life has been tough on me recently — debts, health issues, and personal struggles that completely knocked me off track. I lost focus on my studies for a long time, and now that I’m trying to rebuild my life, I’m overwhelmed and unsure where to begin.

What I truly want is to get back on the right path and become aligned with the fast-growing world of software and technology. I want to learn real, practical skills that can help me build a career — especially remote work, because I have difficulty leaving the house regularly, and working from home would be the ideal path for me.

I’m very interested in starting with DevOps, but I honestly don’t know how to build a proper learning plan. There are so many tools, so many directions, and I feel like I’m drowning in information.

If anyone here can guide me, share a roadmap, point me to reliable resources, or give me advice on how to move step by step — it would mean the world to me.
I’m not asking for someone to mentor me full-time, but any direction, even small pieces of advice, could make a huge difference.

Thank you so much to anyone who takes the time to respond.
Your help could truly change someone’s life.


https://redd.it/1p1dvr7
@r_devops

PMs please stop making up work with AI

Rant:

Product manager doesn't know what they are doing:

They use AI to generate a SOW (Statement of Work) with completely made up objectives,
Then they use AI to generate JIRA tasks based on the made up SOW.
Then they use AI to make subtasks for the made up JIRA tasks.

They _THINK_ they are helping.


Now there are 68 items in the backlog which make no sense and are just noise. They are now presenting it to the client as if we have so much work to do when the work doesn't match reality.

Example JIRAs:

\- Automate MySQL database provisioning (Client uses Postgres)
\- Migrate databases to cloud (Client is on prem with no plans to move to the cloud).

\- Use terraform to automate provisioning (Client wants to use Ansible Automation Platform, not Terraform)

https://redd.it/1p1hbsl
@r_devops

Monitoring infra cost for on-prem infrastructure(Not Cloud): which tool do you use?

Hi,

We need a tool to estimate infra cost for deploying new application which will be hosted on-prem or local data center like cost for using vCPU, Memory, Storage, DB and the cost to provision (labor cost) them.


Could you please tell me what all tools do you use to perform all this task.


Thank you

https://redd.it/1p1eblo
@r_devops