Most Popular

1500 questions
9
votes
1 answer

Is there any way I can rotate AWS KMS keys every time interval < 1 year?

According AWS KMS, keys can be rotated once every year. However, there is no way I can define a custom time period for that. However, I can keep changing the same in the bucket's policy manually. So, is there anyway I can automate that?
Dawny33
  • 2,816
  • 3
  • 23
  • 62
9
votes
2 answers

Does load balancer F5 support CasC (Configuration as Code)?

Using CasC with F5 would allow for versioned and optionally dynamic network endpoint configuration, saving time and reducing risks. Does this tool support this? Are Single Configuration Files (SCF, F5 term) the vehicle to do that?
Ta Mu
  • 6,772
  • 5
  • 39
  • 82
9
votes
3 answers

What is Systems Thinking?

The "First Way" in Gene Kim's explanation of DevOps requires "Systems Thinking" https://itrevolution.com/the-three-ways-principles-underpinning-devops/ Where can one learn the ability for "Systems Thinking"? What are some of the resources that can…
Evgeny Zislis
  • 8,963
  • 5
  • 38
  • 72
9
votes
2 answers

How to change PagerDuty incident name?

I have AWS Cloudwatch hooked up with PagerDuty. Whenever an alert goes out, it goes to PagerDuty, which then sends us a message in Slack. The problem is, this is what it shows in the chat: Triggered #3362: Maximum CPUUtilization of 53.6…
Tam N.
  • 191
  • 2
9
votes
4 answers

What courses would be useful for a DevOps Engineer?

I am a 'DevOps Engineer' based in the UK. I have 2.5/3 years experience in the IT field; starting out as an apprentice now a mid-level engineer learning/practicing Linux/Windows System Administration, Continuous Delivery (Jenkins), Continuous…
jto
  • 378
  • 1
  • 6
  • 19
9
votes
2 answers

Application calling AWS internal load balancer in same subnet is timing out

Some background: I've created a moderately complex network using Amazon's vpc. It's a three-tiered network across two availability zones. Each layer has a subnet in zone-a and zone-b. The presentation layer is at the top, there’s an application…
David Meents
  • 193
  • 1
  • 6
9
votes
3 answers

Hosted CI/CD for iOS that's not in the US?

TL;DR: Do you know of any hosted CI/CD providers for iOS, who have their datacenter/build-boxes in Asia, or at least Europe? (Bonus points if they provide both build and deploy, but build is the MVP.) Back-story: We're running CI/CD at-scale for…
XML
  • 226
  • 1
  • 5
9
votes
1 answer

How can I manage changes in desired capacity due to scaling policies in AutoScaling Group state?

How can I manage changes in desired capacity due to scaling policies in AutoScaling Group state in terraform? Specifically, suppose I provision an aws_autoscaling_group resource with terraform with a desired_capacity of 4 and a scaleup policy on…
Anthony Neace
  • 1,484
  • 1
  • 12
  • 17
9
votes
3 answers

Is there an ansible module that check whether a port is not in LISTEN state?

The Ansible module index has been consulted, but no module was found that checks whether a port is available? Is there a module that supports this? What does available mean? Available means that a port, e.g. 80 is not in LISTEN state. The following…
030
  • 13,235
  • 16
  • 74
  • 173
9
votes
1 answer

What is the difference between using brackets (`[` `]`) and just specifying the command in the CMD option in Dockerfiles?

Why does CMD ["mysqld"] result in: db_1 | 2017-05-14T16:34:11.829163Z 0 [Note] mysqld (mysqld 5.7.18) starting as process 1 ... db_1 | 2017-05-14T16:34:11.833159Z 0 [Note] InnoDB: PUNCH HOLE support available db_1 | 2017-05-14T16:34:11.833190Z…
030
  • 13,235
  • 16
  • 74
  • 173
9
votes
4 answers

Pros/cons of discontinuing a DevOps workflow?

I'm trying to evaluate whether or not it is a good idea to move away from a devops-style workflow to the traditional dev-then-ops (not sure what you call that). We are a small 5 person department tucked away within a 4000 employee traditional media…
doub1ejack
  • 207
  • 1
  • 3
9
votes
1 answer

Is there any way to break long command into multi lines in GitlabCI

I have a very long command in .gitlab-ci.yml file to ssh to jump host then use rsync to sync files from my repo to destination host (it does not have public ip so I need to access it via jump host). Here is my .gitlab-ci: image:…
Chau Giang
  • 223
  • 1
  • 2
  • 6
9
votes
2 answers

Javascript based alternative to Fabric

Is there a similar DevOps tool to fabric with JavaScript as its scripting language? I'm specifically interested in the remote execution side. Most of the tools I've found rely on python (e.g fabric) or Ruby (e.g. Capistrano, Chef). However, in my…
Henry
  • 201
  • 1
  • 7
9
votes
1 answer

Running a command as a specific user on an ec2 using ssm

Background I want to automatically configure an EC2 via a build, using the aws cli and ssm. The (manual) setup for the container looks something like this: Create an EC2 Run a shell script as root Run a shell script as a specific user Question Is…
Max Colledge
  • 195
  • 1
  • 6
8
votes
2 answers

What are best practices of structuring encrypting variables since Ansible 2.3.0?

This document indicates that since Ansible 2.3 it should be possible to encrypt certain vars using a !vault | prefix instead of putting a variable and keys in a vault file and encrypt it completely. notsecret: myvalue mysecret: !vault | …
030
  • 13,235
  • 16
  • 74
  • 173