Most Popular
1500 questions
13
votes
1 answer
Should AWS arn values be treated as secrets?
I have a configuration file that contains AWS resource ARNs stored in a git repo. This includes some ARNs of AWS IAM role resources. Should these be treated as if they are a secret value, and not stored in a repository?
Preston Martin
- 3,288
- 4
- 18
- 39
13
votes
3 answers
Nexus vs. Artifactory
I was wondering what is the recommendation for a business that needs to store binaries for distribution as well as for dependencies to be used by our projects, with projects in different languages/technologies (.NET, Javascript/Java, C/C++,…
Ivy
- 131
- 1
- 1
- 5
13
votes
2 answers
What role do Configuration Managment tools play in immutable infrastructure?
If I'm using immutable servers/containers, do I need tools like Chef, Puppet, Ansible, or Salt? Those config management tools are designed to establish a configuration and then maintain it.
If I'm deploying immutable servers, should I use…
Dave Swersky
- 4,068
- 2
- 21
- 33
13
votes
2 answers
Docker Container capacity planning
I'm running my application on 4 Virtual Machines with 8 3.2 GHz Virtual CPUs and 32 GB, however, I will be splitting up the processes into separate containers.
I am not sure how many containers to run per host. What are the typical numbers?
For…
shrao
- 139
- 3
12
votes
7 answers
Is there one website that contains all relevant DevOps news and gets updated on a daily basis?
I am looking for some DevOps news channel like https://nos.nl/teletekst#101 that shows the headlines of the Dutch news. I am aware of https://tweakers.net/ and github.com, but this does not contain all interesting news on one page.
Basically, I…
030
- 13,383
- 17
- 76
- 178
12
votes
2 answers
How to run experimental Docker features on CircleCI
When a build is started on CircleCI one of the first things that is done is:
Setup a remote Docker engine
Specified reusable docker engine, but build has not been whitelisted.
Contact CircleCI to be whitelisted
Allocating a remote Docker…
030
- 13,383
- 17
- 76
- 178
12
votes
5 answers
How to solve 'upstream connect error or disconnect/reset before headers. reset reason: connection termination' in Istio?
I try to setup an aws load balancer (ELB) with SSL follow the instruction at #6566
Certificate was attached on ELB.
However, I got the issue "upstream connect error or disconnect/reset before headers. reset reason: connection termination" when…
pcuong
- 261
- 1
- 2
- 6
12
votes
2 answers
Separate SQL Server or just separate SQL Database for test and production?
I'm new to SQL Server, so this may be more of a SQL Server management question.
I'm creating test and production databases for a service, and I imagine I'll be wiping the test database quite a lot. Additionally, I'm going to want different…
Anonymous1
- 305
- 3
- 7
12
votes
5 answers
Are configuration management tools appropriate to use as deployment tools?
Off the back of my answer to the question: How can DevOps help to improve Software Escrow procedures? Tensibai had the question:
What would necessitate Capistrano on top of puppet or chef?
My response was to post a link to Noah Gibbs' article "Do…
Richard Slater
- 11,747
- 7
- 43
- 82
12
votes
2 answers
How to explicitly kill the process with PID 1 from inside a container?
For demonstration purposes, I would like to kill the process with PID 1 from inside a container. But apparently, kill 1 doesn't work:
$ sudo docker run -it centos
[root@3752d3a44f10 /]# ps
PID TTY TIME CMD
1 pts/0 00:00:00 bash
…
Sylvain Leroux
- 1,660
- 2
- 15
- 27
12
votes
1 answer
How to know where a docker image came from?
I have a Docker image on my system 12346789ABCD.
Is there a way to know where it is coming from?
Specifically, I would like to know if it was built locally or downloaded from a repository, and in that latter case, downloaded from which repository.
Sylvain Leroux
- 1,660
- 2
- 15
- 27
12
votes
2 answers
How to storing encrypted secrets in code for a serverless.com project?
With serverless.com, the easiest way to expose a secret to an AWS Lambda function is to store it in the serverless.yml file (encrypted with KMS, for example).
But committing encrypted secrets to Git is not the best thing in the world. Requires code…
Assaf Lavie
- 1,251
- 11
- 17
12
votes
1 answer
How to restrict filesystem access in Atlassian Bamboo builds?
We have Atlassian Bamboo running on Ubuntu. When a developer is setting up a build, then he or she has the possibility to run shell script tasks. This is useful to run (custom) commands on the codebase you are building.
However, the scripts that run…
7ochem
- 984
- 10
- 22
12
votes
5 answers
What are reasons for not not using Bitbucket-server for storing artifacts?
I'm working with a company setting up a brand new project, and we're talking about what tools to use for what. I was talking about Artifactory or Nexus for storing built artifacts (APKs in this case), and they asked why they can't just use Bitbucket…
dj_segfault
- 223
- 2
- 7
12
votes
2 answers
Which Release Management aspects help explain the difference between Waterfall and Agile?
When explaining DevOps to somebody, it happens that a question comes up like:
How does Release Management using the Agile methodology differ from Waterfall?
So what kind of criteria can you use to explain these differences to such audience?
Pierre.Vriens
- 7,225
- 14
- 39
- 84