Most Popular

1500 questions
13
votes
1 answer

Should AWS arn values be treated as secrets?

I have a configuration file that contains AWS resource ARNs stored in a git repo. This includes some ARNs of AWS IAM role resources. Should these be treated as if they are a secret value, and not stored in a repository?
Preston Martin
  • 3,288
  • 4
  • 18
  • 39
13
votes
3 answers

Nexus vs. Artifactory

I was wondering what is the recommendation for a business that needs to store binaries for distribution as well as for dependencies to be used by our projects, with projects in different languages/technologies (.NET, Javascript/Java, C/C++,…
Ivy
  • 131
  • 1
  • 1
  • 5
13
votes
2 answers

What role do Configuration Managment tools play in immutable infrastructure?

If I'm using immutable servers/containers, do I need tools like Chef, Puppet, Ansible, or Salt? Those config management tools are designed to establish a configuration and then maintain it. If I'm deploying immutable servers, should I use…
Dave Swersky
  • 4,068
  • 2
  • 21
  • 33
13
votes
2 answers

Docker Container capacity planning

I'm running my application on 4 Virtual Machines with 8 3.2 GHz Virtual CPUs and 32 GB, however, I will be splitting up the processes into separate containers. I am not sure how many containers to run per host. What are the typical numbers? For…
shrao
  • 139
  • 3
12
votes
7 answers

Is there one website that contains all relevant DevOps news and gets updated on a daily basis?

I am looking for some DevOps news channel like https://nos.nl/teletekst#101 that shows the headlines of the Dutch news. I am aware of https://tweakers.net/ and github.com, but this does not contain all interesting news on one page. Basically, I…
030
  • 13,383
  • 17
  • 76
  • 178
12
votes
2 answers

How to run experimental Docker features on CircleCI

When a build is started on CircleCI one of the first things that is done is: Setup a remote Docker engine Specified reusable docker engine, but build has not been whitelisted. Contact CircleCI to be whitelisted Allocating a remote Docker…
030
  • 13,383
  • 17
  • 76
  • 178
12
votes
5 answers

How to solve 'upstream connect error or disconnect/reset before headers. reset reason: connection termination' in Istio?

I try to setup an aws load balancer (ELB) with SSL follow the instruction at #6566 Certificate was attached on ELB. However, I got the issue "upstream connect error or disconnect/reset before headers. reset reason: connection termination" when…
pcuong
  • 261
  • 1
  • 2
  • 6
12
votes
2 answers

Separate SQL Server or just separate SQL Database for test and production?

I'm new to SQL Server, so this may be more of a SQL Server management question. I'm creating test and production databases for a service, and I imagine I'll be wiping the test database quite a lot. Additionally, I'm going to want different…
Anonymous1
  • 305
  • 3
  • 7
12
votes
5 answers

Are configuration management tools appropriate to use as deployment tools?

Off the back of my answer to the question: How can DevOps help to improve Software Escrow procedures? Tensibai had the question: What would necessitate Capistrano on top of puppet or chef? My response was to post a link to Noah Gibbs' article "Do…
Richard Slater
  • 11,747
  • 7
  • 43
  • 82
12
votes
2 answers

How to explicitly kill the process with PID 1 from inside a container?

For demonstration purposes, I would like to kill the process with PID 1 from inside a container. But apparently, kill 1 doesn't work: $ sudo docker run -it centos [root@3752d3a44f10 /]# ps PID TTY TIME CMD 1 pts/0 00:00:00 bash …
Sylvain Leroux
  • 1,660
  • 2
  • 15
  • 27
12
votes
1 answer

How to know where a docker image came from?

I have a Docker image on my system 12346789ABCD. Is there a way to know where it is coming from? Specifically, I would like to know if it was built locally or downloaded from a repository, and in that latter case, downloaded from which repository.
Sylvain Leroux
  • 1,660
  • 2
  • 15
  • 27
12
votes
2 answers

How to storing encrypted secrets in code for a serverless.com project?

With serverless.com, the easiest way to expose a secret to an AWS Lambda function is to store it in the serverless.yml file (encrypted with KMS, for example). But committing encrypted secrets to Git is not the best thing in the world. Requires code…
Assaf Lavie
  • 1,251
  • 11
  • 17
12
votes
1 answer

How to restrict filesystem access in Atlassian Bamboo builds?

We have Atlassian Bamboo running on Ubuntu. When a developer is setting up a build, then he or she has the possibility to run shell script tasks. This is useful to run (custom) commands on the codebase you are building. However, the scripts that run…
7ochem
  • 984
  • 10
  • 22
12
votes
5 answers

What are reasons for not not using Bitbucket-server for storing artifacts?

I'm working with a company setting up a brand new project, and we're talking about what tools to use for what. I was talking about Artifactory or Nexus for storing built artifacts (APKs in this case), and they asked why they can't just use Bitbucket…
dj_segfault
  • 223
  • 2
  • 7
12
votes
2 answers

Which Release Management aspects help explain the difference between Waterfall and Agile?

When explaining DevOps to somebody, it happens that a question comes up like: How does Release Management using the Agile methodology differ from Waterfall? So what kind of criteria can you use to explain these differences to such audience?
Pierre.Vriens
  • 7,225
  • 14
  • 39
  • 84