Recent searches

No recent searches

Search options

Only available when logged in.
shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

266
active users

shakedown.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.2

#gitops

1 post1 participant0 posts today
Replied in thread
Ariel

@thedoctor

It couples code change and repository access with security boundaries. Suddenly you have barriers in the way of developers doing basic things like merging or accessing repos.

It makes iteration a huge pain. Having to commit every change to test anything during iteration is opposed to the Git model of curated histroy. You have to also find ways to bypass any automatic reconciliation if you're iterating changes out-of-band.

Writeback commits are easy to get underfoot or automate brittle-y.

Often you have to publish new versions of artifacts just to get something into a dev environment.

ChatOps like Atlantis is woeful, cramming verbose Terraform output into replies on an MR.

Are you doing GitOps? How are you alleviating these issues?

#GitOps
Nic Roland :mastodon:

Okay, authentik is up! Took a while, I was fighting against flux and the helm release because it deployed with the wrong StorageClass (I forgot to have that configuration ready before release.) Helm wasn't able to modify the PVC because they're immutable, updating the release has to wait for the initial release to succeed (which it won't) or timeout and flux is quiet on the reasons for all of this unless you know where to look 😔 lots of learning was had though!

Anyway, admin and personal user accounts created, MFA enabled. Got my first application integrated too! (actual budget)

What next? The world is my oyster... Probably gitea or semaphore. I'm hesitant to integrate services like jellyfin before I have more users onboarded and this gives me an opportunity to experiment with other edge cases like other providers and service accounts and such

#selfhosted#homelab#authentik
Ariel

Yo @Nagashi

Got any specific tips for gitops?

I understand the basic value proposition but I have to square it with enabling developers. Just kicking them out of write access to things doesn't jive with how much they usually help out in infra.

The right kind of automation could work but write-back commits from CI are kinda squirrely. ArgoCD is assumed, and Akuity Kargo is on my radar, if that helps.

#GitOps#PlatfornEngineering
xyhhx 🔻 (plz hire me)

welp, got fired after only 2 months. they fired the whole team (including someone who already quit but then they convinced to stay???)

so i am back on the market, unfortunately.

i have plenty of experience as a developer and an SRE. i am primarily skilled with kubernetes, linux, javascript, node, react. ideally i'd focus on the SRE side

i am in canada and available for remote work or on-prem if you're in montreal!

#getFediHired#fediHire#fediHireMe
Tech Tyrant ᴶᴶᴳᵃᵈᶢᵉᵗˢ :jjtinfoil:

I'm finally writing an #introduction toot LOL.

I'm "JJGadgets" online, you can call me JJ, everyone does.

My life is #tech, nothing brings me more joy and zen than sitting in front of my screens. Maybe except for Japanese food.

I use and prefer #linux for both server and desktop use, despite its flaws. I live in the #commandline. Been that way since I first jailbroke on iOS 5 and installed MobileTerminal.

I study #infosec but textbooks and lessons don't even come close to doing justice to what #infosec is all about. I like to think that I live and strive to live the infosec life, including my mindset. (After all, that's why @truxnell started calling me the "tinfoil hat sensei" LOL)

I do #Kubernetes @ Home, and maintain my cluster state in #git then apply it with tools like #FluxCD. My #homelab repo can be found at https://biohazard.jjgadgets.tech (will always 301 redirect to my latest Git remote of choice, in the event it changes). I think using #GitOps/IaC to declare desired security-related state (policies, rules etc) makes managing security a lot easier.

I try to follow "Principle of Least Privilege" for my homelab, and especially for Kubernetes security, using tools such as network policies (#netpols), policy engines, secrets management, identity management, strong #authentication, and access control. For example, my homelab Kubernetes cluster heavily uses netpols everywhere to default-deny and only allow the necessary network traffic for any given app to work.

I am also very interested in strong authentication methods such as #passwordless #fido2 / #webauthn (#yubikey and #passkeys) and where possible, I only enroll FIDO2 MFA, and choose the passwordless variant if available.

I try my best to use privacy-respecting software where possible, as I believe in maintaining transparency and control over the #privacy of people, regardless of online or offline.

I also believe in #opensource, too many times we've been shown the consequences of relying on closed source software, so where possible I always prefer open source.

Outside of the screen, admittedly I'm terrible at life stuff, and it's very hard for me to be interested in much of anything other than stuff on or related to a screen/device (I basically only talk tech stuff LOL). I'm working on changing that in the event I burnout hard again (though I still haven't found a non-tech interest yet, as of writing). I've burnt out multiple times despite still being a student, and thus I now (try to) take as much necessary measures as I can to avoid over-working, over-stressing or over-exerting myself.

That's about it, let's chat (or toot?)!

*
Michael Stanclift

If you’re missing connections to firefish.lgbt, musician.social, and outdoors.lgbt tonight it’s because they apparently also had some Kubernetes issues today but the database got sucked down with it. status.firefish.lgbt/incident/

This is why the apps and data are separate in our environment, shit happens. Also, always test your backups folks.

status.firefish.lgbtTotal Data Loss | firefish.lgbtWelcome to firefish.lgbt status page for real-time and historical data on system performance.
#MastoAdmin#TotalDataLoss#GitOps
Jon Udell

Excellent work by @sjvn.

I only roughly get what GitOps is, as both a conceptual framework and a set of tools. But this article suggests to me that as git becomes the source of truth for infra as well as appdev the #Steampipe GitHub/GitLab plugins will become even more interesting than they already are.

thenewstack.io/gitops-as-an-ev

The New StackGitOps as an Evolution of KubernetesBrendan Burns, Kubernetes' co-founder shared his thoughts on GitOps and Kubernetes at GitOpsCon.
#GitOps#Kubernetes
TrendingLive feeds
About