Most of the time I have seen that Infrastructure build and deployment have separate YAML configuration build and release respectively.

Why do we do that? What If infrastructure build and deployments are contained in a single YAML file?

I want to know both disadvantages and advantages.

Found the cause in journalctl of containerd.

Jul 25 15:10:36 ubdock09 containerd[23164]: time="2022-07-25T15:10:36.480398235+02:00" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/.10-flannel.conf.swp\": REMOVE)" error="cni config load failed: failed to load CNI config file /etc/cni/net.d/10-flannel.conf: error parsing configuration: missing 'type': invalid cni config: failed to load cni config"

The Ready machines did not have /etc/cni/net.d/10-flannel.conf so I just removed the /etc/cni/net.d directory, deleted cni0 with ip link delete cni0, and restarted containerd and the flannel pod. Now the node is ready.

I am using an Azure DevOps release pipeline to deploy code to an Azure Web App. It pulls my .war file from my most recent build pipeline to deploy. However, it serves old code. For example, the app has referenced an old application.properties file, in the past. It also will reference previously deleted files at runtime, even when the code has no reference to those files.I have attempted to restart, stop and start the app, to no avail. It’s running on a Tomcat 9.0 server.

In my current position, I'm limited to using TFVC so resorted to using the DevOps pipeline UI, instead of yaml. For my release pipeline, I use the "Azure App Service deploy" task.

I have seen this previously posted https://stackoverflow.com/questions/51685496/azure-web-app-serving-old-files , but I am confident it is not a personal caching issue. First, I have cleared my browser's cache, and also have used a different browser, which hadn't cached the old site. Second, and more indicative of the issue, I can push code through the Eclipse Azure plugin, which then causes the web app to serve the most recent code. However, I don't get similar functionality from the DevOps release pipeline

I have snooped around on kudu and still can't find the issue. Similar to the previously linked question, I discover that the code appears to be the most recent. I have also manually deleted the code from webapps folder, then redeployed from the DevOps pipeline, with no luck. I'm trying to discover what the Azure Eclipse does differently in deployment that I'm missing in my DevOps pipeline. Is Tomcat caching content? If so, is there a way to automate a clear cache using Azure Pipelines' UI?

In a project with multiple vms that run various applications from Wordpress to Django and various other things.

Is there a way or a tool to keep track of the packages that require updates or have security problems not on an app level but on a vm level. Do I have to ssh into each machine and keep track of the packages or is there a smarter way to do that, could a tool like ansible be used for this job?

How to make a readiness probe fail when there is a newer version of the app available

Stack: Node.js, GKE

Context

Clients are connected to pods via websockets. During a rolling update, clients that disconnect from the old pods can connect to either old pods or new pods. I want to minimize client disconnections and force them to connect only to the newest version of the pods. Making sure that ONLY one disconnection/connection takes place is crucial, I want to maximize the uptime of client connections, I cannot afford clients to connect/disconnect multiple times.

For this purpose I want to use the readinessProbe. I need to make it fail for old pods when a rolling update is taking place.

Recreate strategy cannot be used since the re-connection of all clients at once creates a big load on the system.

Ideas

1. ConfigMap that holds the latest version of the app.

1. The current version of the app is passed as an env var and it is stored in memory.
2. The newest version of the app lives in a ConfigMap.
3. Health endpoint returns the oldVersion and newVersion.
4. Readiness probe GETs the /health and compares the two versions (exec/curl), if not equal exit 1 and the probe fails.

Drawbacks:

• Configmaps can take some minutes to sync which is a lot in my case. Is there a way to accelerate it?

the total delay from the moment when the ConfigMap is updated to the moment when new keys are projected to the Pod can be as long as the kubelet sync period + cache propagation delay

https://kubernetes.io/docs/concepts/configuration/configmap/

What happens during a rollback?

• Logic to update the config map again and have the probes failing. Helm will not do the trick (helm upgrade --install)

The purpose of this question is to find a way to do it in a timely manner. Do you have other ideas?

In the Jenkins web interface, under Home directory (Dashboard -> Mange Jenkins -> Configure System), the help section says the following:

• "By default, Jenkins stores all of its data in this directory on the file system", referring to /var/lib/jenkins
• "Edit the JENKINS_HOME variable in your Jenkins configuration file (e.g. /etc/sysconfig/jenkins on Red Hat Linux)"

However, my etc directory doesn't have a directory called sysconfig.

Running the following command returns a lot of files among which only the following seems relevant:

find ~/ -type f -name "config.xml"

/var/lib/jenkins/config.xml

The file contains the following field:

${JENKINS_HOME}/workspace/${ITEM_FULL_NAME}

Is this the correct field to edit? If so, which syntax should I follow while entering the desired path?

I need to find a cloud provider to host a simple docker service but with a persistent storage attached.

I know I can achieve this using GCE (VM + docker + volume mounted from VM) but this looks a bit too complicated (not complex though), and I was wondering if someone here knew a cloud provider providing this kind of solution, in a very simple way.

Thanks

This is the pattern to fetch all Merge Requests from GitLab -

git ls-remote origin 'refs/merge-requests/*/head'

OR

git ls-remote origin 'refs/merge-requests/*/merge'

I am developing a webshop for large digital products (multiple .tif image files). These are currently stored in an S3 bucket.

What is a recommended way to grant access to my customers once they have purchased the product? I am trying to determine how to grant access to clients who may not have their own S3 account (otherwise I could set up an IAM Policy to suit), so they can access a specific folder and download all files within. Adding password protection is important, I don't want to store the data and make it public access.

Would Google Cloud Services have additional features which might meet this requirement? Could I use an online cloud storage browser to grant access to customers without S3 details?

According to a https://gaming.stackexchange.com/questions/392935/if-i-cancel-my-ps-plus-subscription-will-my-game-saves-that-i-uploaded-to-the-c on our site:

Your game save file will be on their server for 6 months, no matter if you canceled subscription, or expired. The only exception would be if you choose to delete save files on the cloud, though that isn't "automated" deletion.

To answer if you can take it out of storage (i.e. download it to your Playstation), yes you can. According to https://www.playstation.com/en-us/support/subscriptions/ps4-ps-plus-online-storage/#manage :

1. Select your local user and go to Settings > Application Data Management > Saved data in Online Storage > Download to System Storage.

2. Select the title and then the file you would like to download and select Yes to overwriting the system storage file.