CommPulse

The first 99% is just the installer warming up. The real installation starts when it hits 99%, stares into the void for the next five minutes, and begins verifying, unpacking, configuring, cleaning up, and whatever other ancient rituals software installers perform. I’ve stopped seeing 99% as “almost done.” It’s just the loading screen for the last 1%. It drives me nuts……. the last 1% is so unpredictable sometimes. Sorry had to rant for a bit to kill the time on waiting on the last 1%…. submitted by /u/ChopSueyYumm [link] [comments]

Question: Is Entra ID rolling out Passkeys as the default sign-in for everyone , or just for users that have only one authentication as mobile phone ( sms & Voice) submitted by /u/princesaharan [link] [comments]

We need to collect and store secrets (think of tokens) from a flask app and store them into text files on linux systems. While read -s in powershell is relatively straight forward, what are the risks falltraps to avoid when coming from flask? I thought about def write_credentials(username, password): path = Path("/secure/path/credentials.ini") content = f"""[default] token = {token} """ path.write_text(content) and chmod it to the flask app running user esclusively. Would this be a way to go? submitted by /u/Accurate-Ad6361 [link] [comments]

Sharing this for anyone interested in platform engineering, Kubernetes and cloud-native technologies. Cloud Native Heidelberg is hosting a hybrid meetup covering: Lessons from five years of building and rebuilding Kubernetes platforms Building production-grade platforms using CNCF technologies Creating vendor-neutral platforms without hyperscaler lock-in Running Kubernetes directly on an Android phone Date: July 30, 2026 Time: 6:30 PM CEST Event details and registration: https://ocgroups.dev/cncf/group/cncf-heidelberg/event/9euvqye submitted by /u/No-Income-2235 [link] [comments]

Anyone else experiecing user permission issues for shared mailboxes in outlook now? Shared mailbox still populating in outlook but says "You do not have permission to view". Opening in web still works though and issuye is not persistent over all shared mailboxes.. For reference im EU based. submitted by /u/Exciting_Most_4769 [link] [comments]

submitted by /u/Regular-Relation-838 [link] [comments]

Hi, we are running a small online shop, though it's been having issues with a lot of bot traffic and hits so it's been slow the past few days. We asked our provider if they can send us an offer on securing the shop & management wants me to check if there's an alternative. We use AWS for a different service we already use, so WAF seems like the next logical step. Anyways, my question is this: can I have WAF infront of my external shop to filter out traffic / use ACL which then redirect to the shop based on accepted rules? Anything I should keep in mind? Thanks a lot! submitted by /u/ip-cx [link] [comments]

Today, I passed CKA with 88% and wrote a detailed blog about my exam experience, preparation approach, and the Kubernetes topics that helped me the most. DMs are open if you are preparing for the exam. I can help with whatever is still fresh in my memory. My biggest takeaway: CKA is not only about knowing Kubernetes commands. It is about understanding how cluster components work together, using documentation efficiently, troubleshooting quickly, and verifying every change you make. The exam has changed a lot since I last passed it in September 2021, especially after the major curriculum updates introduced in 2025. Topics such as Gateway API, CRDs, Helm, CNI installation, autoscaling, and container runtimes are now much more relevant. A few things that helped me: Don’t solve the exam strictly in order. If a question looks unfamiliar or time-consuming, mark it and move ahead. Complete the tasks you are confident about first and return to the difficult ones later. Don’t waste too much time setting up aliases. Autocomplete is already available, and normal typing speed is enough. I completed 14 out of 16 questions with around 35 minutes remaining. Read the full question carefully. Important details such as the target node, namespace, version, file path, container name, or documentation link may appear near the end. Use the documentation provided in the question. Some topics, especially Gateway API, Helm, Calico, Argo CD, and container runtime installation, are easier when you follow the version-specific documentation instead of relying on memory. Always verify your work. A command completing successfully does not mean the task is done. Check Pods, rollouts, endpoints, PVC status, HPA status, node readiness, logs, connectivity, installed packages, and systemd services wherever required. Practice SSH and basic Linux administration. Some tasks may require connecting to a node, installing a package, starting a service, and enabling it at boot. Topics I would strongly recommend practising: Persistent Volumes, PVCs, and StorageClasses Creating and updating the default StorageClass Argo CD installation with a specific version Sidecar containers for logging Resource requests and limits in Deployments Horizontal Pod Autoscaler Inspecting CRDs and extracting required information PriorityClass kubectl patch CNI installation with NetworkPolicy support Calico operator and custom resources cri-dockerd installation Taints and tolerations Ingress to Gateway API conversion with TLS Ingress configuration and troubleshooting NetworkPolicy NodePort Services Resources I used: KodeKloud CKA course and mock tests CK-X repository: https://github.com/sailor-sh/CK-X The Platform Lab CKA repository: https://github.com/theplatformlab/CKA-Certified-Kubernetes-Administrator iximiuz Labs for hands-on practice: https://labs.iximiuz.com KodeKloud Ultimate Mock Exam Series, optionally, for additional hands-on practice Both Killer.sh simulator attempts I strongly recommend doing both Killer.sh attempts because they contain different tasks. The questions are different from the actual exam and often feel harder, but they are very useful for strengthening concepts and improving troubleshooting speed. The simplest advice I can give is to practice a lot and get comfortable using documentation. I also wrote a full blog with more details on my preparation strategy, the updated exam scope, topics to focus on, and mistakes to avoid. Blog: https://blog.prateekjain.dev/cka-exam-experience-2026-how-i-passed-with-88-770d3c473af7?sk=20985b1484d34a9dfdaac03dd6cfea78 submitted by /u/root0ps [link] [comments]

We use an Azure Cache for Redis instance with this configuration: Service tier: Premium P1 Region: Central India Redis version: 6.0 High availability: Enabled Microsoft does not provide an upgrade from Redis 6.0 for the Basic, Standard, and Premium service tiers. Redis 6.0 no longer receives upstream security updates. Microsoft will also retire these Azure Cache for Redis tiers on September 30, 2028. Redis Enterprise and Enterprise Flash are not suitable long-term alternatives because Microsoft will retire them in March 2027. For this reason, we plan to move to Azure Managed Redis. Our current Azure Cache for Redis instance has a three-year reservation: Reservation type: Azure_Redis_Cache_Premium_P1_IN_Central_3_Years Quantity: 2 Expiration date: May 21, 2028 We are considering this Azure Managed Redis configuration: Tier: Balanced Memory: 6 GB High availability: Enabled Region: Central India Redis version: 7.4 We need information about the following questions: Can we exchange the current Azure Cache for Redis reservation for an Azure Managed Redis reservation? Can Microsoft apply the unused reservation value to the new Azure Managed Redis reservation? Does Azure Managed Redis qualify as an eligible product under the Azure reservation exchange policy? What steps are necessary to exchange or cancel the current reservation? Are there refund limits, cancellation charges, or contract restrictions? How does the cost of the proposed Azure Managed Redis configuration compare with Premium P1? Is there a supported method to keep the current Redis 6.0 instance secure until the migration is complete? Has anyone completed this migration? Please share information about: Reservation exchange or refund Migration steps Application compatibility Downtime Data transfer High-availability behavior Unexpected costs Thanks in advance! submitted by /u/Extreme_DK [link] [comments]

Am I just an old man yelling at clouds, or has DevOps become incredibly boring? I know building technical solutions is not supposed to exist purely for my entertainment, but I do actually want to enjoy my job. I am not currently working as a DevOps engineer, and one of the reasons I moved toward development was that I became completely bored with modern cloud infrastructure. When I started, we still racked physical servers and automated the entire bare-metal imaging process. The underlying operating system mattered. We built systems by combining open-source software, custom code, and whatever hardware we could get our hands on. There was a real sense that we owned the systems we operated and understood how the pieces fit together. Today, DevOps or platform engineering often, though certainly not always, seems to collapse into being a configuration monkey. Yes, I still got to write plenty of tools and automation, but eventually I became tired of every architectural discussion turning into: “Should we use this AWS service or that AWS service?” I became even more frustrated with managers and coworkers who did not really want to own or understand a service. They just wanted to hand as much of it as possible to the cloud provider and call the problem solved. Do people genuinely enjoy the current state of what we used to call systems administration or systems engineering? Or am I just an old man yelling at clouds? For what it is worth, I do find some salvation in Kubernetes. Once EKS or GKE is running, there is a huge amount you can build without thinking too deeply about the underlying cloud provider. That separation is reassuring, even if Kubernetes has plenty of complexity of its own. These days, I mostly choose to work in areas where the managed cloud options are still inadequate, such as real-time media, telephony, high-speed stream processing, and similar systems. At least in those spaces, it still feels like I am engineering something rather than selecting products from a cloud-provider catalog. I am curious whether other longtime infrastructure engineers feel the same way, or whether people genuinely prefer the managed-service-heavy version of the job. Edit: I also really miss configuring switches and routers the cloud has made networking far more boring than it used to be though GKE has some interesting SDN features. I probably should have tried harder to get a job at one of the big hyperscalers but again on ownership I never wanted hundreds of co-workers. submitted by /u/devfuckedup [link] [comments]

Hello all, First time making a post bear with me! I’m currently working in manufacturing as an IT tech with 4 years of experience. I do not have a degree nor certifications under my belt. We work in a cisco environment, VMware, windows, network monitoring and lately our organization is moving more hybrid environment focusing on azure. Basically I am trying to grow more in this field and it seems most jobs hits I get are more support focused. I am looking to move to networking roles or system admin roles. Any input would be appreciated thanks submitted by /u/rAL2810 [link] [comments]

We've all heard the statement that "the definition of insanity is doing the same thing over and over and expecting different results" (this is actually in no way even an attribute of insanity much less the actual definition of it). It's probably a better definition of the. Scientific method, but it's a topic for another post. I put it forward that we as sysadmins (or other technically adept people who may read this subreddit) create an official definition of stupidity which is "changing parameters and expecting the same result" (and being upset or angry that it's not what they expected) I say this after many decades of working in projects where senior people change project scope or resourcing and then getting wound up because the project is not progressing as we outlined it at the start. For instance if you're running a project and a key resource "leaves the project" (aka gets made redundant to cut costs) and then people get the shits because the project timelines are 6 months behind. Not seeking help or advice. I know where I stand. I know the difference between reality and expectations. I can try to adjust expectations, but explaining reality to my superiors just doesn't sit well with me. Reality has a way of explaining itself given enough time. All we have to do is wait... submitted by /u/afristralian [link] [comments]

Do you have governance in SAAS application (besides maybe the role assignments from a IGA tool?). For example, if someone makes a change to your tenant config in Salesforce are you auditing that and sending to some sort of SIEM? I had a conversation with some folks today (including our cyber security team) and they're stance is because it a SAAS tool there no need for us to monitor if someone does a mass deletion of files, assign a role to someone else etc. That we just need to worry about logins and since you have to go through our Identity system to login we are tracking who is actually logging in to those tools. Am I right to shake my head or overthinking? submitted by /u/bobsmith1010 [link] [comments]

Hi all, I've spent the past month studying for the ACE certification using the lessons and labs from Google Skills, and it just dawned upon me just how many hours of lessons I still have left. I've been at my company for a little less than a year and a half with a decent amount of experience deploying apps on GCP and working with other services like GCS, Big Query, service accounts and IAM, but definitely nowhere near a veteran level. Still though I was hoping that I'd be going through the lessons faster. I wanted to ask for your opinion on using Google Skills for the purpose of studying for the ACE exam? Sometimes I feel like there's just a lot of content and things I need to memorize, so I'm not sure if I'm spending my time wisely with this. I can say for sure that I'm definitely learning a lot, but how much of it is going to be on the exam? I'm also looking for alternative courses and study material if you can kindly provide them for me. Thanks! submitted by /u/Slow_Calendar1864 [link] [comments]

Hey everyone, basically I threw an application out there for a Google Cloud Tam role in Financial Services (?). Wasn’t expecting it but got the hiring assessment sent to me. Wasn’t expecting it but passed said hiring assessment. Now I’m being offered a 30 minute phone interview. Any idea what the questions are going to be like? What the full interview process is (ex how many interviews are there if this one goes well?)? For context, I’ve never actually used GCP, but I’ve worked at AWS for years, & have a good grasp on their services which have overlap with most Cloud Provider services. Any services I should definitely learn from GCP? Any info is appreciated submitted by /u/knicksarelife [link] [comments]

I'm trying to do a keyword monitor and I find some don't work because the HTML response they get is incomplete and different from the browser. Uptime Robot is basically blaming me and saying my site is the problem but I think Javascript rendering is pretty basic part of websites in 2026. Thoughts? submitted by /u/Tall-Fisherman-6992 [link] [comments]

I'm at a complete loss here, spent days working on this and to no avail. I've gotten most other services working with OIDC for single sign on with Keycloak but I can't seem to get our ticketing system, GLPI, connected using SAML with Keycloak. I feel like I'm fundamentally misunderstanding SAML. Is there any tools or simple software that supports SAML that I can quickly spin up in a virtual machine to keep messing with SAML and try to get it to work because I'm going crazy. LDAP, Active Directory, OIDC all work just fine; I can't tell if it's GLPI or my misunderstanding of SAML. submitted by /u/BlindITGuy [link] [comments]

New guy has 20-25 years of experience, and about 10 years more than me, plus a couple certs. My current boss didn't hire them, the previous boss did, but it's obvious to me this guy has low to mid level technical skills at best. We're working on projects together, and while I value having a second opinion or different view point, he has some dumb ideas. Like pointing the AC unit at the hot end of the servers. He also keeps calling things by the wrong name. Any rack mount server is a blade, and a cabinet is a shelf, etc. Then there are other things, like leaving laptops unlocked, including his own, asking users for their passwords, using speakerphone in the office and bathroom, and (apparently at their last job) keeping lists of user passwords in excel. They don't listen, don't take direction well, constantly interrupt and will interject when they're not being addressed. I don't trust them or their judgement and I'm tired of explaining basic things to them. My boss thinks they're great. I have a couple big projects in the works with them, but I don't trust that they completely understand their tasks, and I don't trust they'll be done correctly. Should I speak up or shut the fuck up? submitted by /u/DULUXR1R2L1L2 [link] [comments]

I am "required" to use AI for coding, testing, debugging, terraform....and all the whole nine yards. Not too bad but too good either. Management is shoveling AI down our throats, so we have to use AI. If you can change one thing about AI to make your job easier, what would that be? submitted by /u/Inner-Chemistry8971 [link] [comments]

I’m trying to draw a line around automated security scans in CI. A read-only scan feels fine. If it finds a suspicious dependency, a broad permission, or a weird auth path, I want the report. I might even want it to draft a small PR. The part that makes me nervous is when the same worker can change CI rules, mark a PR as failing, or "fix" security-sensitive code without a separate approval step. In one small project, I asked an agent to scan a dependency and config change. The report was useful, but I still did not want it editing the CI rule or auth code without me reading the diff first. Maybe this is just normal branch protection with a new actor, but I’m curious how people handle it. For security automation, do you separate "scan/report" from "block merge/change config"? And if you do, what evidence has to be attached to the approval? submitted by /u/BitByLiu [link] [comments]