Skip to content
tezvyn:
Menu

☁️DevOps & Cloud

Infrastructure, containers, CI/CD, and cloud

16 bites

Latest in DevOps & Cloud

easy1 min read

Datadog Infrastructure Basic targets host health checks

Datadog describes a lighter monitoring tier for host metrics and selected processes on noncritical workloads.

intermediate1 min read

CNCF argues agents should propose system state, not receive production root

A CNCF Ambassador argues that agents should express changes as versioned system state and pass them through review, build and deployment controls instead of receiving unrestricted production root.

easy1 min read

CNCF announces its 2026–2028 Ambassador cohort

CNCF accepted 58 new ambassadors for its 2026–2028 cohort, while 48 previous ambassadors stepped away.

easy1 min read

ArgoCon previews the direction of Argo CD 4.0

CNCF previews ArgoCon North America 2026 and says the Argo community is beginning the visioning process for Argo CD 4.0. The event covers four distinct projects—Argo CD, Workflows, Rollouts, and Events—so learners can map each project to a delivery problem before treating the vision as a release.

intermediate1 min read

AWS introduces CloudWatch Omni for collaborative observability

AWS announced CloudWatch Omni on 22 September, an OpenTelemetry-based experience for application and AI-agent observability outside the AWS console.

intermediate1 min read

Kubernetes 1.37 adds a native unused-PVC condition

Kubernetes 1.37 promotes PVC unused tracking to Beta, adding an Unused condition managed by the PVC protection controller.

intermediate1 min read

Docker publishes Sandbox Kit Specification v3

Docker published an open-source Kit Specification v3 for packaging an agent’s runtime, tools, permissions, and network policy with its environment.

advanced1 min read

GitHub describes an agentic fuzzing taskflow

GitHub Security Lab describes a taskflow that finds entry points, writes harnesses, runs AFL++, and triages crashes for C/C++ projects.

intermediate1 min read

AWS adds shared, ordered EventBridge custom buses

AWS announced enhanced EventBridge custom event buses that can be shared across accounts, support ordered delivery, and use a Subscriber resource.

intermediate1 min read

Grafana 13.2 adds multiple notification policy trees

Grafana says multiple notification policies are generally available in Grafana-managed alerting with Grafana 13.2, enabling independently managed routing trees.

intermediate1 min read

GitLab publishes critical patch releases 19.4.1, 19.3.3 and 19.2.7

GitLab released 19.4.1, 19.3.3 and 19.2.7 on 23 September with important bug and security fixes for self-managed installations.

intermediate1 min read

Docker introduces Cloud Sandboxes for long-running agents

Docker announced Cloud Sandboxes on 24 September: the same microVM isolation model as local Sandboxes, running on Docker-managed compute.

advanced1 min read

Critical vm2 sandbox escape (CVSS 10.0) traced to its own README example

GitLab's Threat Research Group found a CVSS 3.1: 10.0 sandbox escape in vm2, a widely used Node.js sandbox library, in a config copied from vm2's own README. Version 3.11.7 fixes the attack, but the underlying risk remains for anyone using require.external. Update immediately and prefer containers for untrusted code.

intermediate1 min read

GitLab Flex merges seats and AI into one budget

GitLab Flex reshapes one annual budget monthly across seats, AI credits, and features without re-procurement. Engineering leaders can shift spend from idle seats to agent usage instead of guessing headcount six months out. Ask at renewal.

intermediate2 min read

GitLab Orbit unifies code lifecycle in live graph

GitLab Orbit beta unifies code, pipelines, and ownership in a live graph. Compare the Market tests show Orbit-grounded reviewers hit 70% accuracy versus 58% for RAG.

intermediate1 min read

GitLab patches 13 CVEs including SAML account takeover flaw

GitLab 19.0.2, 18.11.5, and 18.10.8 patch 13 security flaws, including four High-severity CVEs like SAML account takeover (CVSS 8.7) and unauthenticated API DoS. Self-managed instances must upgrade immediately; GitLab.com is already patched.

We are hiring for this. Every open role lists the topics its interview covers, so you can prepare for the real thing rather than guessing.

See open roles