🚀 Managing variant drift with generic Helm templates

Generic helm templates push variant drift management into values files, which are not amenable to reusable tooling. Continue reading on ITNEXT »

🔗 Read more: https://itnext.io/managing-variant-drift-with-generic-helm-templates-f7b8433dd0b8?source=rss------gitops-5
📰 Source: Medium
📅 2026-08-17 16:58 UTC

#DevOps #Tech #Automation #CloudNative

🚀 OpenTelemetry Collector service/telemetry/telemetrytest/v0.159.0 released

Module set beta, Version v0.159.0

🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/service%2Ftelemetry%2Ftelemetrytest%2Fv0.159.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-17 17:22 UTC

#DevOps #Tech #Automation #CloudNative

🚀 OpenTelemetry Collector service/v0.159.0 released

Module set beta, Version v0.159.0

🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/service%2Fv0.159.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-17 17:22 UTC

#DevOps #Tech #Automation #CloudNative

🚀 OpenTelemetry Collector v1.65.0/v0.159.0 released

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.159.0 End User Changelog 💡 Enhancements 💡 pkg/exporterhelper : Add the pkg.exporterhelper.queueBatchEnabled feature gate ( #14038 , #13582 , ...

🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.159.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-17 17:37 UTC

#DevOps #Tech #Automation #CloudNative

npm-пакет @7nohe/openapi-react-query-codegen був скомпрометований внаслідок недосконалої конфігурації workflow GitHub Actions.

Зловмисник виявив, що workflow дозволяв фактично будь-якому учаснику Pull Request ініціювати публікацію пакета шляхом додавання коментаря npm publish. При цьому відсутня перевірка повноважень користувача на виконання релізу. Завдяки механізмам npm Trusted Publishing та OIDC, workflow мав достатній рівень привілеїв для публікації шкідливих версій пакета.

Було опубліковано 10 заражених версій. Шкідливий код активувався під час встановлення пакета та намагався:

• викрасти GitHub credentials / tokens;
• отримати доступ до Google Cloud metadata;
• виявити інструменти SSH/SCP;
• переглянути список запущених процесів;
• завантажити та виконати додатковий payload за допомогою Bun.

Ключовий висновок для спеціалістів DevOps: механізми Trusted Publishing/OIDC не забезпечують захисту від компрометації, якщо сам CI/CD workflow дозволяє недовіреному користувачу ініціювати job із підвищеними привілеями. Необхідно перевіряти author_association та повноваження для команд, надісланих у PR, уникати виконання коду з недовірених PR у release jobs та максимально обмежувати доступ id-token: write.

У разі використання пакета автори рекомендують перейти на відому безпечну версію, ізолювати потенційно уражені системи та виконати ротацию усіх credentials, до яких мав доступ runner.

🚀 Pulumi pkg/v3.258.0: Changelog and go.mod updates for v3.258.0 (#24355) released

Co-authored-by: github-actions github-actions@github.com

🔗 Read more: https://github.com/pulumi/pulumi/releases/tag/pkg%2Fv3.258.0
📰 Source: GitHub Releases (IaC & Provisioning)
📅 2026-08-18 06:42 UTC

#DevOps #Tech #Automation #CloudNative

🔥 Prometheus 3.14.0 / 2026-08-17 released

[CHANGE] API: Deprecate the stats query parameter of /api/v1/query and /api/v1/query_range for values other than true and all . Other values still enable basic statistics but now return a deprecation warning; they will be rejected in the next major r...

🔗 Read more: https://github.com/prometheus/prometheus/releases/tag/v3.14.0
📰 Source: GitHub Releases (Observability)
📅 2026-08-18 08:49 UTC

#DevOps #Tech #Automation #CloudNative

🚀 Cilium 1.19.7 released

New release of Cilium in the Networking & Mesh category.

🔗 Read more: https://github.com/cilium/cilium/releases/tag/1.19.7
📰 Source: GitHub Releases (Networking & Mesh)
📅 2026-08-18 09:33 UTC

#DevOps #Tech #Automation #CloudNative

🚀 Online Boutique on EKS, GKE, and AKS — what stayed the same

Same Online Boutique on EKS, GKE, and AKS: what stayed portable (digests, Argo) vs CI, signing, and SRE forks — three pilots, then torn… Continue reading on Medium »

🔗 Read more: https://medium.com/@btilki/online-boutique-on-eks-gke-and-aks-what-stayed-the-same-c6d4a05dbcba?source=rss------platform_engineering-5
📰 Source: Medium
📅 2026-08-19 05:28 UTC

#DevOps #Tech #Automation #CloudNative

🚀 React Router v8: A Deliberately Boring Release with ESM-Only Builds and Default Middleware

<img src="https://res.infoq.com/news/2026/08/react-route-v8/en/headerimage/generatedHeaderImage-1787041418977.jpg" /><p>React Router v8 was released on June 17, 2026, with minimal breaking changes and

🔗 Read more: https://www.infoq.com/news/2026/08/react-route-v8/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global
📰 Source: InfoQ DevOps
📅 2026-08-19 06:21 UTC

#DevOps #Tech #Automation #CloudNative

🚀 When engineering delivery problems are actually organizational problems

It’s not uncommon to see companies struggling to deliver value to their business/customer in a timely manner. Sometimes they even lose the… Continue reading on Medium »

🔗 Read more: https://vicente-nvt.medium.com/when-engineering-delivery-problems-are-actually-organizational-problems-905dc434a7df?source=rss------platform_engineering-5
📰 Source: Medium
📅 2026-08-19 06:48 UTC

#DevOps #Tech #Automation #CloudNative

🚀 The Silent Cost of Fixing the Same Problem Every Week (And the Engineering Approach That Ends It)

The Problem That Shows Up as Systems Grow Continue reading on Medium »

🔗 Read more: https://medium.com/@i_m_asadjan/the-silent-cost-of-fixing-the-same-problem-every-week-and-the-engineering-approach-that-ends-it-2b524a863e0d?source=rss------sre-5
📰 Source: Medium
📅 2026-08-19 07:38 UTC

#DevOps #Tech #Automation #CloudNative

🚀 Multi Agent Collaboration Gets Persistent Compute in Bedrock AgentCore

<img src="https://res.infoq.com/news/2026/08/aws-bedrock-agentcore-runtime/en/headerimage/generatedHeaderImage-1787061024394.jpg" /><p>Amazon Web Services has extended Amazon Bedrock AgentCore with ru

🔗 Read more: https://www.infoq.com/news/2026/08/aws-bedrock-agentcore-runtime/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global
📰 Source: InfoQ DevOps
📅 2026-08-19 08:00 UTC

#DevOps #Tech #Automation #CloudNative

🚀 .NET 11 Preview 7 Brings Updates Across C#, ASP.NET Core, EF Core, and Windows Forms

<img src="https://res.infoq.com/news/2026/08/dotnet-11-preview-7/en/headerimage/twitterCard-1787081506416.jpg" /><p>Last week Microsoft released .NET 11 Preview 7, with updates across C#, ASP.NET Core

🔗 Read more: https://www.infoq.com/news/2026/08/dotnet-11-preview-7/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global
📰 Source: InfoQ DevOps
📅 2026-08-19 09:26 UTC

#DevOps #Tech #Automation #CloudNative

☸️ Optimize EKS operations with agents: Reduce MTTR with AWS DevOps Agent and a Kubernetes Operator

Introduction Running workloads on Amazon Elastic Kubernetes Service (Amazon EKS) can involve managing failures like OOMKilled or IP exhaustion. Engineers must repeatedly collect pod logs, trace events, and check node logs—a process that slows at nigh...

🔗 Read more: https://aws.amazon.com/blogs/devops/optimize-eks-operations-with-agents-reduce-mttr-with-aws-devops-agent-and-a-kubernetes-operator/
📰 Source: AWS DevOps Blog
📅 2026-08-31 09:28 UTC

#DevOps #Tech #Automation #CloudNative

Хакери зламали близько 5 тисяч акаунтів Dropbox

Dropbox повідомив про інцидент із безпекою, що стався у серпні. За даними хмарного сервісу, зловмисники отримали несанкціонований доступ приблизно до 5 тисяч облікових записів користувачів.

Devops4ua | підписатись

🚀 GitHub Copilot app for Beginners: Automate Dependabot pull request triage

Managing library updates can be tedious at times. Learn how the GitHub Copilot app can handle this type of repetitive task.
The post GitHub Copilot app for Beginners: Automate Dependabot pull request triage appeared first on The GitHub Blog.

🔗 Read more: https://github.blog/ai-and-ml/github-copilot/github-copilot-app-for-beginners-automate-dependabot-pull-request-triage/
📰 Source: GitHub Blog
📅 2026-08-26 20:12 UTC

#DevOps #Tech #Automation #CloudNative

🛠️ SRE Weekly Issue #532

View on sreweekly.com A message from our sponsor, Planetscale: PlanetScale Metal runs Postgres and Vitess on dedicated NVMe inside AWS and GCP. Get data center speed next to your app, with unlimited IOPS and no throttling. Teams routinely see a 70% d...

🔗 Read more: https://sreweekly.com/sre-weekly-issue-532/
📰 Source: SRE Weekly
📅 2026-08-31 02:11 UTC

#DevOps #Tech #Automation #CloudNative