2026-05-29
27 feeds · 82 articles traités · 20 sélectionnés · gemma4:e2b · 2026-05-29T09:11:43.056Z
r/devops (Tier 1) · Publié : 2026-05-28 · 67.0/10
I am not the most experienced DevOps person on earth so keep that in mind. I have tried studying DevOps before and after the AI revolution and now, it simply feels like all I do is tell the AI what to do and then review. Whether its platform engineering or SRE, its all in the same circle, and I thought I was lazy when I had to only review, but I found out my team doesn't even bother because "Claude code rarely gets it WRONG" My job now is tell the AI to make a pipeline, make a plat
r/devops (Tier 1) · Publié : 2026-05-28 · 55.7/10
I am currently a DevOps engineer but with the names switching up every couple of years, it is now splitting into platform engineering and SRE and other titles. I recently decided to take a moment to see what I actually like to do so I can specialize properly, and while I liked coding, with the introduction of AI, I really want to use it as a tool and not as an agent that does everything and I review. I asked around and searched and people told me that Cloud Engineering is more architecture and c
r/devops (Tier 1) · Publié : 2026-05-29 · 33.0/10
Hey everyone, I'm looking into tightening security on our Puppet infrastructure. Currently, our environment relies on autosign = true to handle ephemeral instances and autoscaling groups seamlessly. Obviously, leaving naive auto-signing on is a massive security risk if someone requests a cert from an unauthorized node. However, setting autosign = false completely breaks our automated provisioning pipelines since we can't manually sign every instance. For those running Puppet in AWS/Azure
Lobste.rs (Tier 1) · Publié : 2026-05-29 · 31.8/10
Often there is an existing API called something like "Product API". It often also has /api/v1 in the path. To me this often feels like an antipattern, especially when the API itself uses semantic versioning: mixing the routes with the API contract. Having /v1/ in the URL while also having a major.minor.patch version: coupling the first number of the semantic version to the URL path feels counter intuitive to me, if you make a breaking change, you may need new paths and new reverse proxy routes,
r/devops (Tier 1) · Publié : 2026-05-29 · 31.7/10
Disclosure: I’m building a remediation-focused infrastructure/security project and looking for feedback on the problem space itself, not trying to sell anything. One thing I’ve noticed working in cloud/platform environments is that finding issues is usually the easy part. The harder part is everything that happens after: • tickets get opened • findings get triaged • Terraform changes get written • approvals get routed • maintenance windows get scheduled • validation gets performed • audit eviden
Hacker News (Tier 1) · Publié : 2026-05-28 · 29.9/10
Article URL: https://www.tomshardware.com/tech-industry/cyber-security/microsofts-github-bans-security-researcher-who-posted-zero-day-windows-exploits-because-company-ruined-their-life-expert-claims-action-is-vindictive-and-promises-further-retaliation Comments URL: https://news.ycombinator.com/item?id=48315968 Points: 370 # Comments: 160
DZone DevOps (Tier 1) · Publié : 2026-05-28 · 28.4/10
Editor’s Note: The following is an article written for and published in DZone’s 2026 Trend Report, Platform Engineering and DevOps: How Internal Platforms, Developer Experience, and Modern DevOps Practices Accelerate Software Delivery . The role of the enterprise developer has become more complex over time as organizations adopt new technologies and tools, often without retiring their old ones. Add high staff turnover and increasing time and cost pressure, and developers are confronted wit
It's FOSS (Tier 1) · Publié : 2026-05-28 · 28.0/10
Linux gets some relief in the absurd OS-level age verification law fiasco.
r/devops (Tier 1) · Publié : 2026-05-28 · 27.9/10
Hey everyone, Looking for some realistic engineering perspectives on a storage lifecycle problem that’s turning into a quiet standoff between our platform team and finance. A few months ago, we had to run a large data re-indexing and compaction cycle on our self-managed Postgres and Kafka clusters running on AWS EBS. To avoid any disk-full incidents during ingestion, the on-call team did the safe thing and increased several EBS volumes from around 500GB to 2.5TB. The ingestion finished, retentio
r/devops (Tier 1) · Publié : 2026-05-28 · 27.0/10
We've been thinking about AI coding tools wrong at the team level. Most evaluation starts with individual productivity: does this save a developer time? Fair question. But the company question is different. Does the work show up as something the team can inspect, validate, and build on? Private AI sessions help the person using them. They don't help the team answer: - What was the assigned work? - Did it produce a reviewable PR? - Did CI pass? - What did the reviewer actually inspect? -
The New Stack (Tier 1) · Publié : 2026-05-28 · 26.2/10
Debugging used to be straightforward: A service failed, you checked the logs, followed the stack trace, and fixed the bug. The post Debugging the undebuggable: building observability into probabilistic AI systems appeared first on The New Stack .
Korben (Tier 1) · Publié : 2026-05-28 · 25.3/10
Les chercheurs de X41 D-Sec viennent de divulguer une faille critique baptisée BadHost (CVE-2026-48710) dans Starlette, le framework Python qui sert de fondation à FastAPI, vLLM , LiteLLM et une grande partie des serveurs MCP basés sur FastAPI. 325 millions de téléchargements par semaine, et il suffit d'injecter un seul caractère dans le header HTTP "Host" pour contourner les contrôles d'accès path-based qui lisent "request.url.path" dont autant dire que beaucoup de déploieme
CNCF Blog (Tier 1) · Publié : 2026-05-28 · 24.5/10
I still remember the first time we lost sleep over something that wasn’t a bug. It was a Tuesday. Grafana dashboards showed blank panels for Cilium network metrics. Hubble was working fine — DNS visibility, TCP...
Korben (Tier 1) · Publié : 2026-05-28 · 23.6/10
Voilà qui est rigolo. Un développeur malveillant a essayé de voler les fichiers sensibles des utilisateurs de Claude (l'assistant IA d'Anthropic, concurrent d'OpenAI sur les modèles de langage) en uploadant un package npm piégé. Sauf que dans son code, il a laissé son propre token d'authentification GitHub privé. Les chercheurs n'ont eu qu'à le récupérer pour remonter jusqu'à lui. Le package s'appelait mouse5212-super-formatter. Il se présentait comme un utilitaire interne de synchronisation de
r/devops (Tier 1) · Publié : 2026-05-29 · 23.4/10
Last time i bought all CKA CKAD CKS certificate exams and today i bought the kodekloud standard subscription what u wanna advice me through my journey i am coming from software engineering 6 years software engineer , my plan is just to follow the kodekloud plan and prerequesties like linux,docker,intro to kubernates then CKA , CKAD,CKS. submitted by /u/Future-Zone2872 [link] [comments]
The New Stack (Tier 1) · Publié : 2026-05-28 · 22.3/10
The transition from traditional web applications to agentic ecosystems is more than a change in the UI; it is a The post The agentic identity crisis: Why your security isn’t ready for the AI revolution appeared first on The New Stack .
Hacker News (Tier 1) · Publié : 2026-05-28 · 21.7/10
Article URL: https://sfstandard.com/2026/05/28/sf-startup-secretly-testing-robots-airbnbs-trashing-lawsuit-claims/ Comments URL: https://news.ycombinator.com/item?id=48317093 Points: 205 # Comments: 98
DevOps.com (Tier 1) · Publié : 2026-05-28 · 19.8/10
By establishing a robust DevOps foundation now, organizations can leverage these emerging predictive capabilities to transform reactive pipelines into proactive, self-correcting release architectures.
HashiCorp Blog (Tier 1) · Publié : 2026-05-28 · 19.7/10
HashiCorp Vault 2.0 adds beta SCIM support, letting organizations standardize user and group provisioning from external identity platforms into Vault.
DevOps.com (Tier 1) · Publié : 2026-05-28 · 18.0/10
Record observability spending is driving up MTTR. Discover why tool sprawl and excessive dashboard data cause cognitive overload for on-call engineers, and how to fix it.
Généré par veille-auto · Modèle : gemma4:e2b