Semaine 2026-W21 · du 2026-05-18 au 2026-05-24
27 feeds · 199 articles traités · 40 sélectionnés · gemma4:e2b · 2026-05-18T08:28:51.728Z
r/devops (Tier 1) · Publié : 2026-05-15 · 83.6/10
Hi everyone, I’m a beginner DevOps engineer working with Bitbucket Pipelines, AWS ECR, and an EC2 Ubuntu instance. This pipeline builds my Flask backend Docker image, pushes to ECR, then SSH to EC2 to restart the container. It's working, but I know env management can be better Could you guys please review it and suggest improvements image: atlassian/default-image:3 pipelines: branches: main: - step: name: Build and Push to ECR services: - docker script: # Login to ECR - aws ecr get-login-pas
r/devops (Tier 1) · Publié : 2026-05-14 · 67.0/10
Disclosure: I work on Forkline, which maintains a fork of the retired Kubernetes ingress-nginx controller. NGINX published a security advisory for ngx_http_rewrite_module. The affected versions are NGINX Open Source below 1.30.1 and 1.31.0. Advisory: https://nginx.org/en/security_advisories.html CVE-2026-42945 (NVD): https://nvd.nist.gov/vuln/detail/CVE-2026-42945 NGINX labels it medium, but NVD lists CVSS v4.0 9.2 / v3.1 8.1. Trigger condition: a rewrite directive that uses unnamed PCRE capture
Kubernetes Blog (Tier 1) · Publié : 2026-05-14 · 65.5/10
The .spec.externalIPs field for Service was an early attempt to provide cloud-load-balancer-like functionality for non-cloud clusters. Unfortunately, the API assumes that every user in the cluster is fully trusted, and in any situation where that is not the case, it enables various security exploits, as described in CVE-2020-8554 . Since Kubernetes 1.21, the Kubernetes project has recommended that all users disable .spec.externalIPs . To make that easier, Kubernetes also added an admission contr
r/devops (Tier 1) · Publié : 2026-05-17 · 64.8/10
Hi r/DevOps , I am a beginner looking to enter the industry, but I'm currently feeling quite confused about the relationship—and the differences—between DevOps and Cloud . Initially, my goal was to jump directly into the Cloud field. However, after doing some research, I learned that Cloud Engineering isn't typically an entry-level role. Most advice suggested that I need a strong foundation in DevOps first and that working in Cloud requires significant prior experience. So, I adjusted my
r/devops (Tier 1) · Publié : 2026-05-14 · 60.6/10
Hi everyone, I have recently taken over the administration of an Azure DevOps Server 2020 (on-premises) environment. The previous administrator is no longer with the company, and unfortunately, there is no existing documentation regarding the backup strategy. It appears that no automated backups have been configured via the Administration Console so far. Environment Details: Version: Azure DevOps Server 2020. Scope: Single server instance containing one Collection with two active projects.
r/devops (Tier 1) · Publié : 2026-05-17 · 58.8/10
Hi, I'm in my first real IT role infrastructure engineer role at a hosting company. Before this I was more on the telecom and hardware side, so the past couple of months have been a steep learning curve. I've picked up a lot: managing large fleets of bare-metal servers, virtualization, setting up monitoring for infra(Telegraf, Grafana), Ansible automation, and some security tooling. But mainly with the help of AI tools. What I'm missing: Kubernetes (zero experience), CI/CD pipelines,
r/devops (Tier 1) · Publié : 2026-05-14 · 52.9/10
DevOps courses to start in 2026: KodeKloud- best for hands-on labs + Kubernetes Udemy DevOps Courses - cheap + beginner-friendly Coursera DevOps Courses - structured + certifications Intellipaat DevOps Course - live classes + projects + placement support TechWorld with Nana YouTube - free practical DevOps learning submitted by /u/Ashishthakur56 [link] [comments]
Korben (Tier 1) · Publié : 2026-05-15 · 52.9/10
Bon, accrochez vous les amis, car ça enchaine sec sur le kernel Linux en ce moment... Le chercheur William Bowling de l'équipe V12 security vient de lâcher Fragnesia (CVE-2026-46300, CVSS 7.8), un nouvel exploit kernel Linux qui permet d'obtenir un accès root sur toutes les distros majeures, et ce, 8 jours seulement après le patch de Dirty Frag . Et la mauvaise nouvelle, en fait, c'est que Fragnesia tape dans la même surface d'attaque que Dirty Frag , mais via un bug logique différent qui n'est
GitLab Blog (Tier 1) · Publié : 2026-05-13 · 51.2/10
AI-assisted development is moving faster than the security models built to govern it — agents write code, open merge requests, and ship changes at a pace where vulnerabilities go unnoticed. The problem isn't a shortage of scanning tools; it's that security lives outside the workflow where decisions actually get made and policies become suggestions. GitLab Ultimate changes that by making application security a core property of the platform itself, not a portal developers have to visit sep
Kubernetes Blog (Tier 1) · Publié : 2026-05-15 · 51.2/10
Back in Kubernetes 1.28, we introduced the Mixed Version Proxy (MVP) as an Alpha feature (under the feature gate UnknownVersionInteroperabilityProxy ) in a previous blog post . The goal was simple but critical: make cluster upgrades safer by ensuring that requests for resources not yet known to an older API server are correctly routed to a newer peer API server, instead of returning an incorrect 404 Not Found . We are excited to announce that the Mixed Version Proxy is moving to Beta in Kubernet
Kubernetes Blog (Tier 1) · Publié : 2026-05-13 · 49.7/10
AI/ML and batch workloads introduce unique scheduling challenges that go beyond simple Pod-by-Pod scheduling. In Kubernetes v1.35, we introduced the first tranche of workload-aware scheduling improvements, featuring the foundational Workload API alongside basic gang scheduling support built on a Pod-based framework, and an opportunistic batching feature to efficiently process identical Pods. Kubernetes v1.36 introduces a significant architectural evolution by cleanly separating API concerns: the
r/devops (Tier 1) · Publié : 2026-05-16 · 49.0/10
Hi everyone! I recently started a new role, shifting my focus away from pure software development. To be honest, it’s a relief: I never felt coding as something fitting for me. Currently, I’m leaning into SRE and Architecture tasks. I’ve done similar work in the past with AWS, but now I’m diving deep into Kubernetes. To give you some context: I’m currently helping design and implement an architecture for processing satellite data. I have a lot of freedom in both the design phase and the implemen
OpenTelemetry Blog (Tier 1) · Publié : 2026-05-14 · 45.4/10
Your AI agent just took 45 seconds to answer a simple question. Was it the model? A slow tool call? A retry loop? Every time an application calls an LLM, a chain of model calls, tool invocations, and token exchanges happens behind the scenes — and without observability, you are guessing. The OpenTelemetry Semantic Conventions for Generative AI give you that visibility. They standardize how GenAI operations are recorded — the model being called, input and output token counts, and when opted in, t
DevOps.com (Tier 1) · Publié : 2026-05-15 · 37.5/10
The latest series of attacks using the notorious Shai-Hulud worm puts into sharp focus the threats facing software developers and their CI/CD pipelines, an issue that has been raised in recent months as bad actors increasingly turn their attention to DevOps environments. That said, these most recent Shai-Hulud incidents attributed to the TeamPCP group also […]
DevOps.com (Tier 1) · Publié : 2026-05-15 · 37.3/10
Observability transforms continuous testing from quality gates into reliability signals. Cloud-native teams ship faster because they know their systems better — traces reveal bottlenecks, synthetics catch regressions and security telemetry prevents breaches.
The New Stack (Tier 1) · Publié : 2026-05-15 · 37.1/10
If you believe all the vendor ads out there, AI tools built to boost your company’s security operations center (SOC) The post Why AI is failing in the security operations center appeared first on The New Stack .
Kubernetes Blog (Tier 1) · Publié : 2026-05-12 · 36.0/10
Since its original implementation in the Linux kernel in 2018, Pressure Stall Information (PSI) has provided users with the high-fidelity signals needed to identify resource saturation before it becomes an outage. Unlike traditional utilization metrics, PSI tells the story of tasks stalled and time lost, all in nicely-packaged percentages of time across the CPU, memory, and I/O. With the recent release of Kubernetes v1.36, users across the ecosystem have a stable, reliable interface to observe r
HashiCorp Blog (Tier 1) · Publié : 2026-05-11 · 34.2/10
HCP Terraform and Terraform Enterprise continue to reduce operational overhead and strengthen governance and security across the entire infrastructure lifecycle.
Kubernetes Blog (Tier 1) · Publié : 2026-05-15 · 34.2/10
This article was originally published with the wrong date. It was later republished, dated the 15th of May 2026. Kubernetes v1.36 introduces a new alpha counter metric route_controller_route_sync_total to the Cloud Controller Manager (CCM) route controller implementation at k8s.io/cloud-provider . This metric increments each time routes are synced with the cloud provider. A/B testing watch-based route reconciliation This metric was added to help operators validate the CloudControllerManagerWatch
r/devops (Tier 1) · Publié : 2026-05-16 · 34.1/10
Hi all, I’ve been working at an MNC for about 3.5 years now. I started as a total fresher with zero real project knowledge. They initially trained me on Linux administration, then I moved over to cloud stuff, and right now, I’m stuck doing SAP Basis L1 support for a client. To be honest, out of my 3.5 years, I spent about 8 months on a some project just doing basic health checks—basically testing if buttons worked or if addresses were loading correctly to catch obvious bugs. In my current SAP Ba
DZone DevOps (Tier 1) · Publié : 2026-05-14 · 32.8/10
The era of the ‘Developer’ who manages everything from CSS to Kubernetes is ending. For more than a decade, DevOps has been one of the most influential movements in software engineering. It reshaped how teams build, deploy, and operate software by breaking down the traditional wall between development and operations. Automation, continuous delivery, infrastructure as code (IAC), and collaboration became the industry standard. Yet, as we move through 2026, a provocative phrase is dominating the h
r/devops (Tier 1) · Publié : 2026-05-14 · 30.6/10
I work as a DevOps engineer at an AI startup, and we are running into a new problem. With tools like Cursor and Claude Code, more people across the company are building small internal apps on their own — not just developers, but also folks from marketing, product, and sales. These apps often get deployed quickly on platforms like Vercel, Cloudflare Pages, or Netlify. The concern is that this can become a security and governance mess very fast. Right now, I am trying to figure out a practical way
GitLab Blog (Tier 1) · Publié : 2026-05-13 · 30.2/10
A typical enterprise vulnerability report surfaces hundreds of findings per scan cycle, all ranked by the Common Vulnerability Scoring System (CVSS). The problem: CVSS describes the theoretical characteristics of a Common Vulnerabilities and Exposures (CVE), not whether it matters in your environment. A Critical vulnerability in an internal-only utility library is not the same risk as a Medium vulnerability in a public-facing authentication service, but they're treated identically until some
DZone DevOps (Tier 1) · Publié : 2026-05-13 · 30.0/10
The article explores the transformative impact of AI on multi-cloud integration , particularly from the perspective of an industry veteran. It discusses the initial skepticism towards AI tools, the shift to decentralized integration methods, and the advantages AI brings to compliance, security, and API management. The author shares personal experiences from projects in various industries, including healthcare, finance, and tech. Key takeaways include the necessity of embracing AI-driven solution
r/devops (Tier 1) · Publié : 2026-05-18 · 29.8/10
I began my project as a cybersecurity evidence and 3rd party secure access platform that sits above existing security for those times cases are elevated and the process becomes part of the risk. But I came to the conclusion that my thinking was too narrow. I had built the truth core first and only the terminology was cyber specific. So I changed direction. I made the truth core a general evidence handler with secure 3rd party derivative sharing and disclosure platform. I then created a cyber pac
DevOps.com (Tier 1) · Publié : 2026-05-14 · 28.5/10
Copado has added artificial intelligence (AI) agents to its DevOps platform for building and deploying custom applications for the software-as-a-service (SaaS) application platform from Salesforce. At launch, Copado is making available Agentia AI agents specifically that can be assigned plan, build and testing tasks via an orchestration agent that manages the overall workflow. Each Agentia […]
SRE Weekly (Tier 1) · Publié : 2026-05-18 · 27.8/10
View on sreweekly.com A message from our sponsor, BigPanda: No single team sees the full incident anymore. Today’s P1s break across services, teams, and infrastructure. Instead of chasing dashboards, waiting on tribal knowledge, or piecing together signals from siloed systems, BigPanda surfaces the complete picture to pinpoint root cause faster. See BigPanda for SREs Why […]
CNCF Blog (Tier 1) · Publié : 2026-05-13 · 27.8/10
As we shared in our earlier post on FluxCD, RBC Capital Markets has been on a deliberate journey to modernize our Kubernetes platform. GitOps with FluxCD gave us a solid deployment foundation. But as our platform grew,...
DevOps.com (Tier 1) · Publié : 2026-05-15 · 26.9/10
Traditional operational observability focuses on latency, errors, throughput and saturation. Migration observability needs a different category: Semantic drift.
The New Stack (Tier 1) · Publié : 2026-05-13 · 25.4/10
This week, OpenAI launched Daybreak, its cybersecurity initiative built around GPT-5.5, a tiered access framework, and Codex Security as the The post OpenAI’s Daybreak and Anthropic’s Glasswing have nearly identical benchmarks — and 3 of the same partners appeared first on The New Stack .
The New Stack (Tier 1) · Publié : 2026-05-13 · 25.3/10
Editor’s note: This article is an excerpt from Chapter 1 of the Manning book, Platform Engineering on Kubernetes. This excerpt The post Cloud native application challenges: installing the walking skeleton appeared first on The New Stack .
Korben (Tier 1) · Publié : 2026-05-17 · 25.3/10
Les cartes perforées, c'est le truc qu'on associe à l'informatique de grand papa. Des bouts de carton avec des trous dedans qui servaient à programmer les ordinateurs des années 1960. Personne n'aurait l'idée d'en utiliser aujourd'hui. Sauf Bitroller , un bidouilleur qui a eu une autre idée : et si on imprimait des cartes perforées en 3D, qu'on les laissait dans un coffre, et qu'on les relisait avec une simple webcam ?
Korben (Tier 1) · Publié : 2026-05-17 · 25.3/10
Un développeur connu sous le pseudo ThroatyMumbo a réussi à porter Windows CE 2.11, un Windows allégé que Microsoft avait sorti à la fin des années 90 pour les petits assistants personnels et certains routeurs, sur une vraie console Nintendo 64 On ne parle pas d'un émulateur ici, mais bien d'une N64 qui démarre sur un vrai bureau Windows, avec sa barre des tâches, son explorateur de fichiers et la possibilité de lancer des programmes CE.
r/devops (Tier 1) · Publié : 2026-05-17 · 25.2/10
Folks, when you have to build and test native for all 3 OS - how you managing your environments? For just linux it's kind-of obvious, but I had to support MacOS, Linux and Windows and they are constantly broken due to configuration drift and previous build state failure. So how you manage those? Or you already switched to SaaS platforms like pushed hard by marketing teams GH Actions? submitted by /u/cofe-table [link] [comments]
Korben (Tier 1) · Publié : 2026-05-17 · 25.2/10
Vous vous souvenez de l'encoche des MacBook Pro et autres Air d'Apple ? Mais siiii, celle qu'on avait tous trouvée bien moche en 2022, au point que je vous avais pondu un article entier pour la faire disparaître ! Hé bien 4 ans plus tard, sk-ruban a décidé de lui donner une vraie utilité avec notchi qui transforme proprement cette encoche maudite en un compagnon fait de pixel-art et d'amour qui réagit en temps réel à votre Claude Code.
r/devops (Tier 1) · Publié : 2026-05-14 · 25.1/10
I work in IT as a DevOps Engineer. Currently unemployed and a little bit desperate to get a job, but there is no rush or pressure as I have the unemployment benefit and some savings on my bank account. I currently going through different interview processes, in this field interviews could takes months with at least 3 interview rounds and this makes things very difficult to have multiple offers at the same time so I can make a good decision with all of the options available. Last time I accepted
r/devops (Tier 1) · Publié : 2026-05-17 · 25.1/10
We're considering deploying Claude Code to our development team, but our security team has concerns. Specifically: - How do you monitor what Claude Code does on employee machines? - Do you have visibility into the APIs it calls? - How do you handle compliance/audit requirements? Has anyone dealt with this? Would love to hear how other companies are approaching this problem. submitted by /u/Sweaty-Career330 [link] [comments]
HashiCorp Blog (Tier 1) · Publié : 2026-05-12 · 25.0/10
Terraform Enterprise 2.0 helps organizations scale infrastructure operations, strengthen governance, and reduce operational complexity.
Korben (Tier 1) · Publié : 2026-05-16 · 24.5/10
Sur un PC, l'ordonnanceur du système (le scheduler en anglais), c'est ce petit bout du noyau qui décide quelle tâche tourne sur quel cœur du processeur, et pendant combien de temps. Plus il est malin, plus la machine est fluide. Peter Zijlstra, l'un des développeurs historiques du noyau Linux, vient de proposer un patch baptisé "sched: Flatten the pick" qui réorganise la façon dont l'ordonnanceur attribue les priorités. Et les résultats sur le gaming, surtout sur du vieux matériel, son
HashiCorp Blog (Tier 1) · Publié : 2026-05-12 · 24.0/10
HashiCorp Vault now enables enterprises to manage agentic IAM including trusted identities, delegated authorization, fine-grained controls and end-to-end tracing.
Généré par veille-auto · Modèle : gemma4:e2b