DevOps Practices & Tools

devops

DevOps is the set of practices that shorten the path from code to production while keeping systems reliable — automated CI/CD, infrastructure as code, observability, and a culture of shared ownership between development and operations. These guides are implementation-first: pipelines, deployment strategies, monitoring, and incident readiness.

The focus is on repeatable patterns for platform and application teams — safe releases, fast feedback, and reducing operational risk — illustrated with concrete tooling and real tradeoffs.

Related:Kubernetes CI/CD Cloud

GitHub made local sandboxing generally available for Copilot CLI on October 7, so the default now restricts the agent instead of trusting it.

••yesterday

GitHub Copilot CLI Sandboxing Is GA: What Actually Changed

GitHub made local sandboxing generally available for Copilot CLI on October 7, so the default now restricts the agent instead of trusting it.

Kiril Urbonas·10

Read article

A compromised npm release went after cloud credentials as expected, and local AI coding-assistant config files, which most teams never treated as secrets.

••4 days ago

The Tensorlake npm Compromise Targeted Your AI Tool Configs

A compromised npm release went after cloud credentials as expected, and local AI coding-assistant config files, which most teams never treated as secrets.

Kiril Urbonas·4

Read article

GitLab is capping unauthenticated API calls at 60 an hour starting October 19, and the preview windows land before most teams will have noticed.

••last week

GitLab's New Rate Limits: What to Fix Before Oct 19

GitLab is capping unauthenticated API calls at 60 an hour starting October 19, and the preview windows land before most teams will have noticed.

Kiril Urbonas·54

Read article

Microsoft's Storm-3068 report used zero malware to steal Kubernetes credentials, just a password reset, a pipeline edit, and permissions nobody had scoped down.

••2 weeks ago

Storm-3068: A CI/CD Pipeline Is a Kubeconfig Exfiltration Machine

Microsoft's Storm-3068 report used zero malware to steal Kubernetes credentials, just a password reset, a pipeline edit, and permissions nobody had scoped down.

Kiril Urbonas·10

Read article

Docker put AI coding agents in hosted microVMs instead of containers, because a container was never the isolation boundary this job needed.

••2 weeks ago

Docker Cloud Sandboxes: Why Agents Need MicroVMs, Not Containers

Docker put AI coding agents in hosted microVMs instead of containers, because a container was never the isolation boundary this job needed.

Kiril Urbonas·5

Read article

Zed says agents made pull requests obsolete and shipped Delta to replace them. The review unit needs rethinking, but review itself, and the gates around it, stay.

••2 weeks ago

Zed Delta and the Pull Request: Obsolete, or Just Overloaded?

Zed says agents made pull requests obsolete and shipped Delta to replace them. The review unit needs rethinking, but review itself, and the gates around it, stay.

Kiril Urbonas·21

Read article

••3 weeks ago

Kubernetes Readiness Probes Lie During Rolling Updates

A green readiness probe means the probe endpoint answered, nothing more. The gaps that cause 502s during rollouts, and the Deployment settings that close them.

Kiril Urbonas·12

Read article

Kubernetes is promoting KYAML, a strict subset of YAML that any parser accepts. It kills type coercion and indentation bugs without a migration.

••3 weeks ago

KYAML: Kubernetes YAML Without the Norway Problem

Kubernetes is promoting KYAML, a strict subset of YAML that any parser accepts. It kills type coercion and indentation bugs without a migration.

Kiril Urbonas·12

Read article

••3 weeks ago

EU CRA Article 14: What DevOps Teams Should Wire In Now

Since 11 September 2026 the 24-hour clock for actively exploited vulnerabilities is live. The owner, the decision path, the SBOM lookup, and the runbook you need this month.

Kiril Urbonas·10

Read article

A background cleanup job saturated the database behind GitHub's permission checks, and the safeguard pacing it watched only replica lag. Throttle on more than one signal.

••0 months ago

GitHub's September 13 Outage: One Cleanup Job, 28 Services

A background cleanup job saturated the database behind GitHub's permission checks, and the safeguard pacing it watched only replica lag. Throttle on more than one signal.

Kiril Urbonas·16

Read article

The control plane fee is the least interesting number. What separates managed Kubernetes providers is upgrade cadence, how much they run for you, and where the node bill lands.

••last month

Best Managed Kubernetes in 2026: EKS vs GKE vs AKS vs DOKS

The control plane fee is the least interesting number. What separates managed Kubernetes providers is upgrade cadence, how much they run for you, and where the node bill lands.

Kiril Urbonas·17

Read article

Every log platform looks affordable at proof-of-concept volume and expensive at production volume. The pricing model, not the feature list, decides which one you can live with.

••last month

Best Log Management Tools in 2026: What You Actually Pay For

Every log platform looks affordable at proof-of-concept volume and expensive at production volume. The pricing model, not the feature list, decides which one you can live with.

Kiril Urbonas·15

Read article

Frequently asked questions

What is DevOps?

DevOps is a way of working that combines software development and IT operations to deliver changes faster and more reliably, using automation (CI/CD, infrastructure as code), monitoring, and shared responsibility for the whole lifecycle of a service.

What tools are used in DevOps?

Common tools include Git for version control, CI/CD systems (GitHub Actions, GitLab CI, Jenkins), containers (Docker) and orchestration (Kubernetes), infrastructure as code (Terraform, Ansible), and observability stacks (Prometheus, Grafana). The exact set depends on the team's stack.