TLDR DevOps 2025-10-29

Engineering teams ship containers, spin up serverless functions, and provision databases by the dozen. Meanwhile, security teams face three compounding problems: more identities to manage, more access requests to process, and an explosion of resources to track.

Legacy security tools can't keep up. The result? Entitlement creep, visibility gaps - and when audit season arrives, you're building spreadsheets trying to figure out who has access to what, when, and why.

StrongDM provides a single identity-aware access layer across databases, servers, cloud consoles, and internal applications. Instead of bolting on another tool, StrongDM sits above the infrastructure to give Security, IAM, and DevOps teams unified control.

Start your free trial

The Certified Meshery Contributor (CMC) certification has been launched, marking the first of its kind for the CNCF. This program validates technical proficiency in contributing to the Meshery open-source project through five distinct exams covering major architectural domains, with a passing threshold of 70%. Tailored for developers with intermediate skills in Go, React, and OpenAPI schemas, the free certification aims to acknowledge and authenticate the expertise of active contributors in the Meshery ecosystem.

Cloudflare has announced an Open Beta for tracing on Cloudflare Workers, providing automatic instrumentation and visualization of application request flows within the Cloudflare dashboard. Users can also export logs and traces to OpenTelemetry-compatible providers. Viewing traces in the Cloudflare dashboard will be free until January 15, after which Workers Free and Paid plan pricing will apply. Exporting traces will require a Workers Paid subscription.

This post introduces a data-driven framework to quantify Internet resilience that focuses on a network's ability to withstand disruptions and recover rapidly from failures like the 2022 Rogers outage that impacted over 12 million users in Canada. The framework uses public data to measure factors like diverse routing paths, secure routing, and market competitiveness, emphasizing the importance of interconnectedness among Autonomous Systems (ASes) for a stable and reliable Internet. Key metrics include the number and distribution of Internet Exchange Points (IXPs), peering participation rates, diversity of IXP membership, and the geographic distribution of infrastructure, along with assessing network hygiene through practices like RPKI and BCP-38.

Parent-child pipelines in GitLab allow large CI/CD processes to be broken into smaller, manageable pipelines, enabling variable and artifact sharing between parent and child jobs. Variables can be passed using dotenv reports, needs, inputs, or the GitLab Package Registry, supporting workflow orchestration for both Premium/Ultimate and Community Edition users.

This project demonstrates deploying and managing Linux and Windows VMs in Azure with secure configurations using NSGs, Azure Bastion, and backup via Recovery Services Vault. It covers VM setup, network segmentation, public IP assignment, high availability considerations, cost optimization, and testing services like Nginx for practical verification.

The Docker MCP Toolkit, coupled with Claude Desktop, lets users automate developer tasks by securely connecting Claude to Docker's containerized environment. Through Docker's Model Context Protocol (MCP), Claude can now perform real-world actions like deploying containers and managing GitHub repositories, turning hours of work into minutes. The toolkit allows users to take a screenshot of any app UI and have Claude recreate it as a fully-tested React component with Jest tests, a GitHub repo, and deployment.

OutSystems Agent Workbench provides an all-in-one agentic solution for the complete AI agent development lifecycle – from creation and customization to delivery and monitoring - with enterprise security and governance embedded at every step. Easily integrate your agents into apps, data, and workflows to drive value across your business. Start for free

Omarchy is a new opinionated Linux distribution released by DHH.

Dyad, a local, open-source AI app builder, has been launched as an alternative to Lovable, v0, and Bolt.

Organizations are turning to OpenSearch as a cost-effective alternative to expensive legacy log analytics platforms, offering advanced log analysis with Piped Processing Language and enterprise-scale performance via Apache Calcite. The platform unifies querying, visualization, and alerting in a single workflow while supporting flexible analytics, seamless migration, and community-driven enhancements.

Amazon has expanded EKS Auto Mode with new features that strengthen security, improve network flexibility, and enhance performance for Kubernetes workloads. The updates include customer-managed KMS encryption, enterprise certificate bundle support, separate pod subnets, proxy configuration options, and optimized node lifecycle management, enabling faster scaling, better compliance, and more reliable capacity for AI and enterprise applications.

Find out how to decide between Adobe's SDKs, open source tools, or other alternatives in this guide by Datalogics.

Internet disruptions observed during the third quarter of 2025 included government-directed shutdowns in Sudan, Syria, Iraq, and Venezuela, cable cuts in multiple countries, power outages, damage from an earthquake and fire, a targeted cyberattack on YemenNet (AS30873), and issues with China's Great Firewall.

Octopus has partnered with Arm to deliver secure, scalable, and repeatable software deployments across Arm-powered infrastructure, extending its Continuous Delivery capabilities from x86 to Arm environments.