Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

VirtualMetric Earns ISO 27001:2022 Certification: Security at Every Level

We’re excited to share that VirtualMetric has officially achieved ISO 27001:2022 certification, a globally recognized standard for building and managing an effective Information Security Management System (ISMS). This confirms that we’ve implemented robust controls to protect data, manage risks, and ensure the resilience of our infrastructure in today’s security landscape.

Credentials and Flyway: Keep Secrets Safe with Resolvers

Managing credentials gets trickier as your Flyway project grows, especially when databases contain sensitive data. In this episode, Tony and Tonie break down how Flyway’s Property Resolvers help you keep secrets safe by pulling them securely from local or cloud-based stores, avoiding hardcoding them into config files.

API Security: Validating Auth and Access with Traffic Simulation Starts with Behavior

Security breaches rarely begin with a hidden zero-day exploit or a complex web of escalated hacks. They often start in very simple ways – an internal team member is breached, a permission is misconfigured, an overly permissive API endpoint is overlooked, or a JWT simply doesn’t expire. An API, or application programming interface, is a set of protocols and tools that enable different software systems to communicate and exchange data, making them essential in modern software development.

Let Git Find the Bug for You (No Guessing)

Somewhere in your commit history, a bug snuck in. You could scroll. Panic. Guess. Or — you could let Git find the exact commit that broke your code. In this episode of Wait… Git Can Do That?, we show you how git bisect binary-searches your history to isolate the problem — fast, clean, and testable. Use git bisect start, good, and bad Test each step to narrow it down Or automate it with git bisect run.

How to ensure your AWS workloads are resilient

Part of the Gremlin Office Hours series: A monthly deep dive with Gremlin experts. Cloud providers like AWS give you plenty of tools to make your workloads more resilient, but it’s up to you to apply them. However, considering how complex some of these tools are, where do you start? And how can you be sure your systems are more reliable as a result?

Kubernetes Clusters Break in the Weirdest Ways

If you’ve ever spent hours chasing a weird issue in your Kubernetes cluster, you’re in good company. Reddit’s r/kubernetes is full of hilarious and painful stories about clusters going off the rails for reasons no monitoring dashboard ever predicted. And while it’s easy to laugh after the fact, each of these moments highlights just how important observability is because these kinds of problems don’t show up on your radar until it’s too late.

Looking beyond dev productivity to increase speed ft. Brian Guthrie of Justworks

Speed isn't just about developer productivity—it's about market dominance. Rob sits down with Brian Guthrie, Director of Engineering at Justworks and former ThoughtWorks consultant, to explore why lead time from conception to production should be your organization's north star metric.

Fix Vulnerabilities Faster: Puppet's Advanced Patching Solution

Break down patching silos and remediate vulnerabilities faster with Puppet. Most CVEs sit unaddressed for weeks, even after your scanner picks them up. Vulnerability Remediation in Advanced Patching (a Puppet Enterprise Advanced exclusive) gives Security and Ops teams an easy-to-use dashboard for finding, fixing, and reporting on vulnerabilities. No more tossing CVEs over the fence. No more finger-pointing when things go wrong. Just swift, efficient vulnerability management.