Operations | Monitoring | ITSM | DevOps | Cloud

Telemetry Talks ep 6 - Observability unlocked with OpenTelemetry and VictoriaMetrics

In this episode, we explore how to build a modern Kubernetes observability stack using open-source technologies such as VictoriaMetrics, OpenTelemetry, Grafana. Based on a step by step workshop we gave at Cloud Native Days Romania in May, Jose is walking us through it with practical examples. Playlist Resources for Further Learning.

CRA turns software trust from assumed to legally required

For years, buying software meant trusting the vendor. The Cyber Resilience Act changes that relationship by codifying what vendors must do – auditing dependencies, confirming exploitable vulnerabilities, and enforcing security best practices – as legal obligations, not internal choices. For customers, that means software safety is no longer a matter of brand reputation. For vendors, it means governance gaps that were once internal concerns are now deal blockers.

On Release Days We Wear Teal Episode for release 4.19

In this episode, Leon explores some of the new features, functions, updates, and improvements in release 4.19, which includes a raft of AI-enabled features including the Cribl Apps, integrated MCP server, and the fact that AI features are now turned on by default. For more information, check out these links.

Terraform Strings: Interpolation, Heredoc & Built-In Functions

A Terraform string is just a sequence of characters, but almost everything you write in HCL touches one: resource names, tags, file paths, generated policies, connection strings. Knowing how Terraform builds, combines, and templates strings will save you from some of the more confusing errors you'll hit in a growing configuration.

Post-Quantum Cryptography and How to Prepare Your Organization

Do you actually know where encryption lives inside your infrastructure? Not the vendor's answer. The full map: every TLS handshake, every signed software update, every VPN tunnel, every certificate your systems trust. That map is where post-quantum cryptography starts to matter. The technology has moved from a research topic into a compliance deadline, and the algorithms protecting your data today were built for a world without quantum computers.

The 13 Questions CEOs Ask After an Incident (And What IT Leaders Must Be Ready to Answer)

It’s 2:47 p.m. Your checkout service has been down for 11 minutes. Customers are screenshotting errors and calling in. Your CEO walks into your office and starts asking questions. In this moment, there are two kinds of IT leaders: Whether you walk out with more budget authority (and executive trust) or less depends on your answers, and the infrastructure that supports them. But preparation isn’t just about surviving the incident. It’s actually a revenue opportunity.

How to Use JFrog CLI Without Editing Your CI Scripts

Using JFrog CLI used to come with a catch. To run a build through it, you had to put it in front of the command. For example, jf npm install instead of npm install or jf mvn package instead of mvn package per the example below: npm install → jf npm install mvn package → jf mvn package Doing that once is easy enough.

The real cost of your dependency on hyperscalers

There's a version of cloud strategy that looks like a decision and a version that looks like drift. Most enterprises are living the second version. AWS won an early workload because the team knew it. Azure followed the Microsoft enterprise agreement. GCP came in through a data science team that preferred its ML tooling. Nobody chose concentration; it just accumulated.

AI ROI is not an engineering metric

I spend most of my week talking to companies about AI ROI. A few months ago, that was still a weirdly specific conversation. Now it’s everywhere. CloudZero spends a lot of time in that conversation, so I’m glad the market is talking about it. But the conversation tends to start, and stall, in the wrong place. There are two ideas I keep coming back to: That doesn’t mean developer productivity is fake. It’s very real.