Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Securely quarantine suspect packages using Rego code with Cloudsmith's Enterprise Policy Management.

Software supply chain attacks are becoming more sophisticated, and Cloudsmith tackles this head-on with EPM. Using a set of tools, including a policy-as-code approach, you can tailor security policies to be as simple or as advanced as you need. Define any policy using Rego code and Open Policy Agent (OPA) to be highly prescriptive and catch suspect or non-compliant software artifacts before the damage is done..

Securing Containers at Scale: Docker Hardened Images + Cloudsmith

Containers have been with us for a while and are ubiquitous in the Secure Software Development Life Cycle (SSDLC). According to some reports, nearly 60% of organizations use containers for most or all of their production applications. It’s no surprise really, as containers provide consistency and standardization across the lifecycle while speeding up delivery pipelines. They revolutionized how we develop and deploy apps in the cloud and there is no sign of this changing anytime soon.

A Simple Guide to Monitoring and Optimizing Prometheus CPU Usage

Prometheus is supposed to help you monitor your stack, not become the thing you need to monitor. But if you’ve ever seen it spike in CPU and slow everything down, you know that’s not always the case. High Prometheus CPU usage usually shows up when you're scraping too many metrics, using expensive queries, or running with default configs that don’t fit your workload. This guide covers how to track Prometheus CPU usage, what typically causes it, and how to fix it.

VPC Log Format: Custom and Advanced Configurations

VPC Flow Logs come with a default format that gives you basic network traffic details. But you can tweak the format to capture exactly what you need. This can lower costs, speed up processing, and make your logs fit better with what you’re trying to monitor. If you want to improve security, keep an eye on performance, or save money, adjusting your VPC logs can make a big difference. Let’s take a look at some practical ways to customize your logs beyond the default settings.

15+ Continuous Deployment Tools To Streamline Your Workflow

In our post, 9 Continuous Delivery Tools For Reliable Releases, we explored why continuous delivery is critical to building robust development pipelines — and how it helps teams deliver customer value while boosting the bottom line. Today, we’re diving into the next evolution of that pipeline: continuous deployment. Today’s technology companies need to release quality features quickly and put them in users’ hands even quicker.

Common Issues with Grafana Login and How to Fix Them

Grafana is a popular choice for monitoring and visualizing metrics, but login issues can quickly block your access and slow you down. Forgot your password? Can’t get into the admin account? Problems after changing authentication settings? These are some of the most common hiccups—and they’re usually easy to fix. This guide covers the frequent login problems you might face and walks you through practical ways to resolve them.

Track the Right Elasticsearch Metrics Without the Noise

Elasticsearch does a lot right—it's fast, scalable, and makes searches feel simple. But when things slow down or break, figuring out what’s going on can be frustrating. Especially if you’re not keeping an eye on the right metrics. This guide covers Elasticsearch metrics that are worth tracking and how they help you keep your cluster healthy without data overload.

OpenTelemetry vs Micrometer: Here's How to Decide

In a distributed system, things break in unexpected ways. That’s why observability isn’t optional—it’s how you understand what’s going on under the hood. If you’re comparing tools to instrument your services, OpenTelemetry and Micrometer are two names you’ll run into. Both are used to collect metrics, but they take very different approaches—especially when it comes to flexibility, vendor support, and what you can do with the data.

Port + Komodor: Bringing Kubernetes Visibility into the Modern Commercial IDP

Internal Developer Portals (IDPs) are no longer just an experimental concept—they’re now a foundational component of modern software delivery. As engineering organizations look to reduce cognitive load, increase self-service, and streamline infrastructure workflows, IDPs have emerged as the most effective way to productize platform engineering.