Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Monitor Nginx with OpenTelemetry Tracing

At 3:47 AM, your NGINX logs show a 500 error. Around the same time, your APM flags a spike in API latency. But what's the root cause, and why is it so hard to correlate logs, traces, and metrics? When API response times cross 3 seconds, identifying whether the slowdown is at the NGINX layer, the application, or the database shouldn't require guesswork. That's where OpenTelemetry instrumentation for NGINX becomes essential.

Accelerate Your Deployment Frequency: Strategies to Remove Bottlenecks

Is slow deployment hindering your mid-size organization? This guide tackles common deployment bottlenecks like manual processes and inconsistent environments head-on. Discover actionable strategies for faster, safer releases, including CI/CD automation, Infrastructure-as-Code (IaC), GitOps, and cultivating a strong DevOps culture.

Speed up PR reviews with actionable code suggestions

Hello, Bitbucket fans It’s Dave from the Bitbucket Cloud product team. We’re happy to introduce another enhancement to help your team better collaborate around code reviews, saving you valuable time – the ability to propose specific code suggestions within a pull request. Code authors can view and apply the proposed code changes without switching contexts, helping teams get pull requests completed even more efficiently. This feature is available today to all teams using Bitbucket Cloud.

Credentials and Flyway: Keep Secrets Safe with Resolvers

Managing credentials gets trickier as your Flyway project grows, especially when databases contain sensitive data. In this episode, Tony and Tonie break down how Flyway’s Property Resolvers help you keep secrets safe by pulling them securely from local or cloud-based stores, avoiding hardcoding them into config files.

API Security: Validating Auth and Access with Traffic Simulation Starts with Behavior

Security breaches rarely begin with a hidden zero-day exploit or a complex web of escalated hacks. They often start in very simple ways – an internal team member is breached, a permission is misconfigured, an overly permissive API endpoint is overlooked, or a JWT simply doesn’t expire. An API, or application programming interface, is a set of protocols and tools that enable different software systems to communicate and exchange data, making them essential in modern software development.

Fix Vulnerabilities Faster: Puppet's Advanced Patching Solution

Break down patching silos and remediate vulnerabilities faster with Puppet. Most CVEs sit unaddressed for weeks, even after your scanner picks them up. Vulnerability Remediation in Advanced Patching (a Puppet Enterprise Advanced exclusive) gives Security and Ops teams an easy-to-use dashboard for finding, fixing, and reporting on vulnerabilities. No more tossing CVEs over the fence. No more finger-pointing when things go wrong. Just swift, efficient vulnerability management.

Looking beyond dev productivity to increase speed ft. Brian Guthrie of Justworks

Speed isn't just about developer productivity—it's about market dominance. Rob sits down with Brian Guthrie, Director of Engineering at Justworks and former ThoughtWorks consultant, to explore why lead time from conception to production should be your organization's north star metric.

Kubernetes Clusters Break in the Weirdest Ways

If you’ve ever spent hours chasing a weird issue in your Kubernetes cluster, you’re in good company. Reddit’s r/kubernetes is full of hilarious and painful stories about clusters going off the rails for reasons no monitoring dashboard ever predicted. And while it’s easy to laugh after the fact, each of these moments highlights just how important observability is because these kinds of problems don’t show up on your radar until it’s too late.