Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

"No fix available" is different than "no plan"

Sometimes there's a vulnerability in a package you can't remove. Legacy dependencies don't always come with an easy fix. The one thing you don't do is bury it in the backlog with no dates and no reasoning attached. This video covers what a defensible response actually looks like: Your ability to show your work on unfixed vulnerabilities is more important than simply identifying them.

Overlapping Subnets: When Duplicate CIDRs Create Risk

An overlapping subnet can sit quietly for years - until two networks need to connect. A duplicate CIDR (Classless Inter-Domain Routing), an IP address range such as 10.0.0.0/24, may cause you no immediate trouble while networks remain isolated. During an expansion, acquisition, or cloud migration, however, that same overlap can become a connectivity blocker. Cloud peering is one place where the issue becomes unavoidable.

AI cost governance: policies to control AI spend

AI cost governance is the set of policies and controls that keep AI spend predictable and attributable: budget caps and token quotas set before deployment, prompt caching to cut repeat token costs, hard limits on reasoning steps and tool calls, and unified allocation so every dollar maps to a team, feature, or customer. Governance fails when it's advisory. It works when the caps are enforced in the platform and someone owns the number.

Gremlin app for Dynatrace - DEMO!

Dynatrace gives engineering teams deep, real-time visibility into every service they run. That visibility is the foundation of every effective reliability practice, and it's exactly the foundation Gremlin is built to extend. Once you can see how your distributed systems behave today, the next step is knowing how they'll behave under failure tomorrow—and to do it before those failures happen.

Sovereign cloud and open source: Why software freedom matters for digital sovereignty

The sovereign cloud conversation has been dominated by physical location and legal jurisdiction. Both matter. But there's a third leg most discussions skip: the software stack itself. If the platform running a sovereign cloud is proprietary code controlled by a company in another country, its sovereignty has a soft underside.

Continuous Delivery Excellence with Harness IDP | Harness Blog

This article explores how Harness Internal Developer Portal accelerates continuous delivery by providing self-service workflows, standardized deployment pipelines, and unified service catalogs. Discover how platform engineering teams use IDP to reduce deployment friction, improve developer velocity, and achieve operational excellence across the software delivery lifecycle. Why does achieving continuous delivery excellence feel like pushing water uphill when you already have CI/CD pipelines in place?

Measuring IDP Success: Metrics Beyond Tracking | Harness Blog

This guide explores outcome-based metrics for measuring Internal Developer Portal success without invasive developer tracking. Learn which KPIs demonstrate ROI—from deployment frequency to MTTR—while building trust and improving developer experience through privacy-respecting analytics. Your executive team wants to see measuring IDP success in numbers, but the moment you start tracking individual developer keystrokes, you've already lost the trust that makes the platform worth building.