Pulumi ESC just leveled up withApprovals—structured reviews for environment config changes, straight from Console, CLI, SDK, or VS Code. Think pull requests, but for your infra settings. No more YOLO updates. Teams can now lock down config changes with required sign-offs. More control. Cleaner logs.. read more  

Grafana Beyla 2.5 goes all-in on upstreamOpenTelemetry eBPF Instrumentation, baking it right into the core. This release addsauto-instrumentation for MongoDB and JSON-RPC,manual spans in Go, and tightertrace correlation for NodeJS. New in town:survey mode. Think lightweight service discovery—no ful.. read more  

Microsoft just droppedAzure Service Health Built-In Policy(Preview). It lets teams push Service Health alerts across every Azure subscription—automatically—using Azure Policy. No more piecemeal setup. It folds in AMBA lessons, supports custom rules and action groups, and locks in alert coverage at .. read more  

Typeform rolled their ownTerraform providerto wrangle runtime data through an internal API. Built with HashiCorp’sGo SDK, the official scaffolding framework, and wired up withacceptance testsfor full lifecycle muscle. They skipped the publicTerraform Registryentirely. Instead, they shipped provider.. read more  

AWS just dropped a new threat-response setup that tiesGuardDuty,EventBridge,Step Functions, andSystems Manager Run Commandinto one clean pipeline. The goal? Hunt for EC2 threats and lock downActive Directoryaccounts—automatically. GuardDuty kicks off the flow when it spots trouble. From there, Even.. read more  

A team wired up Azure DevOps’MCP serverwithGitHub Copilotto crank outPlaywrightend-to-end tests from manual test cases. They now run tests on demand from Azure Test Plans, convert entire test suites in bulk, and drop the results into CI pipelines—no hand-holding required. System shift:AI's not just.. read more  

Google Cloud's pushingGKEbeyond container orchestration, framing it as an AI inference engine. Meet the new crew: theInference Gateway(smart load balancer, talks models and hardware),custom compute classes, and aDynamic Workload Schedulerthat tunes for both speed and spend. The setup handles GPU an.. read more  

A fresh pattern’s gaining traction:Docker + Tailscale sidecarsreplacing old-school reverse proxies and clunky VPNs. Each service runs as its ownmesh-routed node, containerized and independent. The trick?Network namespace sharing.App containers hook into the Tailscale mesh with no exposed ports, no .. read more  

CNCF just dropped anAI workload conformance program, built like the Kubernetes one—so AI tools play nice across clusters. Portability, meet your referee. It’s tightening the loop betweenOpenTelemetry and OpenSearch, turning ad-hoc hacks into actual cross-project coordination. AndBackstage and GitOp.. read more  

MariaDB Kubernetes Operator 25.08.0 drops some real upgrades. First up:physical backups. Now supported through native MariaDB tools and Kubernetes CSI snapshots—huge win if you're dealing with chunky datasets and tight recovery windows. It alsodefaults to MariaDB 11.8, which brings in anative vect.. read more