InfoQ Homepage DevOps Content on InfoQ
-
Uber Redesigns M3DB Sharding with Subclusters to Limit Failure Impact
Uber has redesigned shard placement in M3DB with fixed size subclusters to limit the impact of node failures, maintenance, and cluster scaling. The approach bounds shard dependencies, preserves replica isolation, and uses a greedy algorithm to select shard migrations while avoiding a separate rebalancing pass and unnecessary data movement.
-
Cloudflare Introduces the Agent Development Lifecycle Stack to Replace Traditional SDLC
Cloudflare has introduced the Agent Development Lifecycle to enhance AI-driven engineering. The approach replaces the traditional SDLC, addressing bottlenecks in testing, deployment, and maintenance. Key components include automated software factories, dynamic orchestration, advanced observability, and a security model for autonomous agents, aiming for more efficient software management.
-
AWS Cannot Restore Data Held Only in Damaged Middle East Availability Zones
AWS has told customers it cannot restore resources and data hosted exclusively in the mec1-az2 availability zone in the UAE, or exclusively in the Bahrain region, after damage during the conflict with Iran. The company says the Bahrain damage spanned multiple availability zones and exceeded what its regional and multi-AZ services are designed to withstand.
-
Kubernetes 1.37 Released: Stable Metrics API and Rootless Kubelet in Beta
The Cloud Native Computing Foundation (CNCF) announced the release of Kubernetes 1.37, named "Garhwal", emphasizing its focus on stability, security, and AI/ML workload optimization.
-
Cloudflare Measures Origin TLS Preferences, Cutting Handshake Retries from 52% to 3.7%
Cloudflare has replaced its static X25519 guess for origin TLS handshakes with per-origin measurement. HelloRetryRequests on scanned origins fell from roughly 52% to 3.7%, removing over 150 ms from p90 latency. Post-quantum connections completing in one round trip rose from 0% to 99.2%, though only 12.8% of origins support it.
-
DoorDash Uses Multi Agent LLMs to Clean up 60,000 Feature Flags
DoorDash built a multi-agent LLM system to automate stale feature flag cleanup across more than 60,000 flags and 623 repositories. The workflow combines live experimentation data through MCP, engineer approval, isolated Git worktrees, parallel agents, and automated validation. In an evaluation of 50 flags, 45 produced usable pull requests at an average of 13.8 minutes and $4.79 per cleanup.
-
WSO2 Releases Agent Manager as Enterprises Look to Control Growing AI Agent Sprawl
WSO2 has announced the general availability of WSO2 Agent Manager, an open-source platform designed to provide centralized governance, identity management, security controls, and operational oversight for AI agents running across different models, frameworks, and deployment environments.
-
Kubernetes Multi-Cluster Project Karmada Reaches CNCF Graduation
The Cloud Native Computing Foundation (CNCF) announced on September 2026 that Karmada, a multi-cluster and multi-cloud Kubernetes orchestration project, has graduated. This multi-cluster and multi-cloud Kubernetes orchestration project reached CNCF's highest maturity tier.
-
Repeated VM Escapes By GPT-5.6-Cyber Based Agents Prove VMs and OS' Require Better Maintenance
Traditional virtual machines are inadequate for isolating cyber-capable autonomous agents. Tests using GPT-5.6-Cyber indicated multiple escape attempts due to kernel flaws. While Firecracker provided some containment, vulnerabilities remained. The study underscores the need for minimal attack surface virtualisation technologies and rapid, proactive patching strategies to safeguard host systems.
-
GPT-6 Astra is the First Model OpenAI Classifies as Critical for Cybersecurity
OpenAI has classified GPT-6 Astra at the Critical cybersecurity threshold under its Preparedness Framework, a first. In expert-led testing the model found previously unknown vulnerabilities in a browser and an OS kernel and built working exploits. The same system card reports a substantial decline in chain-of-thought monitorability.
-
Microsoft Open-Sources TauGrid to Simplify AI Workload Management on Kubernetes
Microsoft has open-sourced TauGrid, a cloud-native platform designed to manage, schedule, and monitor AI workloads on GPU-enabled Kubernetes clusters.
-
Lyft Moves Streaming Fleet to Apache Flink Kubernetes Operator
Lyft has moved hundreds of production Flink jobs from a 2020 in-house Kubernetes operator to the Apache Flink Kubernetes Operator, unlocking last-state upgrades, in-place autoscaling and resource autotuning across the fleet.
-
Dropbox Outlines How Focusing on Existing Infrastructure Efficiency Can Create Headroom for AI
Dropbox has outlined how a decade of infrastructure optimization is helping it absorb growing demand from AI without treating new data-center capacity as the only answer. Its work spans forecasting, fleet utilization, storage density, hardware lifecycles, and rack-level power delivery, much of it predating the current AI boom.
-
AI-Assisted Discovery Helps Microsoft Patch More Than 1,000 Vulnerabilities in a Month
With its latest September 2026 Patch, which addresses more than 950 vulnerabilities, Microsoft has patched about 2,750 vulnerabilities so far this year. While many attribute this surge to AI-assisted security research, organizations may struggle to keep pace and fully benefit from these advances, particularly when it comes to evaluating, prioritizing, and deploying patches.
-
Atlassian Automates Root Cause Analysis by Correlating Metrics, Logs and Traces
Atlassian has outlined a new approach to automating root cause analysis for large-scale cloud-native incidents, using correlation across metrics, logs, distributed traces, and service topology to generate ranked hypotheses about where failures originate and how they propagate.