OffNet Newsroom

Daily topic roundup

Automation / DevOps / IaC

Thursday, July 09, 2026 · 6 stories, curated & summarized — click any story for the source.

Share this roundup on LinkedIn Full edition
InfoQ generaldevops

Airbnb Sitar-Agent: Dynamic Config Sidecar for K8s with SQLite and S3 Bootstrapping

Airbnb introduced Sitar-agent, a Kubernetes sidecar designed to deliver dynamic configuration updates to tens of thousands of pods with high frequency. The architecture leverages Java for the agent logic, Amazon S3 for snapshot-based bootstrapping, and SQLite as the local storage backend. This redesign replaced the previous Sparkey implementation to enhance startup performance, reliability, and overall configuration availability at scale.

  • Sitar-agent handles updates several times per minute across massive pod fleets.
  • Migration from Sparkey to SQLite improves local storage reliability and speed.
  • Amazon S3 snapshot bootstrapping accelerates initial configuration delivery.
  • Java-based sidecar ensures consistent runtime performance for config management.
  • System prioritizes availability and rapid startup in large-scale Kubernetes environments.
THE SHIFTStorage Migration Impact8SPARKEY PODS3SQLITE PODSMigration improved reliability and speed
Read at source →
AWS What's New awsdatabase

AWS SSM now manages Azure VMs with simplified hybrid pricing

AWS Systems Manager extends support to Azure Virtual Machines, allowing administrators to connect and manage them alongside EC2 instances without manual agent installation. Users can leverage Session Manager, Automation, and Patch Manager across both clouds from a single unified workflow. The update also removes the Advanced Instances Tier, shifting to a pay-as-you-go model for sessions and commands starting September 30, 2026.

  • Connect Azure VMs to SSM automatically via Cloud Connector without manual agent setup.
  • Manage AWS and Azure nodes using Session Manager, Run Command, and Patch Manager in one workflow.
  • Advanced Instances Tier is eliminated, removing upfront per-node fees for hybrid setups.
  • New pay-as-you-go pricing for Session Manager and Run Command begins September 30, 2026.
HOW IT WORKSUnified Hybrid Management Workflow1Connect Azure VMs via Cloud Connector2Manage AWS EC2 instances natively3Execute Session Manager commands4Run Automation and Patch Manager5Pay-as-you-go starting 2026
Read at source →
The Register general

China advises devs to drop Claude Code over backdoor fears

China's national vulnerability database has flagged Claude Code for containing monitoring mechanisms that forward Chinese users' data to remote servers. The advisory urges developers to discontinue use of the tool to mitigate data exfiltration risks. This action reflects heightened scrutiny of AI coding assistants regarding data sovereignty and supply chain security.

  • Chinese devs must remove Claude Code to avoid data exfiltration to remote servers.
  • National vulnerability database cites monitoring mechanisms as the primary risk factor.
  • AI coding tools face increased regulatory pressure in regions enforcing data sovereignty.
  • Review internal AI agent deployments for similar data forwarding behaviors.
Read at source →
PostgreSQL News database ↺ since 07-06

CloudNativePG 1.30.0 adds declarative roles, safer failover; 1.28 series EOL

CloudNativePG 1.30.0 introduces a DatabaseRole CRD for GitOps-friendly PostgreSQL role management and a Lease-based primary election primitive to improve failover safety. The release also includes security and operational enhancements, while maintenance versions 1.29.2 and 1.28.4 are now available. The 1.28.x series reaches End-of-Life on June 30, 2026.

  • Adopt DatabaseRole CRD for declarative, GitOps-friendly PostgreSQL role management.
  • Leverage Lease-based primary election for safer failover behavior in Kubernetes.
  • Plan upgrade from 1.28.x to 1.29 or 1.30 before EOL on June 30, 2026.
  • Update to 1.30.0 for latest security and operational improvements.
  • Maintenance releases 1.29.2 and 1.28.4 are immediately available.
CHECKLISTCloudNativePG 1.30 Upgrade GuideAdopt DatabaseRole CRD for GitOps role managementUse Lease-based election for safer failoverPlan upgrade before June 2026 EOLUpdate to latest security patches
Read at source →
InfoQ generaldevops ↺ since 07-08

AWS DevOps Agent Adds AI Release Management to Validate Code Pre-Production

AWS has expanded its DevOps Agent to include autonomous release management features that assess code changes before deployment. The new capabilities automatically test software updates to validate stability and correctness prior to reaching production environments. This update aims to reduce manual validation overhead by integrating AI-driven checks directly into the release workflow.

  • AWS DevOps Agent now autonomously tests code changes before production deployment
  • AI-powered release management assesses code quality and stability automatically
  • Reduces manual validation steps by integrating pre-production checks into the agent
  • Aims to accelerate release cycles while maintaining software reliability standards
Read at source →
AWS What's New awsdatabase ↺ since 07-07

AWS ACM adds ACME v2 support for automated public TLS cert management

AWS Certificate Manager now exposes a fully managed ACME server endpoint, enabling integration with standard clients like Certbot and cert-manager. This feature allows developers to automate the issuance and renewal of 45-day public TLS certificates from Amazon Trust Services. The move supports centralized governance by letting PKI admins restrict domain scopes and wildcard policies while delegating requests to application teams.

  • Deploy ACMEv2-compatible clients (Certbot, cert-manager) to automate public cert lifecycle in AWS
  • Leverage centralized governance controls to define domain scopes and enforce wildcard policies
  • Align with CA/Browser Forum mandates by automating renewal for 45-day certificate validity
  • Delegate certificate requests to app teams without distributing sensitive private keys
HOW IT WORKSAutomating Public TLS Certs1Deploy ACMEv2 Client2Request 45-Day Cert3Enforce Domain Scope4Auto-Renew Securely
Read at source →
↑