DevOps
Explore the organizational team structure and vast umbrella of tools and technology created to facilitate and support it. Covering both tools and culture from internal and external viewpoints, by practitioners and analysts alike, these articles will help guide you on your adoption journey.
Top Stories
-
Conference Coverage
18 Nov 2024
KubeCon + CloudNativeCon 2024 news coverage
This guide to the North American and European KubeCon + CloudNativeCon events covers updates to Kubernetes and other open source cloud-native technologies. Continue Reading
-
News
15 Nov 2024
AI gateways, Kubernetes multi-tenancy loop in LLMOps
There are many areas of IT infrastructure affected by the emergence of LLMOps; for each, there were products and projects rolled out this week at KubeCon. Continue Reading
-
Definition
15 Sep 2023
IT modernization
IT modernization is the process of updating an organization's information technology infrastructure, practices and systems to keep up with emerging technologies. Continue Reading
-
News
14 Sep 2023
CloudBees scales its Jenkins CI, previews SaaS platform
About a year after acquiring ReleaseIQ, CloudBees prepares the fruits of its integration for launch and adds long-awaited scale-out to its commercial version of Jenkins. Continue Reading
-
Feature
14 Sep 2023
Generative AI emerges for DevSecOps, with some qualms
New and developing tools use natural language processing to assist DevSecOps workflows, but concerns linger among developers about security risks as well. Continue Reading
-
News
13 Sep 2023
Meet MLSecOps: Industry calls for new measures to secure AI
Open source security, already in the software supply chain spotlight, must expand to include AI models, according to the OpenSSF and DevSecOps vendor JFrog. Continue Reading
-
News
30 Aug 2023
Google AI plans could spur low-code/no-code faceoff with AWS
Google's generative AI products play catch-up with Copilot and others, but the upcoming addition of Duet AI to AppSheet might fill a market gap as AWS scraps Honeycode. Continue Reading
-
News
25 Aug 2023
OpenTF begins HashiCorp Terraform fork, pledges donation
The vendor-led group says it wants to donate a fork based on the latest open source version of the infrastructure as code tool to a foundation, ideally the Linux Foundation or CNCF. Continue Reading
-
News
22 Aug 2023
VMware Tanzu portfolio reshuffled ahead of Broadcom close
VMware Tanzu incorporates Aria AIOps and FinOps products as a $69 billion acquisition by Broadcom looms, putting the product line's future in question. Continue Reading
-
News
17 Aug 2023
Vendor-led group vows to fork HashiCorp Terraform
HashiCorp Terraform is a flashpoint of contention in the wake of the vendor's move to a Business Source License, including allegations that it ignored open source contributions. Continue Reading
-
Answer
14 Aug 2023
How to roll back Git code to a previous commit
Git reset and git revert can be lifesavers for developers. Follow these examples to see which command makes the most sense when mistakes arise during development. Continue Reading
-
News
14 Aug 2023
Confusion mounts amid HashiCorp open source change
Ripple effects from HashiCorp's switch to BSL spread through the industry, raising questions among enterprise users and trepidation about the future of corporate open source. Continue Reading
-
News
11 Aug 2023
HashiCorp open source change targets competitors
HashiCorp moves to a Business Source License for all its future product releases that prohibits use for commercial purposes, renewing questions about open core business models. Continue Reading
-
Tip
11 Aug 2023
DevOps automation: Examples, tradeoffs and best practices
Automation can be a faster way of doing things right or wrong. Planning and review can determine which outcome will prevail on your DevOps automation project. Continue Reading
-
News
03 Aug 2023
IT pros mull observability tools, devx and generative AI
Observability as a common language for both developers and operations teams still has plenty of room for improvement in the era of platform engineering, according to experts. Continue Reading
-
Tip
21 Jul 2023
The dangers of Python import and how enterprises can be safe
The Python import statement carries a security risk that developers and enterprises need to watch out for. Here's how it works and why there's no easy fix. Continue Reading
-
Opinion
19 Jul 2023
Sessions at FinOps X highlight FOCUS, sustainability
Costs and sustainability are two hot topics in the FinOps world. Sessions at the FinOps X conference in June focused on these areas and how teams can make better buying decisions. Continue Reading
-
Tip
19 Jul 2023
Haskell vs. PureScript: The difference is complexity
Haskell and PureScript each provide their own unique development advantages, so how should developers choose between these two popular programming languages? Continue Reading
-
Tip
12 Jul 2023
IaC security scanning tools, features and use cases
Infrastructure-as-code templates help organizations track cloud assets and other important items. Proper IaC scanning can help companies avoid potential security pitfalls. Continue Reading
-
Tip
10 Jul 2023
Decide when and how to adopt an MLOps framework
Unsure where to start when it comes to standardizing your organization's machine learning processes? Explore key considerations and practical tips for adopting an MLOps framework. Continue Reading
-
News
27 Jun 2023
HashiCorp Vault to expand in DevSecOps with BluBracket buy
HashiCorp expands Vault's focus to include DevSecOps with the acquisition of a secrets scanning startup, setting the stage for a potential showdown with Microsoft and GitHub. Continue Reading
-
Tip
27 Jun 2023
Accelerate software delivery by practicing Lean DevOps
The Lean methodology focuses on increasing efficiency and reducing waste -- practices that can also streamline DevOps projects. Review the benefits of combining the two approaches. Continue Reading
-
Definition
26 Jun 2023
WebAssembly
WebAssembly (Wasm) is a binary instruction format for compiling and executing code in a client-side web browser. Continue Reading
-
News
21 Jun 2023
Retail companies gain DORA metrics ROI from specialist tools
DORA metrics and other measures of engineering efficiency are popping up in add-ons to existing DevOps tools. But third-party vendors added more value for Puma and Sensormatic. Continue Reading
-
Feature
21 Jun 2023
Chef founder's new venture: IT infrastructure digital twins
System Initiative, out in private beta this week, visualizes complex IT environments in digital simulations where users can test updates before real-world deployments. Continue Reading
-
News
19 Jun 2023
United Airlines clears CI/CD pipelines for takeoff
In an industry heavily affected by pandemic disruptions, United Airlines brought in a new orchestration tool to navigate fluctuating software delivery requirements. Continue Reading
-
Tip
16 Jun 2023
Microservices vs. headless architecture: A brief breakdown
Microservices and headless architectures are both techniques capable of providing flexibility and modularity, but how do you make a wise choice between them? Continue Reading
-
News
13 Jun 2023
AWS shuffles DevSecOps deck with CodeGuru Security SAST
A new DevSecOps service links AWS security code scanning to third-party pipeline tools, potentially a shot at GitHub Copilot that increases overlap with AWS SAST partners. Continue Reading
-
Opinion
08 Jun 2023
Cloud-native and observability takeaways from Cisco Live
Industry analyst Paul Nashawaty recaps key announcements from Cisco Live 2023 and shares his take on what to expect next in cloud-native development and full-stack observability. Continue Reading
-
Feature
08 Jun 2023
Cloud-native development still a work in progress for companies
Enterprise Strategy Group's Paul Nashawaty breaks down the research firm's latest survey on the state of cloud-native application development. The picture isn't perfect. Continue Reading
-
News
06 Jun 2023
Free Atlassian Jira DevSecOps tab opens doors to expansion
Vulnerability management data from Atlassian partners surfaces in a new Security in Jira tab for cloud customers, setting the stage for a potential DevSecOps expansion. Continue Reading
-
News
05 Jun 2023
Atlassian cloud preps threat tool as security boss departs
Atlassian Beacon shores up cloud security as it adds transparency around security issues, but the chief trust officer role at the company is also changing hands. Continue Reading
-
Definition
02 Jun 2023
Ansible playbook
An Ansible playbook is an organized unit of scripts that defines the tasks involved in managing a system configuration using the automation tool Ansible. Continue Reading
-
Definition
02 Jun 2023
continuous deployment
Continuous deployment is a strategy for software development and releases in which every code change is automatically run through a pipeline of tests and inspections before being pushed into production. Continue Reading
-
Feature
25 May 2023
Now a DevOps platform, OpenShift ups value -- and complexity
Red Hat raises OpenShift's profile as a DevOps platform with software supply chain security but faces questions about networking strategy and observability staff departures. Continue Reading
-
Tip
22 May 2023
Generative AI use cases for DevOps and IT
Generative AI is often associated with creative projects, but it has promising use cases in DevOps and IT workflows -- if organizations account for its risks and limitations. Continue Reading
-
Tip
16 May 2023
SBOMs and security: What IT and DevOps need to know
By integrating software bill of materials creation into the software development lifecycle, IT and DevOps teams can build more secure and maintainable applications. Continue Reading
-
Tip
12 May 2023
5 best practices for building a strong DevOps culture
Under the CALMS framework, establishing an open, collaborative culture from the outset is just as important as tools and technologies when starting out on your DevOps journey. Continue Reading
-
Tip
03 May 2023
Unify business and IT with DevOps value stream management
Value stream management can be a powerful tool to align DevOps with the business by optimizing data analysis and improving collaboration and reporting. Continue Reading
-
News
02 May 2023
Citing data privacy, GitLab syncs with Google generative AI
GitLab's deal with Google lets it keep sensitive customer data in the GitLab cloud while training models, amid enterprise concerns about generative AI licensing and security risks. Continue Reading
-
Tip
01 May 2023
Stay ahead of threats with DevOps security best practices
Unsure where to start when it comes to securing your DevOps environment? Taking these five actions can strengthen your organization's defenses against cyber attacks. Continue Reading
-
News
28 Apr 2023
Amid supply chain attacks, emerging vendor rethinks SBOM
Early adopters such as Swisscom have used startup Codenotary’s notarization system to establish and track the provenance of software artifacts in pipelines and production. Continue Reading
-
Opinion
26 Apr 2023
Takeaways and emerging trends from KubeCon Europe 2023
An industry analyst shares key highlights and trends to watch from this year's KubeCon + CloudNativeCon Europe, including adoption of large language models and WebAssembly. Continue Reading
-
Tip
21 Apr 2023
A quick look at the Carbon programming language
Carbon is an experimental programming language built to stand on the shoulders of C++ -- but with a new outlook on memory safety, threading and functional programming. Continue Reading
-
News
19 Apr 2023
Atlassian demos ChatGPT tie-ins for Confluence, Jira Cloud
Atlassian teased early previews of cloud platform AI that supports natural language queries and automated links between Jira, Confluence and third-party products. Continue Reading
-
Tip
13 Apr 2023
Platform engineering vs. DevOps: What's the difference?
Platform engineering and DevOps both contribute to successful software development, but it's important to understand the nuances between the two functions in an IT organization. Continue Reading
-
News
13 Apr 2023
ChatGPT craze hits infrastructure as code
From GitHub's Copilot to a purpose-built product from Pulumi, generative AI is emerging for infrastructure as code, with the same potential benefits and risks it presents for apps. Continue Reading
-
Definition
11 Apr 2023
operational-level agreement (OLA)
An operational-level agreement (OLA) is a contract that defines how various IT groups within a company plan to deliver a service or set of services. Continue Reading
-
Tip
07 Apr 2023
The enduring link between Conway's Law and microservices
While Conway's Law is a decades-old concept, some would argue that the industry's rush to adopt microservices makes this take on development team structure more relevant than ever. Continue Reading
-
Feature
06 Apr 2023
Mainframe modernization to AI apps: USPTO reinvents itself
How the US Patent and Trade Office, founded in 1802, maintained IT resilience while managing systems ranging from mainframes to the cloud, AI and beyond. Continue Reading
-
Tip
05 Apr 2023
How to implement FinOps in DevOps pipelines
As cloud costs climb, applying FinOps principles in DevOps practices can optimize cloud spend. Learn how FinOps and DevOps can work together to promote better cloud resource use. Continue Reading
-
News
05 Apr 2023
Securing remote access grows crucial for DevSecOps
Between remote work and hybrid cloud lies a menacing security gap that experts warn more and more businesses will fall into without a cohesive approach. Continue Reading
-
Tip
30 Mar 2023
How to choose IT operations metrics that deliver real value
The sheer volume of data collected in today's IT environments can be overwhelming. But by focusing on the user experience, IT ops teams can pinpoint the metrics that matter most. Continue Reading
-
Definition
28 Mar 2023
object-relational mapping (ORM)
Object-relational mapping (ORM) is a way to align programming code with database structures. Continue Reading
-
Tutorial
27 Mar 2023
Simplify code with for_each and dynamic blocks in Terraform
In this tutorial, get hands-on practice using Terraform features like dynamic blocks and the for_each attribute to write cleaner, more reusable code for cloud deployments. Continue Reading
-
Definition
23 Mar 2023
Azure DevOps
Azure DevOps -- rebranded from Visual Studio Team Services (VSTS) in 2018 -- is a software-as-a service (SaaS) platform from Microsoft designed to provide a comprehensive toolchain for developing and deploying software projects. Continue Reading
-
Tip
21 Mar 2023
The fundamentals of achieving high cohesion and low coupling
It's easy to say, 'high cohesion, low coupling,' but is it as easy to put into practice? We examine some of the basics behind cohesion, coupling and the right balance between them. Continue Reading
-
Opinion
20 Mar 2023
The rise of the non-developer
Low-code and no-code tools are often touted as solutions to the developer talent shortage -- but they might not be the full answer for companies facing a lack of tech skills. Continue Reading
-
Feature
10 Mar 2023
Is DevOps dead? What the future of DevOps could look like
While some think DevOps has run its course, others say it's just maturing and evolving into what organizations need -- which, for some, might include platform engineers. Continue Reading
-
Tip
24 Feb 2023
Tips for building a DevOps knowledge-sharing culture
The DevOps spirit of openness and collaboration makes knowledge sharing a necessity. Explore best practices for documenting and communicating knowledge within your organization. Continue Reading
-
News
23 Feb 2023
CEO reflects on remote work, team-building amid Ukraine war
A GraphQL API management company is on track for an official launch in the coming months, despite a year of massive challenges for its developer team in Ukraine. Continue Reading
-
Definition
22 Feb 2023
Go programming language
Go, also called Golang or Go language, is an open source programming language that Google developed. Continue Reading
-
Answer
16 Feb 2023
What are hyperautomation use cases for IT operations?
Fully automated NoOps workflows might not be possible, but there's always room to further automate existing processes. An expert explains two hyperautomation use cases for DevOps. Continue Reading
-
Definition
01 Feb 2023
technical debt
Technical debt -- or tech debt -- is the implied cost incurred when businesses do not fix problems that will affect them in the future. Continue Reading
-
Opinion
30 Jan 2023
3 key steps when creating a DevOps implementation plan
Shifting to the DevOps model can be complicated and challenging. Set your team up for success by learning which areas to prioritize at the early stages of DevOps adoption. Continue Reading
-
News
26 Jan 2023
Lens Kubernetes developer portal expands with Shipa buy
The early stage startup, co-founded by Juniper and CloudBees vets, adds a "stupid easy" option for application auto-discovery and ongoing management, according to Mirantis. Continue Reading
-
Tip
12 Jan 2023
8 tips for building a multi-cloud DevOps strategy
DevOps practices and tools have many benefits for application development, deployment and monitoring in complex IT environments that span multiple clouds. Continue Reading
-
Tip
11 Jan 2023
Demystify the DevOps process, step by step
While varying definitions and vendor marketing spins can make the meaning of DevOps tough to nail down, there are concrete principles and processes that underpin the methodology. Continue Reading
-
Definition
04 Jan 2023
ChatOps
ChatOps, sometimes known as conversation-driven collaboration or conversation-driven DevOps, is the use of chat clients, chatbots and other real-time communication tools to facilitate software development and IT operations tasks. Continue Reading
-
Tip
27 Dec 2022
Compare Go vs. Python: What are the differences?
Golang and Python are both versatile, popular languages, but they have some important differences that developers should take into account when planning software projects. Continue Reading
-
News
15 Dec 2022
Lego site vulnerabilities highlight API security gaps
What's old is new again: Lego site BrickLink was found vulnerable to cross-site scripting and other well-understood types of attacks, intensifying scrutiny on API security. Continue Reading
-
Tip
14 Dec 2022
Carefully weigh these DevOps pros and cons
DevOps can help organizations gain a competitive edge through fast and iterative software development cycles. Still, there are tradeoffs to consider. Continue Reading
-
Definition
08 Dec 2022
Hofstadter's law
Hofstadter's law states that a project always takes longer than expected, even when the law is taken into account. Continue Reading
-
Definition
06 Dec 2022
event-driven application
An event-driven application is a computer program written to respond to actions generated by a user or system. Continue Reading
-
Tip
28 Nov 2022
How to make and use maps in Golang
Maps are a popular data structure in many programming contexts thanks to their efficiency and speed. But, in Go, some unique features make maps especially useful. Continue Reading
-
Tip
23 Nov 2022
Use the CALMS framework for a smooth DevOps transition
Adopting DevOps can be challenging, especially when communicating across IT and business teams. The five elements of the CALMS framework can help organizations measure progress. Continue Reading
-
Definition
22 Nov 2022
DevSecOps
DevSecOps (development plus security plus operations) is an approach that combines application development, security, operations and infrastructure as code (IaC) in an automated continuous integration/continuous delivery (CI/CD) pipeline. Continue Reading
-
News
02 Nov 2022
Fresh crop of IT automation tools targets platform engineers
As enterprise IT shifts from full-stack DevOps to platform engineering, IT automation tools reinvented for the Kubernetes era can reduce toil for operators. Continue Reading
-
News
01 Nov 2022
Security AI shifts left into DevSecOps
DevSecOps vendors such as GitLab and Palo Alto's Prisma Cloud embrace security AI throughout the software development lifecycle, as IT trust in AI grows. Continue Reading
-
Opinion
01 Nov 2022
AnsibleFest 2022: Automation across distributed environments
IT environments are more distributed than ever, making infrastructure management increasingly challenging. Ansible's automation capabilities can help IT ops handle the complexity. Continue Reading
-
Tip
28 Oct 2022
Why contract testing can be essential for microservices
Developers face numerous struggles trying to perform traditional, end-to-end integration testing on microservices. Contract testing presents a potential alternative. Continue Reading
-
News
27 Oct 2022
Platform engineers plug abstraction leaks
Platform engineers presented at KubeCon about how new tools have helped them better hide infrastructure complexity from developers. But a paradox of choice remains. Continue Reading
-
Tip
24 Oct 2022
What Golang generics support means for code structure
Generics are a relatively recent addition to the strongly and statically typed Go language. Learn the benefits of using generics in Golang and how to get started. Continue Reading
-
News
18 Oct 2022
Enterprises learn the downsides of DevSecOps metrics
DevSecOps metrics can be helpful, but they can also steer developer and security collaboration in an unproductive direction if they are over-emphasized, practitioners said. Continue Reading
-
Tip
14 Oct 2022
What DevOps teams need to know about API management
Managing today's sprawling API ecosystems is increasingly daunting for DevOps teams. Learn what to look for when choosing a tool to reduce the complexity of API management. Continue Reading
-
Definition
07 Oct 2022
sunsetting
Sunsetting is the intentional phasing out or termination of something, and in business, the term is used often regarding brands, partnerships, agreements, policies, and hardware and software. Continue Reading
-
News
06 Oct 2022
HashiCorp Waypoint public beta adds fresh take on PaaS
The sales pitch for HashiCorp Waypoint sounds a lot like traditional PaaS, but its technical approach may be uniquely well-suited to the recent rise of DevOps platform engineering. Continue Reading
-
Feature
06 Oct 2022
What we can learn from the top DevOps articles of 2022
From runbooks to open source tools and self-service portals, 2022 was a big year for DevOps. IT teams preparing for 2023 should brush up on their understanding of DevOps. Continue Reading
-
News
29 Sep 2022
Cloud Custodian spans FinOps, SecOps cloud policies
Users such as Avalara and HBO Max use Cloud Custodian to manage cloud cost and security policies, as the project's founders prepare Kubernetes support to rival OPA and Kyverno. Continue Reading
-
News
28 Sep 2022
CloudBees ReleaseIQ buy renews CI/CD pipeline, SaaS support
The newly acquired startup adds SaaS-based low-code views into multiple tools and doesn't require upfront integration work, as CloudBees regroups after recent upheavals. Continue Reading
-
Feature
26 Sep 2022
Explore the pros and cons of Go for DevOps
Author and Docker engineer Teiva Harsanyi explains the benefits of Golang -- including why he sees it as the future of back-end development -- and how to avoid common pitfalls. Continue Reading
-
News
22 Sep 2022
IT pros pan government software supply chain security advice
As the prospect of federally mandated SBOM drives up usage of the software supply chain security tech, the government's documentation so far adds to risky confusion, experts say. Continue Reading
-
News
20 Sep 2022
Aqua adds software supply chain security to DevSecOps mix
A new software supply chain security module for Aqua's platform correlates runtime security monitoring with pre-deployment scans as IT pros look to merge disparate tools. Continue Reading
-
Tip
16 Sep 2022
How to bolster vulnerability management with DevSecOps
DevSecOps pushes security work into every stage of the software delivery lifecycle. Vulnerability management is a critical element to this security posture. Continue Reading
-
Opinion
14 Sep 2022
5 ways to improve your cloud security posture
With more applications deployed to multiple clouds, organizations must shore up their security posture, and cloud security posture management is designed to help. Find out why. Continue Reading
-
Tip
08 Sep 2022
Build AI into the DevOps maturity model for smooth sailing
AI has promising applications in DevOps, but organizations must account for the maturity of their teams, processes and tools to ensure the success of their AI initiatives. Continue Reading
-
News
11 Aug 2022
How CI/CD pipelines are putting enterprise networks at risk
At Black Hat USA 2022, NCC Group researchers demonstrated how threat actors can compromise CI/CD pipelines and break out into enterprise networks and cloud environments. Continue Reading
-
Tip
10 Aug 2022
DevOps vs. AgileOps: What's the difference?
While AgileOps may seem like a sign that the IT industry has reached 'peak Ops,' the approach could enable DevOps teams to further refine their operations. Continue Reading
-
Tip
10 Aug 2022
How to create and manage a rock-solid DevSecOps framework
Going from DevOps to DevSecOps requires a serious adjustment -- but it's a change that improves both the IT ecosystem and the IT department's collaboration prowess. Continue Reading
-
News
08 Aug 2022
Blue chips hone continuous compliance as GRC pressures mount
The concept of continuous improvement has found its way into IT governance, as companies such as Fannie Mae, JPMorgan Chase and John Deere embrace continuous compliance. Continue Reading
-
News
03 Aug 2022
Another new CloudBees CEO faces fierce CI/CD tools rivalry
Former SAP and Cisco strategy exec Anuj Kapur is tasked with keeping CloudBees CI/CD and DevOps platform tools relevant as the cloud-native arms race intensifies. Continue Reading
-
Tip
29 Jul 2022
Get to know Amazon DevOps Guru for system monitoring
Amazon DevOps Guru gives IT admins machine learning-driven insights into applications to respond to problems quickly and efficiently. Discover how it works and its benefits. Continue Reading