Cloud & DevOps & AI Digest: The Week of May 9, 2026
Happy Week! ☕ Here is your curated briefing on Cloud, AI, and Kubernetes for the week of May 9, 2026.
📂 From Dev.to
- How I Evaluated an AI Model on AWS Without Writing a Single Line of Training Code
A step-by-step guide to Amazon Bedrock's model evaluation feature from S3 setup to reading real...... - How to Deploy a Machine Learning Project on AWS Using ECR, ECS Fargate, and EFS.
A step-by-step walkthrough from Docker image to a live, serverless ML application running in the...... - Why `livez` and `readyz` Matter for Kubernetes Health Probes
When a service handles a high volume of requests, health probes are not just a small deployment...... - Authorization and Authentication in AWS
Hey do you know how authorization and authentication works in AWS. It is a first step to ensure...... - Day 78: Hunting Silent IAM Bugs & Securing DynamoDB
aws #serverless #react #webdev published: true date: "2026-05-08 21:30:00 UTC" Today was...... - How I Built a Canary Deployment CI/CD Pipeline with GitHub Actions and AWS EC2
In this post, I'll walk you through how I built a production-ready pipeline using GitHub Actions, AWS...... - How I Deployed FastAPI to EC2 with HTTPS Using API Gateway
Intro I wanted to deploy my FastAPI backend on AWS EC2 and get a proper HTTPS URL without...... - Why AI Sandboxing Needs Kubernetes—And Why You Should Care Now
Why AI Sandboxing Needs Kubernetes—And Why You Should Care Now Last month, Anthropic's...... - The Nitro Enclave Gotcha That Cost Me 90 Minutes: vsock and a Port That Lied
When you are building inside AWS Nitro Enclaves for the first time, the documentation gives you a...... - 🐍 How to set up CI/CD for a Python Flask app using GitHub Actions
"Automate or stagnate" — a DevOps engineer I once paired with, halfway through a 40-minute deploy...... - # How to Build a Beginner-Friendly HR RAG Chatbot with Amazon Bedrock
Learn how Retrieval-Augmented Generation (RAG) works on AWS using Amazon Bedrock, Knowledge Bases,...... - Fix throughput Llama 4 a Kubernetes 1.30: A Data-Backed Guide
Liquid syntax error: Variable '{{namespace=\"{namespace}' was not properly terminated with regexp:...... - Cracking the Bedrock, Reaching the Core: Building Agents with AWS AgentCore Runtime and Memory
This article walks through a project I built on Amazon Bedrock AgentCore: an agent that turns...... - Kubernetes RBAC: controlando quem pode fazer o quê dentro do cluster 🔐☸️
Quando falamos de segurança em Kubernetes, um dos recursos mais importantes é o RBAC. RBAC significa...... - Kubernetes NetworkPolicy: controlando quem fala com quem dentro do cluster 🔐☸️
Quando falamos de segurança em Kubernetes, muita gente lembra de RBAC, Secrets, ServiceAccounts,...... - How to Configure Bare-Metal Kubernetes for GPU Orchestration
A complete guide to achieving 100% GPU efficiency for AI workloads by integrating containerd and the Kubernetes Device Plugin.... - What KubeCon Amsterdam 2026 Taught Me About Infrastructure as Transformation
KubeCon + CloudNativeCon EU 2026 · Amsterdam · March 23–26 More than 13,000 engineers gathering...... - The Ultimate Showdown revisited with Kubernetes and Microservices: Benchmark
In 2024, the average enterprise Kubernetes microservices stack wastes 34% of node capacity on...... - server-side sharded watch is Kubernetes admitting the control plane has a data-scale problem
Kubernetes v1.36 server-side sharded list/watch is a quiet signal that the control plane is becoming a data distribution system for controllers, agents, and aut... - FerrisScope — open-source desktop IDE for Kubernetes
Lens has been a frustrating daily driver for a while — the bundled Chromium runtime, business logic...... - Kubernetes felt overwhelming until I understood the layers
When I first looked at Kubernetes, I saw a wall of YAML and acronyms. PVC, PV, StatefulSet, Endpoint......
📂 From Hacker News
📂 From InfoQ (DevOps)
- AWS Improves Aurora Serverless: 45% Faster Ramp-Up, 30% Higher Throughput
<img src="https://res.infoq.com/news/2026/05/aurora-serverless-v4/en/headerimage/generatedHeaderImage-1777309076897.jpg"/><p>AWS has recently announ... - Google Announces GKE Agent Sandbox and Hypercluster at Next '26, Positioning Kubernetes as AI Agent
<img src="https://res.infoq.com/news/2026/05/gke-agent-sandbox-hypercluster/en/headerimage/generatedHeaderImage-1777875585040.jpg"/><p>Google announ...
📂 From Kubernetes Blog
- Kubernetes v1.36: Moving Volume Group Snapshots to GA
<p>Volume group snapshots were <a href="https://kubernetes.io/blog/2023/05/08/kubernetes-1-27-volume-group-snapshot-alpha/">introduced</a> as an Alpha ... - Kubernetes v1.36: More Drivers, New Features, and the Next Era of DRA
<p>Dynamic Resource Allocation (DRA) has fundamentally changed how platform administrators handle hardware accelerators and specialized resources in Kubernet... - Kubernetes v1.36: Server-Side Sharded List and Watch
<p>As Kubernetes clusters grow to tens of thousands of nodes, controllers that watch high-cardinality resources like Pods face a scaling wall. Every replica ... - Kubernetes v1.36: Declarative Validation Graduates to GA
<p>In Kubernetes v1.36, <strong>Declarative Validation</strong> for Kubernetes native types has reached General Availability (GA).</p> <p>For use... - Kubernetes v1.36: Admission Policies That Can't Be Deleted
<p>If you've ever tried to enforce a security policy across a fleet of Kubernetes clusters, you've probably run into a frustrating chicken-and-egg problem. Y...
📂 From AWS Containers Blog
- Gradual deployments in Amazon ECS with linear and canary strategies
<p>When deploying new application versions, you need confidence changes won’t impact customers. Amazon Elastic Container Service (Amazon ECS) now supports... - Cross-Region disaster recovery for Amazon EKS using AWS Backup
<p>Organizations running containerized workloads on <a href="https://aws.amazon.com/eks/" target="_blank" rel="noopener noreferrer">Amazon Elastic K... - Track inter-AZ and NAT gateway traffic with EKS Container Network Observability
<p>Teams running microservices on Amazon Elastic Kubernetes Service (Amazon EKS) struggle to identify which services drive their data transfer costs. As c...
📂 From CNCF Blog
- Benchmarking AI agent retrieval strategies on Kubernetes bug fixes
I’ve been using AI coding agents as part of my daily engineering workflow and wanted to understand how well they actually perform on real-world bugs. To t... - Microcks becomes a CNCF incubating project
The CNCF Technical Oversight Committee (TOC) has voted to accept Microcks as a CNCF incubating project. About Microcks Modern software teams build applications ... - The tools are ready. So why are most cloud native teams still running three observability stacks?
I’ve spent enough time in and around cloud native infrastructure to know that we’re reasonably good at standardizing the theory. OpenTelemetry for instrumentati... - Announcing Kyverno release 1.18!
We’re excited to announce the release of Kyverno 1.18, our first release since graduating within the Cloud Native Computing Foundation. This release builds on K...
📂 From AWS Blog
- The AWS MCP Server is now generally available
<p>I have been building with AI agents and MCP tools for a while now, and one question kept coming up: how do you give an agent real, authenticated access... - AWS Weekly Roundup: What’s Next with AWS 2026, Amazon Quick, OpenAI partnership, and more (May 4, 2026)
<p>Last week, I took some time off in York, England, often described as the most haunted city in the country. I wandered through the ruins of abbeys that ...
📂 From Docker Blog
- Generate Images Locally with Docker Model Runner and Open WebUI
We’ve all been there: you need to generate a few images for a project, you fire up an AI image service, and suddenly you’re wondering what happens t... - Precision Container Security with Docker and Black Duck
The complexity of modern containerized applications often leaves developers drowning in a sea of “noise”—vulnerabilities that exist in the file syst...
📂 From AWS Fundamentals Blog
- The 3 Levels of AWS Observability
In this post, you learn the different levels you can have with AWS Observability, from unstructured log up to a Claude Code skill which finds logs for you autom...
📂 From Reddit (r/aws)
- AWS warns of EC2 ‘impairment’ as power loss hits notorious US-EAST-1 region
- AWS down right now?
Nothing seems to be working, anyone know anything about whats happening?... - Price increase for API Gateway starting 1st of May?
Hello everyone, my infrastructure is all deployed on AWS Lambda + Api Gateway in EU-WEST1 (Ireland). We noticed a big increase in the cost of usage (gb) and ... - VMware to AWS migration (landing zone)
Hey guys, I'm currently staffed for a migration project for an FSI company. They have some core systems running on-prem (VMware VMs) and would like to migrate ... - AWS AI agent for Amazon Seller Central?
Hi! Is it possible to build an AI agent on Bedrock for Amazon Seller Central to proactively alert and also monitor buyer communications?... - AWS Deadline Cloud - The AWS Access Key Id needs a subscription for the service.
Hello, I'm trying to test the AWS Deadline Cloud service to see if it's suitable for blender renders, (trying to follow this guide: [https://aws.amazon.com/blo... - Looking for some guidance on Rest APIs
Hi everyone! I'm starting a position at a company as a "cloud architect"... at least that's the title, but I think my employer isn't very sure about what they e... - Issue with Payment for Reserved Instance - No way to pay and I'm seeing an "overdue" and "suspension" notice.
I attempted to purchase a 3 year reserved instance with a full upfront payment, as I have done many times. My credit card flagged the transaction as fraud and i... - Using Local Agents for Development via AWS
By far one of the easiest development workflows is to literally just tell Claude to standup some AWS infra and it creates the aws cli commands required and runs... - [Action Required] Irregular Activity Detected for Your AWS Access Key for [AWS Account: xxxxxxxxx]. I have temporarily deactivated my account from AWS IAM Users Console. Am i safe ? Still getting these email alerts from AWS.
\[Action Required\] Irregular Activity Detected for Your AWS Access Key for \[AWS Account: xxxxxxxxx\]. I have temporarily deactivated my account from AWS IAM U... - Skopx - AI analytics for AWS data without writing queries
- OpenAI's Data Agent and the S3 Gap
The article shows why giving an AI agent raw access to files in Amazon S3 is not enough for useful data work. It argues that to make agents reliable, you need m... - CloudFront account verification still blocking new distributions after 7+ days, no actionable response from AWS Support
Hi everyone, I’m posting here because our AWS account is still blocked from creating new CloudFront distributions, and the support case has not pro... - The growing challenge of knowing who's really behind the API calls on AWS
You're deep into a late-night deployment on AWS. Suddenly your monitoring lights up with suspicious activity, multiple failed logins, unusual IAM role assumptio... - AWS account verification pending for 5+ days, support case open with no response — anyone know how to escalate?
Hey everyone, Hoping someone here has been through this or knows how to escalate. Account stuck in "pending verification" status. Every IVS API call retur... - New Tool to use for AWS, Anvil
[Anvil](https://github.com/JSChronicles/anvil) is a declarative AWS execution engine for running Python tasks across AWS accounts and regions. It solves the is... - Be honest: Is an AWS cert a "reset button" for a 31yo with a 10-year gap, or am I dreaming?
Hey everyone, I’m looking for a bit of a reality check. I’m 31, and I’ve an year of experience since I graduatedd then 10 years of gap . I have an IT degree fr... - The 'Strangler Fig' pattern saved our modernization project. Here's how we applied it on AWS
Okay so last year my team got handed this absolute beast of a codebase. Like, the kind where you're scared to touch anything because you just KNOW something unr...
📂 From Reddit (r/devops)
- DevOps responsibilities matrix and daily work expectations
Good afternoon everyone, I am in my first leadership position over a DevOps team. Been steadily learning the cadence of their work and skills, but one thing ... - How common is an employee indemnity clause in DevOps / systems engineering contracts?
I’m reviewing an employment contract for a DevOps / systems engineering role and noticed an indemnity clause where the employee indemnifies the employer against... - How well do you train yourself before an interview?
Devops scope is huge. I mean everyone knows it. It’s huge. And yes some things are fundamental. And some things are just picky. I think it’s good practice b... - x509-certificate-exporter just shipped v4
They shipped an impressive new release that I wanted to share, since it helped me so much over the past few years. I used this heavily at a previous job, monit... - Need resume help w 10yr IT, starting to get desperate
[https://imgur.com/a/O7JlI7E](https://imgur.com/a/O7JlI7E) My contract gig is up in 7 weeks w no renewal due to no budget. After rage applying the last 2 weeks... - **[Collaboration] Building a mock enterprise IT environment on AWS — looking for learning partners**
Hey r/devops, I'm a Linux engineer transitioning into a DevOps/SRE role and I want to build a realistic mock IT environment on AWS to use as a portfolio pr... - ECS and Load Balancing
Hello fellow colleagues. First time configuring Load Balancing in an ECS service. Before I used to manually register targets to a Target Group and add it to a ... - I built Orbit — an open-source modern VPS dashboard that combines metrics, logs, firewall, Docker and deploys in one Go binary
Hey everyone, I was tired of juggling multiple tools to manage a VPS, so I started building Orbit. Goal: * one binary install * modern UI * metrics * logs * f... - Docker images are hundreds of MB; a full game engine compiles to 35MB WASM
There was real momentum around server-side WASM a few years ago — runwasi, kwasm, Cloudflare Workers. What happened to it? Why has adoption slowed down so much?... - Not sure what to do… help
Hey guys. I’m a LatAm based DevOps. I didn’t study CompSci and I broke into this career by working on homelabs, getting courses and basically just practicing an... - Thanks, r/devops.
Publiqué estas dos preguntas en las últimas semanas [https://www.reddit.com/r/devops/comments/1t19czm/are\_perquery\_safeguards\_sufficient\_for/](https://www.... - How do beginners actually start freelancing in DevOps
I’m an engineering student trying to break into DevOps freelancing because getting a traditional job right now feels extremely difficult. I’ve learned Linux, D...
📂 From Reddit (r/kubernetes)
- What one small DevOps change saved your team a lot of time?
For us it was about making rollbacks easier, not only thinking about deployments. Fast, clean ways to roll back changes removed a lot of stress from releases a... - We tested Dirty Frag in Kubernetes: unset seccomp made EKS/GKE exploitable, RuntimeDefault blocked the xfrm path
Dirty Frag is the recent Linux local privilege escalation PoC around page-cache write primitives. The upstream project describes two paths: xfrm/ESP and RxRPC. ... - Hitch hikers guide to kubernetes-sigs/headlamp 0.42.0
💡🚂kubernetes-sigs/headlamp 0.42.0 is passing by... want to grab a lift? With release notes almost as long as an 80's scifi novel, we have you covered.... - Anyone else in the industry feeling frustrated that AI is being used to pitch goofy "product features" that demo well to Boards but are utterly useless to K8s practitioners and are 100% not cloud-native patterns?
Sorry that this is a little bit of belly-aching, but I feel like actual product innovation is grinding to a halt as engineering effort is being redirected to bu... - Do You Need To Backup ArgoCD
Possibly stupid question, K8S newbie, but do you actually need to backup an ArgoCD instance Since, from my understanding, its just pushing files from Git, it s... - quantum-tiktok-operator: a CRD-based Kubernetes operator using Boltzmann acceptance probability for pod scheduling, etcd entanglement, and Chaos Mesh decoherence. WTFPL.
Started as a joke about TikTok's algorithm being equivalent to quantum annealing. Ended up as a structurally sound Kubernetes operator with real CRDs, RBAC, Hel... - cilium ebpf kubeproxy replacement
What are your experiences with this? I manage around 15ish clusters via rancher with various hw configs and number od nodes (bare metal) and just did POC on a... - Engineering a Zero-Trust Kubernetes SIEM: Bypassing NAT Blindness with eBPF TC, and Suricata, wazuh
Standard Kubernetes network security is fundamentally broken by NAT blindness. When an intrusion alert fires, traditional tools show a physical node IP, leaving... - What’s the most underrated Kubernetes feature your team actually uses in production?
everyone talks about autoscaling, service mesh, and operators. but curious about the smaller k8s features/configs that genuinely made life easier in production... - Replacing pods which are failing liveness probes
Hi all, Need some recommendation on the issue we are facing with one of our services. It was broken from an earlier monolith and moved to a microservice and c... - Preventing Karpenter pod disruption on Kubernetes jobs
I'm migrating my deployments and jobs to Karpenter spot node pool (with some on-demand ones for critical jobs) However, I can't think of anyway that Karpent... - Selecting a helm chart for the KeyCloak deployment
- CloudDevOpsHu platform Genuine review
I completed the DevOps course from [CloudDevOpsHub]() and my experience was disappointing. Before payment, the team was very responsive and made big promises re... - Longhorn is stuck on non existent replica
Hi ! I have this kubernetes cluster at home, to play around with. At some point, one of the machines' HDD died, and with it, all the data on it was lost. The p... - We called our clusters "production-ready" for a year before we actually were
We had ArgoCD, Prometheus, Grafana, Helm charts, the works. On paper it looked solid.Then we did our first real node pool upgrade on a high-traffic platform. Ha... - eBPF LSM runtime security agent for synchronous file/network denial — looking for technical feedback
I’m working on Aegis-BPF, an open-source Linux runtime security project built around eBPF LSM. The goal is narrow: explore enforcement-first runtime security... - I've published a full tutorial about Kubernetes HA using Floating IPs with Cilium and UniFi's UCG-Fiber as BGP Peer
\- for both application and kube-api traffic. I run a K8s cluster at home, within an UniFi ecosystem. While I patched the CopyFail vulnerability, I rebooted on... - Kubernetes live batch
- Is Student ID required onsite at Kubecon 2026?
Hi, I am an 8th semester student pursuing B. Tech in Computer Science and Engineering. I am looking forward to attend all three events happening in Mumbai, Indi...
Comments 0