DevOps Daily Newsletter - Week 30, 2026

Hope your week is off to a good start - here's everything we published for you to dig into.

Blog Posts

Build a Terraform Provider for Your API with the Plugin Framework

If your product has a REST API, a Terraform provider lets your users manage it as code. This walkthrough builds one from scratch with the Plugin Framework.

The pwn request just got harder: what actions/checkout v7 changes, and what it does not

GitHub is backporting a fork-checkout block to actions/checkout, with enforcement starting July 20. Here's what v7 actually protects you from - and the pwn request paths it still leaves open.

Your GitOps Controller Is Tier Zero: the Argo CD repo-server RCE

An unauthenticated RCE in Argo CD's repo-server turns one compromised pod into full cluster takeover. If you run GitOps, this is the definition of a tier zero system.

Migrating From S3 to Branch-Aware Storage

Neon object storage speaks the S3 API, which means switching over is closer to a config change than a rewrite. Here's what actually needs to change and what doesn't.

Stop Standing Up an S3 Bucket Per Preview Environment

Provisioning a real bucket for every preview environment gets messy and expensive fast. There's a simpler way to give each preview isolated file storage.

Neon vs Supabase in Production: We Benchmarked the Operations That Page You at 3am

We benchmarked the operations that actually wake you up at 3am - compute resume times, connection storms, and more - on both Neon and Supabase Pro. Spec sheets don't tell you this stuff.

Neon vs Supabase Pricing: What the Same App Costs From Launch to Scale

We priced the same app through five growth stages on Neon and Supabase using verified June 2026 list prices. The winner changes depending on where you are in the curve.

Neon vs Supabase Free Tiers: We Benchmarked Both So You Don't Have To

320 timed operations against both free tiers from a same-region client, so you can pick a side without running the tests yourself. The numbers surprised us in a few places.

Your Container Is Not a Security Boundary: GhostLock (CVE-2026-43499)

A 15-year-old Linux kernel bug now has a public exploit that breaks out of containers and hands over the host. Time to stop treating containers as a security boundary.

How Docker Really Works, From docker run to the Kernel

You type docker run and a container appears - but between those two moments, the CLI, dockerd, containerd, and the kernel all do real work. We trace the whole path.

News Digests

DevOps Weekly Digest - Week 29, 2026

Your week 29 roundup: curated updates from Kubernetes, cloud native tooling, CI/CD, IaC, observability, and security, all in one place.

Comparisons

AWS Lambda vs Google Cloud Functions

AWS Lambda and Google Cloud Functions side by side: runtimes, cold starts, pricing, and the details that matter once you're actually shipping serverless workloads.

Serverless Framework vs AWS SAM

Serverless Framework or AWS SAM? We compare both for building and deploying serverless apps so you can pick the right tool before you're three services deep.

Guides

A Practical Guide to FinOps for DevOps Engineers

A practical guide to bringing FinOps into your DevOps workflows, so you can cut cloud costs without slowing down delivery.

Quizzes

Distributed Systems Fundamentals Quiz

Test your grasp of the theory that decides whether a distributed system stays correct under stress. See how many you get right before consensus breaks down.

Flashcards

Implementing Pod Security Standards in Kubernetes

Drill the Baseline, Restricted, and Privileged profiles and learn to enforce them with the built-in Pod Security Admission controller. No extra tooling required.

Featured Games

TCP vs UDP Simulator

Watch TCP and UDP behave differently in real time with this interactive simulator. Packet loss and retransmission make a lot more sense when you can see them happen.

SMTP Flow Simulator

Follow an email from app submission through EHLO, STARTTLS, AUTH, and MAIL FROM in this interactive SMTP visualizer. Great for finally understanding what your mail logs are telling you.

Happy learning, The DevOps Daily Team