DevOps Daily Newsletter - Week 31, 2026

Happy Friday! Another week, another stack of things we broke, fixed, and wrote down so you don't have to.

Blog Posts

One Key for Claude, GPT, and Gemini: the Gateway Pattern

Juggling API keys for Claude, GPT, and Gemini gets old fast. The gateway pattern gives you one key, one endpoint, and one bill for all three.

node-postgres Silently Ignores Your TLS Config When the URL Says sslmode

If your Postgres connection string has sslmode=require in it, node-postgres quietly throws away your entire ssl config object. Here's why that happens and how to actually get TLS working.

11 Laws That Quietly Run Your Engineering Team

Parkinson, Goodhart, Brooks, Chesterton - none of them wrote about software, but their laws explain half of what happens on your team. Eleven of them, decoded for engineering work.

Send an Email by Hand: The Raw SMTP Conversation (and Why You Should Not Do It in Production)

Open a socket to a mail server and type out an email one SMTP command at a time. Doing it once teaches you more about email than years of using libraries - just never do it in production.

DevOps Engineer, What's Next? Five Career Paths for the Next Five Years

The generic DevOps Engineer title is splitting into specialized tracks, and pretending otherwise won't help your career. Here are five honest paths for the next five years.

Stop Compiling Postgres Extensions in Your Dockerfile: How pglayers Works

Adding pgvector or PostGIS to a Postgres image usually means apt-get, build tools, and a bloated Dockerfile. pglayers skips the compile step entirely - here's how it works.

One git push to RCE: the anatomy of CVE-2026-3854 and the parsing bug behind it

A single git push could execute code on GitHub's backend, with cross-tenant reach on github.com itself. We break down CVE-2026-3854 and the parsing bug that made it possible.

Build the Container Boundary You Do Not Have: Seccomp Profiles with the Security Profiles Operator

A container is not a security boundary out of the box, but you can build one. A hands-on guide to seccomp profiles with the Security Profiles Operator.

News Digests

DevOps Weekly Digest - Week 30, 2026

Your week 30 roundup: curated updates from Kubernetes, cloud native tooling, CI/CD, IaC, observability, and security - all in one place.

Comparisons

SonarQube vs CodeClimate

SonarQube or CodeClimate for code quality analysis? We compare language support, setup effort, and pricing so you can pick without trialing both.

Selenium vs Playwright

Selenium has the history, Playwright has the momentum. A detailed look at both for browser automation and end-to-end testing.

Guides

Static Application Security Testing (SAST)

Get hands-on with Static Application Security Testing using SonarQube, Semgrep, and CodeQL. Learn to catch vulnerabilities in your code before they ship.

Quizzes

GitHub Actions Workflows Quiz

Think you know GitHub Actions? Test yourself on workflows, YAML syntax, and marketplace actions before your next pipeline argues otherwise.

Flashcards

Chaos Engineering with Litmus

Run your first controlled failure experiments on Kubernetes with Litmus. Flashcards covering core concepts, CRDs, and how to break things on purpose without breaking your job.

Featured Games

DDoS Attack Simulator

Watch a DDoS attack unfold in real time with this educational simulator. Multiple attack types, live visualizations, and a much safer way to learn than the alternative.

P90, P95 & P99 Latency Simulator

P90, P95, P99 - you quote them in every incident review, but do you really get them? Generate request samples and watch the distributions take shape in this interactive simulator.

---

Happy learning, The DevOps Daily Team