Platform engineering
Vendor-neutral coverage of platform engineering.
Articles
35 articlesKubernetes 1.37 beta lands a StatefulSet Recreate strategy and CRI pod checkpoint RPCs
The 1.37.0-beta.0 release adds a Recreate update strategy for StatefulSets, promotes PLEGOnDemandRelist and metrics.k8s.io to v1, and pushes pod checkpoint and restore into the CRI interface. A 1.36.3 patch shipping in the same window catches a kubelet memory-leak regression that first landed in 1.36.
Jul 31, 2026 · Maya OkonkwoPlatform engineeringGoogle's borderless lakehouse wires AWS, Databricks and Snowflake catalogs into one Iceberg REST surface
Google Cloud has pushed a preview of catalog federation that lets BigQuery and Managed Spark read AWS Glue, Databricks Unity Catalog and Snowflake Horizon through an Iceberg REST catalog, and shipped an open-source Data Agent Kit that hands the same tables to MCP-speaking agents. For pipeline teams the practical shift is that the protocol coding agents already talk now reaches a synchronised view of a multi-cloud data estate.
Jul 30, 2026 · Priya NairPlatform engineeringKyverno's CLI learns to fake production so offline policy tests stop lying
A CNCF blog post walks through how the Kyverno CLI now stands up an in-memory fake of the Kubernetes API cache, so policies that lean on GlobalContextEntry lookups can be exercised offline instead of silently skipping. The workflow that used to say 'all pass' when it really meant 'never ran' has finally closed.
Jul 29, 2026 · Priya NairPlatform engineeringCloud Run moves regional failover out of the runbook and into the load balancer
Google Cloud has added readiness probes and an aggregated service-health signal that lets Cloud Run automatically shift traffic away from an unhealthy region within seconds, per a July 20 post. For teams carrying a manual regional failover runbook, the operational read is which step leaves the on-call rotation.
Jul 27, 2026 · Maya OkonkwoPlatform engineeringMCP's next release candidate drops sessions and the handshake, pushes state into handles
The next Model Context Protocol release candidate removes sessions and the initialization handshake and shifts state into handles, moving remote MCP servers toward a stateless HTTP shape. Lead maintainers froze the release ahead of the rewrite, and it invalidates assumptions many existing server implementations were built on.
Jul 27, 2026 · Maya OkonkwoPlatform engineeringGoogle's pitch: put Agent Substrate on top of GKE Agent Sandbox, and call it the AI-agent runtime
Two months after GKE Agent Sandbox went GA in May 2026, Google introduced a follow-up called Agent Substrate in the same post. The New Stack's read is that Google now wants Kubernetes to be the runtime for AI agents on the primitives GKE already uses for production services.
Jul 26, 2026 · Maya OkonkwoPlatform engineeringFour hyperscaler agent sandboxes, four different isolation primitives
A New Stack survey argues AWS, Google Cloud, Microsoft Azure and Cloudflare have each shipped an agent-sandbox service, built on four different isolation foundations. Google Cloud's Cloud Run sandboxes public preview, announced at the WeAreDevelopers World Congress, is the news peg.
Jul 25, 2026 · Maya OkonkwoPlatform engineeringGitHub's MCP Server tracks the stateless MCP spec, and the Redis session drops out
Ahead of a 28 July 2026 move to a stateless MCP core, GitHub says its MCP Server has been updated to run without per-session Redis state. For teams wiring coding agents into CI, that changes what the server has to remember between calls.
Jul 24, 2026 · Maya OkonkwoPlatform engineeringHashiCorp's tfpolicy pulls policy-as-code back inside Terraform
HashiCorp introduced tfpolicy, a policy-as-code framework built into Terraform with rules written in HCL, now in public beta on HCP Terraform. For platform teams currently running Sentinel, OPA or Conftest alongside every plan, the change collapses one language and one runtime out of the pipeline.
Jul 20, 2026 · Maya OkonkwoPlatform engineeringPreview environments were built for humans. The traffic changed.
A new essay reframes preview and staging environments as a traffic-shaped workload rather than a ticket queue, now that coding agents open pull requests in bursts. Platform teams facing agent-speed demand have to treat environment provisioning as capacity planning.
Jul 19, 2026 · Priya NairPlatform engineeringGitLab packages Duo Agent Flows so multi-step runs share the platform's controls
GitLab is naming a shape for multi-step agent work, Duo Agent Flows, that inherits the same access controls, triggers and review gates as any other pipeline object. The pitch is a middle ground between chat that only answers and homegrown scripts that go stale the moment the platform changes.
Jul 17, 2026 · Maya OkonkwoPlatform engineeringGitHub lets enterprises pin Copilot's OpenTelemetry endpoint
A new enterprise-managed setting mandates where the Copilot Chat extension in VS Code and Copilot CLI send OpenTelemetry data. The managed value overrides environment variables and user settings.
Jul 12, 2026 · Maya OkonkwoPlatform engineeringEntire opens preview of regional Git mirrors aimed at AI-agent clone traffic
Ex-GitHub CEO Thomas Dohmke's new company Entire launched a preview of a distributed Git network that mirrors GitHub repositories across the US, Europe and Australia. The pitch is per-region clone throughput for AI coding agents; the mechanism today is read replicas, not a new protocol.
Jul 12, 2026 · Maya OkonkwoPlatform engineeringAfter the ingress-NGINX retirement, what your migration plan owes production
The Kubernetes SIG Network retired ingress-nginx in March 2026, leaving clusters still on it exposed to unpatched CVEs and stalled feature work. A CNCF post lays out the two migration paths operators are picking between and the tooling to make the move.
Jul 11, 2026 · Maya OkonkwoPlatform engineeringGoogle puts Cloud Run sandboxes into preview for AI-generated code
Google Cloud has moved Cloud Run sandboxes to public preview, positioning them as a runtime for AI-generated code and untrusted binaries that a pipeline would otherwise be asked to trust with host access and cloud credentials.
Jul 10, 2026 · Maya OkonkwoPlatform engineeringetcd v3.7 adds a streaming range API and drops the legacy v2 store
SIG etcd shipped v3.7.0 with a RangeStream API that chunks large read responses instead of buffering them, plus faster lease handling under load and the removal of the legacy v2 backing store. Kubernetes will expose the feature in v1.37 behind a gate.
Jul 9, 2026 · Maya OkonkwoPlatform engineeringSandboxing your agent isn't the hard part, keeping it cheap is
A CNCF post from Solo.io's Lin Sun argues Kubernetes' agent-sandbox project delivers the isolation piece of hosting AI agents, while a sibling project, agent-substrate, is aimed at the resource-efficiency gap a per-agent pod leaves behind.
Jul 7, 2026 · Tomás VegaPlatform engineeringGitHub streams Copilot agent sessions to the SIEM, in preview
GitHub put Copilot agent session streaming into public preview on July 2, exposing prompts, responses and tool calls from cloud agents and IDE clients to enterprise event collectors. For CI-adjacent workflows it turns Copilot from a black box into something an on-call can reconstruct after the fact.
Jul 7, 2026 · Maya OkonkwoPlatform engineeringGitHub Copilot's enterprise managed-settings.json is now GA
GitHub Enterprise Cloud can now pin five Copilot behaviours from a single managed-settings.json in a .github-private repository. The file overrides local user config, is fetched on every auth, and refreshes hourly.
Jul 5, 2026 · Maya OkonkwoPlatform engineeringGitHub sets July 30 as the hard shutdown for GitHub Models
GitHub published a July 1 changelog entry confirming GitHub Models will be fully retired on July 30, 2026. The earlier closure to new customers now has a matching end date, and any pipeline still calling into the service has a fixed migration window of roughly four weeks.
Jul 5, 2026 · Maya OkonkwoPlatform engineeringHarness ships Autonomous Worker Agents, making any pipeline step a Markdown-defined AI agent
Harness has launched Autonomous Worker Agents, letting enterprises replace fixed pipeline scripts with AI agents that inherit the same identity, sandbox, policy engine, and audit trail the platform already uses for scripted steps.
Jul 2, 2026 · Priya NairPlatform engineeringAWS reworks the EKS control plane and starts selling it in sized tiers
Amazon EKS engineers detail a set of architectural changes to how the service runs the Kubernetes control plane, including a purpose-built journal that replaces etcd's Raft consensus, and a new tier-priced product, EKS Provisioned Control Plane, that lets customers reserve API and scheduling capacity ahead of bursty workloads.
Jul 1, 2026 · Maya OkonkwoPlatform engineeringGitHub Actions adds a background marker, and the linear job stops being the only shape
GitHub Actions now lets steps inside a job run concurrently with a 'background' marker plus 'wait', 'cancel' and 'parallel' helpers, breaking the sequential-only model that has defined Actions jobs since launch.
Jun 26, 2026 · Priya NairPlatform engineeringA self-hosted Kubernetes diagnostic agent shipped by GitOps: the CNCF walkthrough
A CNCF blog post lays out a read-only, in-cluster AI agent whose CI/CD chain runs entirely on GitHub Actions and Argo CD Image Updater, with no data leaving the cluster and no cloud AI provider in the loop.
Jun 25, 2026 · Maya OkonkwoPlatform engineeringCursor acquires Continue and gives its users a July 15 export deadline
Cursor has bought the open-source AI coding assistant Continue in a quiet acqui-hire that disables recurring billing and sets a July 15 data-deletion date. The Apache 2.0 code stays forkable; the hosted product does not.
Jun 24, 2026 · Maya OkonkwoPlatform engineeringCopilot for JetBrains gets org-curated agents, mid-run CLI steering, and Claude in preview
GitHub's June 22 Copilot update lands a cluster of changes for JetBrains IDE users: organization- and enterprise-level custom agents now flow through the Copilot Chat agent picker, Copilot CLI sessions gain a mid-run steer-or-queue dropdown, and Claude is available as an agent provider in public preview.
Jun 23, 2026 · Priya NairPlatform engineeringCursor unveils Origin, an agent-first Git host; GitLab and Zed take other paths
Graphite co-founder Tomas Reimers unveiled Origin, a Git-compatible code host built from the ground up for AI agents, at an invite-only Cursor conference. GitLab and Zed are pursuing different rebuilds of the same model.
Jun 22, 2026 · Maya OkonkwoPlatform engineeringGitLab 19.1 makes the AI Catalog event-driven and gives admins the off switch
Duo Flows in the AI Catalog can now fire on merge-request and pipeline events instead of waiting for a human click, and the same release ships admin controls to disable custom agents, scope the catalog to a group hierarchy, and validate flow config at save time.
Jun 20, 2026 · Maya OkonkwoPlatform engineeringBlock runs its coding-agent fleet from Slack. The chat is the easy part.
The New Stack describes how Block manages and supervises a fleet of AI coding agents from Slack, framing the real problem as operating across many services rather than inside a single repository. For a CI/CD practitioner, the interesting shift is from prompt quality to the control plane around the agents.
Jun 19, 2026 · Priya NairPlatform engineeringGitHub closes its Models playground to new customers and routes new work to Azure AI Foundry
GitHub is retiring GitHub Models, its in-platform AI playground. Per DevOps.com, the feature is closed to new customers as of June 16; existing users keep playground and API access, and GitHub directs new projects to Azure AI Foundry.
Jun 19, 2026 · Maya OkonkwoPlatform engineeringA CI platform just wired Claude Code into the pipeline as a first-party action, here's what that actually looks like
A CI/CD vendor has shipped a first-party Anthropic integration and a Claude Code pipeline action, joining the steady drip of platforms that want agentic coding assistants inside the build rather than next to it. Useful, but it changes who you trust at which step.
Jun 18, 2026 · Priya NairPlatform engineeringGitHub's agent finder lets Copilot look up its own tools
GitHub shipped agent finder for Copilot, a discovery layer that searches MCP servers, skills, canvases, agents and tools instead of pre-wiring them into a context window. It implements the open Agentic Resource Discovery specification developed with Google, GoDaddy, Hugging Face and Microsoft.
Jun 18, 2026 · Priya NairPlatform engineeringFlipkart's chaos platform runs 90% of fault injection in staging, ships five fixes back to LitmusChaos
Flipkart's central reliability engineering team won the CNCF End User Case Study contest for a multi-tenant chaos engineering platform on Kubernetes that runs roughly 90% of its experiments in staging clusters and contributed five fixes upstream to LitmusChaos. The next step on the roadmap is to wire chaos testing into the CI/CD pipeline as a mandatory phase.
Jun 18, 2026 · Maya OkonkwoPlatform engineeringWhen async agents outnumber humans, code review stops being the verification layer
A piece in The New Stack picks up Ido Pesok's disclosure from Cognition that more Devin runs are now triggered asynchronously, by events, schedules, automations and other agents, than by people. The argument: once the trigger ratio flips, verification has to move out of code review and into the runtime that CI/CD owns.
Jun 17, 2026 · Priya NairPlatform engineeringHashiCorp ships tfctl, a first-party CLI for HCP Terraform and TFE
HashiCorp has released tfctl, the first dedicated CLI for HCP Terraform and Terraform Enterprise platform operations. Every command supports --dry-run, deletes require interactive confirmation, and the binary is built on the HCP Terraform OpenAPI spec.
Jun 17, 2026 · Maya Okonkwo