# configuration-management Published articles for configuration-management. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Netpicker AI Assistant: AI-Assisted Network Operations and Compliance DevFeed: [Netpicker AI Assistant: AI-Assisted Network Operations and Compliance]() Original publisher: [Read original article]() Author: Rick Donato Published: 2026-09-03T12:27:49Z Content type: article Language: en Sources: [Packet Coders - Learn Network Automation]() Topics: [Artificial Intelligence](), [Network](), [Network Configuration](), [network security](), [configuration](), [incident](), [Testing]() Tags: [ai](), [blog](), [configuration-management](), [incident](), [network](), [network-configuration](), [network-security](), [testing]() ### AI overview The article explains how Netpicker's AI Assistant connects natural-language interaction with network data and operational capabilities such as configuration backups, compliance results, CVE information, device state, and automation jobs. It describes use cases for network troubleshooting, security operations, and configuration management, including investigating recent configuration changes during incidents. ### Source excerpt Introduction The real value is not in asking a model how BGP works or how to configure a VLAN. It comes from connecting AI to the tools and data we already use to operate the network, including configuration backups, compliance results, CVE data, device state and automation jobs. This is ## Mastering PostgreSQL Configuration Management with CloudNativePG (CNPG) DevFeed: [Mastering PostgreSQL Configuration Management with CloudNativePG (CNPG)]() Original publisher: [Read original article]() Author: Wellingtone Luvonga Published: 2026-08-04T05:00:38Z Content type: tutorial Language: en Sources: [CYBERTEC PostgreSQL | Services & Support]() Topics: [configuration](), [PostgreSQL](), [postgresql clusters](), [Kubernetes](), [GitOps](), [YAML](), [kubectl]() Tags: [administration](), [cloudnativepg](), [configuration](), [configuration-management](), [gitops](), [how-to](), [kubectl](), [kubernetes](), [postgresql](), [replication](), [yaml]() ### AI overview This tutorial explains how CloudNativePG manages PostgreSQL configuration in Kubernetes. It contrasts imperative editing of configuration files with declarative management through Kubernetes YAML and shows how to define database parameters and pg_hba.conf rules in a CNPG cluster resource. ### Source excerpt This blog talks about Configuration Management in PostgreSQL with CNPG, with some great examples in a comprehensive way. The post Mastering PostgreSQL Configuration Management with CloudNativePG (CNPG) appeared first on CYBERTEC PostgreSQL | Services & Support. ## Fedora Forge Usage Policy DevFeed: [Fedora Forge Usage Policy]() Original publisher: [Read original article]() Author: amoloney Published: 2026-07-30T12:11:59Z Content type: article Language: en Sources: [Fedora Community Blog]() Topics: [Fedora](), [forgejo](), [hosting](), [configuration-management](), [release engineering]() Tags: [community](), [configuration-management](), [fedora-project-community](), [forge](), [forgejo](), [governance](), [hosting](), [policy](), [release-engineering]() ### AI overview The Fedora Council is opening a minimum two-week public feedback period for a proposed Fedora Forge Usage Policy. The policy defines the Fedora Forge, a Forgejo instance operated by Fedora Infrastructure, as project infrastructure for hosting Fedora code, documentation, and tooling rather than a general-purpose public Git host. ### Source excerpt After extensive review and discussion on the ticket request and in recent council meetings (see meetbot for 29 July and 15 July 2026), the Fedora Council would like to initiate the policy change policy process for ratifying the Fedora Forge Usage policy. This document is open to public feedback (if any) for a minimum of [...] The post Fedora Forge Usage Policy appeared first on Fedora Community Blog. ## Preview ESC Changes with Environment Overrides DevFeed: [Preview ESC Changes with Environment Overrides]() Original publisher: [Read original article]() Author: Sean Yeh Published: 2026-07-23T00:00:00Z Content type: release Language: en Sources: [Pulumi]() Topics: [Command-line interface](), [configuration](), [Testing]() Tags: [cli](), [configuration](), [configuration-management](), [critical-infrastructure](), [esc](), [features](), [product](), [production](), [pulumi-cli](), [pulumi-esc](), [release](), [secrets](), [upgrade]() ### AI overview Pulumi introduces the --override-env flag for the Pulumi CLI, allowing teams to preview draft or alternate ESC environments during operations such as preview, up, refresh, and destroy. The feature helps reviewers validate configuration changes before approval and supports overrides through imported environment chains. ### Source excerpt Pulumi ESC makes it easy to store configuration and secrets for your Pulumi programs, and with Approvals for ESC you can review and approve changes before they go live. The new --override-env flag lets you preview any environment change, including an unapproved draft, to see exactly how it would affect your stack before it becomes the latest version. Example scenario Your team stores production app configuration in ESC and has enabled Approvals to keep bad values out of critical infrastructure. But one important question remains: how can reviewers properly validate a configuration change before approving it? Introducing: draft references and the -override-env flag We are introducing a new --override-env flag to the Pulumi CLI that works with every Pulumi operation that can consume ESC environments: preview, up, refresh, and destroy. This makes it easy to test configuration changes on the fly, giving your team the confidence to validate them as part of the review process. Example usages The basic usage is --override-env =, and you can override multiple environments at once! In this example, we are running a pulumi preview with environments app/myenv and app/myenv2 replaced by their draft versions (denoted by @draft:). pulumi preview \ --override-env "app/myenv=app/myenv@draft:123e4567-e89b-12d3-a456-426614174000" \ --override-env "app/myenv2=app/myenv2@draft:123e4567-e89b-12d3-a456-426614174000" The --override-env flag not only works with draft references, but for any environment too! Here is an example of deploying your stack with your AWS test environment: pulumi up --override-env "aws-login/prod=aws-login/testing" Note: --override-env can also override environments that are imported (directly or indirectly) from the ESC environment in your stack config. This allows you to override any environment in the import chain for full flexibility. Ways to use it Validate a draft ESC environment with your stack before approving One-off debugging w ## When Feature Flags Weren't Enough DevFeed: [When Feature Flags Weren't Enough]() Original publisher: [Read original article]() Author: Global Technology Published: 2026-06-09T13:33:43Z Content type: article Language: en Sources: [McDonald's Technical Blog - Medium]() Topics: [configuration](), [feature flags](), [Back end](), [version-control](), [pull-requests](), [ci](), [real-time](), [Tooling]() Tags: [backend](), [ci](), [configuration](), [configuration-management](), [devops](), [distributed-systems](), [feature-flags](), [infrastructure](), [pull-requests](), [real-time](), [software](), [software-architecture](), [tooling](), [version-control]() ### AI overview McDonald's engineers describe replacing a third-party feature-flag platform with a remote configuration system for structured, hierarchical restaurant settings. The system treats configuration like code through version control, pull requests, CI validation, peer review, and auditable live delivery to running backend services without redeployment. ### Source excerpt We rebuilt remote configuration because tooling must match the problem and working like code with review, validation, and live delivery without redeploys. By: Mikhail Baranov, Software Engineer III, & Erick Lopez, Software Engineer III Quick Bytes: Feature flags worked for tracking changes, but they fell short when we needed richer configuration across thousands of restaurants We rebuilt remote configuration to work like code -- version-controlled, validated in CI, and delivered live to running services without redeploys Teams now manage configuration by exception, ship changes safely in real time, and operate with far more confidence and control Runtime configuration carries real weight in a restaurant technology environment. Thresholds get tuned. Features roll out region by region. One location needs a special rule; another needs a noisy signal dialed down. These aren't hypotheticals -- they're everyday decisions that shape how our backend fleet behaves across thousands of restaurants. For a long time, we managed these decisions through a third-party feature-flag platform. It gave us auditability and a clear record of who changed what. But over time, an uncomfortable truth emerged: the tool wasn't built for the shape of our problem. We didn't need toggles and targeting rules. We needed rich, structured configuration -- hierarchical defaults, per-restaurant overrides, clear environment promotion, and real-time delivery to distributed backend services. Forcing that model into a flags-first product created friction: awkward workarounds, unnecessary cost, and extra operational steps for changes that should have felt routine. We wanted configuration changes to feel as safe and controlled as code changes, while still reaching running services immediately. So, we set out to build exactly that. Treating configuration like a managed product Our solution treats configuration with the same rigor as production code. Structured configuration lives in version control. Changes move ## How to Apply NIST 800-53 to AI Systems DevFeed: [How to Apply NIST 800-53 to AI Systems]() Original publisher: [Read original article]() Author: info@goteleport.com (Matthew Smith) Published: 2026-03-13T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Artificial Intelligence](), [AI Infrastructure](), [Access Control](), [audit](), [configuration-management](), [Security](), [Monitoring]() Tags: [access-control](), [agentic](), [ai](), [ai-infrastructure](), [audit](), [configuration-management](), [monitoring](), [nist](), [security]() ### AI overview This tutorial explains how NIST SP 800-53 applies to AI and agentic systems. It focuses on how autonomous systems complicate existing security controls and introduces Access Control, Audit and Accountability, and Configuration Management as starting points for further risk assessment. ### Source excerpt Learn to apply NIST 800-53 to agentic systems and AI infrastructure with control guidance on identity, auditing, configuration management, and monitoring. ## How Klarna Built Cloud Inventory for AWS Configuration Management DevFeed: [How Klarna Built Cloud Inventory for AWS Configuration Management]() Original publisher: [Read original article]() Author: Maxim Savin Published: 2025-06-06T06:38:06Z Content type: article Language: en Sources: [Klarna Engineering]() Topics: [configuration-management](), [cloud-infrastructure](), [Amazon Web Services](), [configuration](), [Cloud](), [Security](), [digital]() Tags: [automated](), [aws](), [change-management](), [cloud](), [cloud-infrastructure](), [cloud-inventory-software](), [configuration-management](), [engineering-management](), [lead-time](), [load-balancer](), [logs](), [rds](), [security](), [snapshots](), [technical-change]() ### AI overview Klarna describes Cloud Inventory, an ecosystem of services for collecting, normalizing, mapping, and serving information about ICT assets across its cloud infrastructure. The article explains how it supports configuration management through automated controls and reports faster control rollout and large-scale infrastructure optimization work. ### Source excerpt A long time ago, as a punishment for his crimes, Hades, the king of the underworld, made Sisyphus roll a huge enchanted boulder endlessly up a steep hill. Since then, many tech companies have learned to do that at scale by the hardships of cloud configuration management. Consider an Engineer who wants to ensure that the data that moves through their system is encrypted along the way. This is a noble goal, and to achieve it they must identify every classic load balancer in their AWS environment to replace it with an application load balancer that enforces encryption in transit. Now imagine doing that at the scale of a company like Klarna, where teams collectively own more than a thousand AWS accounts? Add to this a multitude of other configuration challenges -- databases that have not been deployed in a multi-availability zone set-up, missing Cloudwatch logs, expired digital certificates, systems running on unsupported framework versions -- the list is endless. Identifying and rectifying violating cloud assets often feels like an endless game of whack-a-mole played blindfolded. This is the steep price tech companies pay to operate their systems securely and confidently, day by day. Klarna Engineering Platform (KEP) has been on a mission to facilitate configuration management for Klarna Engineers. After a few iterations we have built an ecosystem of Klarna services designed to collect, normalize, map, and serve data on ICT assets within Klarna's cloud infrastructure. We call this system Cloud Inventory. Over the last few months Klarna has: Rolled out over 100 automated controls enhancing every aspect of our configuration management (security, governance, and operational excellence), each control aimed to help system owners to identify and fix violations quickly. Reduced the lead time of rolling out a control from several weeks to a matter of minutes And as a result, successfully completed several large-scale cloud infrastructure optimization projects, such as a company- ## Unlocking Flexibility in Configuration: The Power of Hydra DevFeed: [Unlocking Flexibility in Configuration: The Power of Hydra]() Original publisher: [Read original article]() Author: Catarina Goncalves Published: 2025-06-02T17:02:34Z Content type: tutorial Language: en Sources: [OLX]() Topics: [configuration-management](), [configuration](), [Sorting](), [recommendation systems](), [Command-line interface](), [Python]() Tags: [command-line](), [configuration](), [configuration-management](), [hydra](), [integration](), [project-organization](), [python](), [ranking](), [search](), [sorting]() ### AI overview OLX describes centralizing Learning to Rank projects and adopting Hydra to manage configuration across teams and repositories. The article introduces Hydra's hierarchical organization, runtime command-line overrides, optimization-tool integration, and Python usage. ### Source excerpt As software systems continue to grow in complexity, the demand for effective configuration management tools becomes not just important but essential. Our work on Learning to Rank (LTR) projects exemplifies this challenge. At OLX we use LTR to improve the search results based on their relevance. This involves training models to rank ads based on various features, ensuring that the most relevant ones appear at the top of the list. The resulting sorting can be found under the 'Recommended Ads' option, the default option currently live on our OLX websites in several countries. Given the potential to enhance user experience and increase engagement -- while balancing the visibility of paid (boosted) ads-- this approach is also being tested in other business units, such as Motors and Real Estate. More projects meant increased complexity, with multiple repositories holding various configuration files. These projects were spread across different teams and repositories, leading to duplicated efforts and repeated issues for similar tasks. This growing redundancy pushed the team to centralize all LTR projects within a single repository. We quickly recognized the need to enhance the experience for Data Scientists and Machine Learning Engineers who would work directly with this new centralized framework. Enter Hydra. Hydra -- The configuration tool Developed and maintained by Facebook AI Research, Hydra stands out when it comes to configuration management. It empowers developers with a sophisticated yet easy-to-use solution that simplifies even the most complex configuration setups. With features such as hierarchical organization, runtime command-line overrides, and seamless integration with optimization tools like Optuna, Hydra offers flexibility and efficiency. These qualities made Hydra the ideal choice for our project, and we have successfully integrated it to enhance our configuration management workflow. And don't worry too much about a learning curve -- Hydra has extensive doc ## What is Koreo? DevFeed: [What is Koreo?]() Original publisher: [Read original article]() Published: 2025-05-08T15:12:33Z Content type: article Language: en Sources: [Brave New Geek]() Topics: [Kubernetes](), [Platform Engineering](), [configuration-management](), [Orchestration](), [Helm charts](), [VPC](), [Amazon Web Services]() Tags: [aws](), [configuration](), [configuration-management](), [controllers](), [devops](), [engineering](), [helm](), [helm-charts](), [iac](), [infrastructure-as-code](), [koreo](), [kubernetes](), [orchestration](), [platform-engineering](), [resource-orchestration](), [vpc]() ### AI overview This article explains Koreo, an open-source platform engineering toolkit for Kubernetes. It describes Koreo's approach to Kubernetes configuration management and resource orchestration, and compares it with Helm and Kustomize, including their limitations for complex or dependent deployments. ### Source excerpt The platform engineering toolkit for Kubernetes Last month we open sourced Koreo, our "platform engineering toolkit for Kubernetes." Since then, we've seen a lot of interest from folks in the platform engineering and DevOps space. We've also gotten a lot of questions from people trying to better understand how Koreo fits into an already crowded landscape of Kubernetes tools. Koreo is a fairly complex tool, so it can be difficult to quickly grasp just what exactly it is_,_ what problems it's designed to solve, and how it compares to other, similar tools. In this post, I want to dive into these topics and also discuss the original motivation behind Koreo. ## Keycloak Adopts Terraform Provider DevFeed: [Keycloak Adopts Terraform Provider]() Original publisher: [Read original article]() Author: Thomas Darimont Published: 2024-12-09T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [terraform provider](), [Terraform](), [configuration-management](), [migration](), [releases](), [Go Language]() Tags: [configuration-management](), [cve](), [go](), [idm](), [kerberos](), [keycloak](), [ldap](), [migration](), [openid-connect](), [release](), [releases](), [saml](), [sso](), [terraform](), [terraform-provider]() ### AI overview Keycloak announces that the Keycloak Terraform Provider has moved under the Keycloak organization. The article identifies new maintainers, describes required configuration migration, announces an Apache 2.0 license change, and previews maintenance and 5.0 releases. ### Source excerpt New Repository Location We're excited to announce that the Keycloak Terraform Provider has officially moved under the Keycloak organization! You can find the new repository location here. The Journey So Far Thanks to our community survey, we confirmed that the Keycloak Terraform Provider by mrparkers is the most widely used tool for realm configuration management. The move to the Keycloak organization is a natural next step in making this essential tool a core part of the Keycloak ecosystem. Gratitude and Transition A huge thank-you to mrparkers for creating and maintaining the provider. Your contributions have been invaluable to the community. The new maintainers, Sebastian Schuster and Thomas Darimont, will ensure the project continues to thrive. Migration Notes You'll need to update your configurations to migrate to the Keycloak-hosted Terraform Provider. Check out our migration guide, especially the replace-provider instructions, to make the process smooth. Updates and Changes License Change: The Keycloak Terraform Provider now uses the Apache 2.0 license, ensuring broader adoption and clarity for contributors. Next releases: 4.5 Maintenance Release: Includes CVE fixes, Go upgrade, and license change. 5.0 Release (Upcoming): Adds support for Keycloak 24/26, new features, and improvements. Join the Community We're grateful for all contributors who've helped make the Terraform Provider what it is today. We welcome new contributions, issue reports, feature suggestions, and fixes. Let's work together to make it even better! Explore the new repository location, join the discussions, and help shape the future of the Keycloak Terraform Provider. ## What is Ansible? A brief history DevFeed: [What is Ansible? A brief history]() Original publisher: [Read original article]() Author: Henri Courdent Published: 2024-11-29T00:00:00Z Content type: article Language: en Sources: [Windmill Blog]() Topics: [Ansible](), [Automation](), [configuration-management](), [Deployment](), [DevOps](), [YAML](), [ssh]() Tags: [ansible](), [automation](), [configuration-management](), [deployment](), [devops](), [infrastructure](), [ssh](), [yaml]() ### AI overview This article traces Ansible's history and explains how its agentless, SSH-based, YAML-driven approach simplified configuration management, application deployment, and IT task automation. ### Source excerpt A brief history of Ansible, the tool that makes it easy to automate infrastructure. ## Keycloak Realm Configuration Management Tools Survey Results DevFeed: [Keycloak Realm Configuration Management Tools Survey Results]() Original publisher: [Read original article]() Author: Thomas Darimont Published: 2024-09-11T00:00:00Z Content type: article Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [configuration-management](), [terraform provider](), [API](), [Terraform]() Tags: [code-completion](), [configuration-management](), [idm](), [kerberos](), [keycloak](), [ldap](), [management](), [openid-connect](), [realm](), [saml](), [sso](), [terraform](), [terraform-provider](), [validation]() ### AI overview The Keycloak project reports results from a community survey on realm configuration management tools, based on 433 responses. The Terraform Keycloak Provider received about 51% of votes, and the five most-used tools accounted for 84% of responses. Respondents also identified challenges involving Admin API usability, configuration change detection, release compatibility, automatically created components, linting, validation, and code completion. ### Source excerpt Three months ago, the Keycloak project conducted a survey to gather insights on realm configuration tooling within our community. The number of responses overwhelmed us! With a total of 433 (!) submissions, it highlighted the diverse range of options our community uses for configuring realms. Thank You for your valuable feedback! Popular Tools in Use The survey revealed a variety of tools employed by the community for realm configuration, including: Terraform Provider for Keycloak Keycloak-Config-CLI Self-developed Realm Configuration Management Keycloak JSON Import/Export Keycloak Admin CLI kcadm.sh EPAM Keycloak Operator Keycloak Ansible Keycloak Pulumi Custom Operator for Realm Import/Update and Client Provisioning Keycloak Operator Realm Import via Custom Resources Crossplane Provider for Keycloak KeycloakMigration keycloak-configurator Keycloak Groovy Helpers Tool Usage Distribution From the submissions, we observed the following distribution of tool usage among respondents: Terraform Keycloak Provider ~51% of the votes Keycloak-Config-CLI ~16% of the votes Self-developed Realm Configuration Management ~7% of the votes Keycloak JSON Realm Import/Export ~6% of the votes Keycloak Admin CLI ~4% of the votes These top five tools accounted for 84% of all responses. Areas for Improvement While each tool has its strengths and weaknesses, the survey highlighted several common challenges: Using the Admin API can be awkward and inconsistent, for example, with references using IDs versus aliases. Recognizing changes in the configuration, such as when new roles are added to service accounts via the Admin UI, can be challenging or impossible. Many tools depend heavily on the Keycloak version used and are often not compatible with new releases. Managing components that are automatically created by Keycloak, like service accounts, is challenging with existing configuration tools. Lack of support for configuration linting, validation and code completion What's Next? Based on t ## Survey on Keycloak Realm Configuration Management Tools DevFeed: [Survey on Keycloak Realm Configuration Management Tools]() Original publisher: [Read original article]() Author: Thomas Darimont Published: 2024-06-25T00:00:00Z Content type: article Language: en Sources: [Keycloak Blog]() Topics: [configuration-management](), [Keycloak](), [configuration](), [DevOps](), [Tool](), [GitHub]() Tags: [configuration-management](), [devops](), [github](), [idm](), [kerberos](), [keycloak](), [ldap](), [management](), [openid-connect](), [saml](), [sso](), [survey](), [tools]() ### AI overview Keycloak asks its community to complete a survey about tools for managing Realm configurations. The survey covers configuration-as-code options including Keycloak Admin CLI, Keycloak-Config-CLI, Terraform Provider for Keycloak, Ansible, Pulumi, Crossplane, JSON import/export, the Keycloak Operator, custom resources, and manually managed configurations. ### Source excerpt Numerous options exist for managing Keycloak Realm configurations within the Keycloak ecosystem. We know that configuration as code is an essential topic for DevOps and that the Keycloak ecosystem needs an excellent solution to make this possible. As the Keycloak team, we want to understand better what works best for the community and how we can improve the support for Realm configuration Management tools. So that we in the Keycloak community have a representative picture of the configuration options used, we would also like you to participate in the following brief, anonymous survey. The options that exist on our radar are as follows: Keycloak Admin CLI kcadm.sh Keycloak-Config-CLI Terraform Provider for Keycloak Keycloak Ansible Pulumi Keycloak Provider Crossplane Keycloak Provider Keycloak JSON Import / Export Keycloak Operator Realm Import via Custom Resources Hand-made Realm Configuration Management Join the related discussion on GitHub to discuss this in more details with the Keycloak community. And don't forget to fill out the survey! Thank you very much for your support! ## Introducing Glassdoor's ML Registry: A Centralized Artifact Management Solution DevFeed: [Introducing Glassdoor's ML Registry: A Centralized Artifact Management Solution]() Original publisher: [Read original article]() Author: Rich Papalia Published: 2023-08-30T21:20:29Z Content type: article Language: en Sources: [Glassdoor Engineering]() Topics: [Machine Learning & Artificial Intelligence](), [Open Source](), [Development](), [Amazon SageMaker AI]() Tags: [aws](), [configuration-management](), [feature-store](), [lifecycle](), [machine-learning](), [machine-learning-platform](), [open-source](), [pipelines](), [registry]() ### AI overview Glassdoor describes its newly open-sourced ML Registry, a centralized service for managing machine-learning artifacts and related metadata. The registry is intended to provide a single source of truth and consistent access across teams and applications, integrating with other tools and services. ### Source excerpt Photo by Ryunosuke Kikuno on UnsplashGlassdoor's Machine Learning Engineering and Platform Team As part of Glassdoor's journey to becoming an ML-driven company, we've created an exceptional Machine Learning Engineering and Platform team, (see our blog about building this team here) dedicated to developing the foundational infrastructure for all of our ML initiatives. We've strategically built our ML platform by utilizing a combination of buying, building, and adopting from existing open-source solutions. This approach has allowed us to leverage the best of all worlds. Our team has had the opportunity to build numerous tools from scratch, including data pipelines, human-in-the-loop tools, and more. We've also built on top of existing tools like AWS Sagemaker to incorporate powerful in-house customizations into our feature store. We have more exciting plans in flight, such as building a new recommendations platform, further open-source contributions from our platform, and continuing to build on the foundation which we've established. Today, we'll delve into our newly open-sourced ML Registry. What is an ML Registry? The ML lifecycle encompasses far more than just model development. Once a model is built, many questions arise: Where does it reside? How do we access it? What if updates or versioning are needed? Where can we store the metadata describing the model? And what about other non-model artifacts? How can we efficiently manage all of this? Enter the ML Registry. Glassdoor's ML Registry is a centralized management service for ML artifacts and all related metadata. It serves as the single source of truth for all data pertaining to ML, enabling uniform and reliable access to this data across diverse teams and applications. It seamlessly integrates with other tools and services and provides robust, feature-rich functionality. Choosing Between Buying and Building, What Differentiates Our ML Registry? While several paid and open-source model registries already exist, ## Issuing and using SSH Certificates DevFeed: [Issuing and using SSH Certificates]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2022-11-09T00:00:00Z Content type: tutorial Language: en Sources: [Carlos Becker]() Topics: [certificates](), [ssh](), [OpenSSH](), [Docker](), [configuration-management]() Tags: [certificates](), [configuration-management](), [docker](), [openssh](), [private-key](), [public-key](), [ssh]() ### AI overview This tutorial explains how SSH certificates let administrators control access to servers without managing authorized keys. It covers creating a Certificate Authority key pair, issuing short-lived user certificates, using certificates with private keys, and testing the setup with OpenSSH in Docker. ### Source excerpt SSH certificates allow system administrators to SSH into machines without having to manage authorized keys in the servers. ## A Configuration-Management Approach to Building DUM-E-Inspired Robots DevFeed: [A Configuration-Management Approach to Building DUM-E-Inspired Robots]() Original publisher: [Read original article]() Published: 2021-01-22T19:17:58Z Content type: tutorial Language: en Sources: [Jessie Frazelle]() Topics: [Robotics](), [configuration-management](), [Docker](), [Redis](), [Machine Learning & Artificial Intelligence]() Tags: [configuration-management](), [docker](), [machine-learning](), [redis](), [robotic-arm](), [robotics]() ### AI overview This article explores how to build DUM-E-inspired workshop robots using a manufacturing configuration-management approach. It introduces ROS, Elementary Robotics' atom OS, Redis messaging, Docker-based component packaging, cameras, sensors, and machine learning, then begins outlining a fire-extinguisher robot. ### Source excerpt DUM-E ("dummy") and U ("you") are the names of the robot arms in the Iron Man movies. After watching this movie for the n-teenth time, I have a strong urge to also have robotic arms in a workshop like Tony Stark. You can see the value of the robots clearly throughout the movie. The robots allow Tony to produce suits more quickly, help test the suits, and provide periodic comedic relief. At one point, DUM-E even saves Tony's life. As a bit of a thought experiment, I considered what it would take to get the same functionality in reality. What this ends up leading to is a configuration management system for manufacturing, much like a build system. This post is going to outline that a bit! The most popular open-source framework for building robots is ROS (Robotics Operating System). You can add different components like cameras or sensors and program all the functionality you need for your specific use case. The underlying infrastructure works by passing messages, through a pub/subsystem. Elementary Robotics created their own OS called atom. It's pretty cool, it uses Redis for the messaging layer and docker for packaging and defining the individual components. Need a camera on your robot? Include the camera container in your atom OS config file. You can then pipe the messages from the camera into machine learning in another container. It's important to know the basics of these frameworks to continue into how we would build DUM-E and U. Let's dive in. The end goal here is to be as productive as Tony Stark at building things. Fire extinguisher robot One of my favorite scenes with DUM-E is when Tony is testing the suits and it's DUM-E's job to blast him with a fire extinguisher when he is on fire. For comic relief in the movie, DUM-E messes this up a bunch and blasts Tony when he's not on fire. Let's break this down, starting with a robot that will shoot a fire extinguisher on any fire. First, what you would need is the robotic arm base, maybe you build your own, maybe it' ## The architecture of declarative configuration management DevFeed: [The architecture of declarative configuration management]() Original publisher: [Read original article]() Author: Nelson Elhage Published: 2019-11-12T22:00:00Z Content type: article Language: en Sources: [Nelson Elhage]() Topics: [configuration-management](), [Infrastructure as code](), [Puppet](), [Terraform](), [Kubernetes](), [Cloud](), [Amazon EC2](), [Google Cloud Platform (GCP)]() Tags: [architecture](), [cloud](), [code](), [configuration](), [configuration-management](), [data](), [declarative](), [infrastructure-as-code](), [interface](), [kubernetes](), [plugins](), [puppet](), [state](), [terraform]() ### AI overview This article presents a conceptual model of declarative configuration management tools. It explains how these tools represent a desired system state, compare it with the current state, and update the system to match. The article also describes resource schemas as a core architectural layer and discusses examples including Puppet, Chef, Terraform, and Kubernetes. ### Source excerpt With the ongoing move towards "infrastructure-as-code" and similar notions, there's been an ongoing increase in the number and popularity of declarative configuration management tools. This post attempts to lay out my mental model of the conceptual architecture and internal layering of such tools, and some wishes I have for how they might work differently, based on this model. Background: declarative configuration management Declarative configuration management refers to the class of tools that allow operators to declare a desired state of some system (be it a physical machine, an EC2 VPC, an entire Google Cloud account, or anything else), and then allow the system to automatically compare that desired state to the present state, and then automatically update the managed system to match the declared state. ## Configuration management - How to start testing your salt formulas DevFeed: [Configuration management - How to start testing your salt formulas]() Original publisher: [Read original article]() Author: Marc Siebeneicher Follow Published: 2016-10-12T00:00:00Z Content type: tutorial Language: en Sources: [Trivago]() Topics: [configuration-management](), [saltstack](), [Testing](), [test](), [Provisioning](), [YAML](), [pull-requests]() Tags: [also](), [backend](), [configuration-management](), [devops](), [how-to](), [infrastructure](), [provisioning](), [pull-requests](), [salt](), [testing](), [yaml]() ### AI overview This tutorial explains why trivago began testing SaltStack formulas as its configuration repository grew in complexity. It describes common problems, including YAML syntax errors, incorrect conditions, template issues, networking problems, state-order issues, and logical changes, and motivates automated testing for pull requests. ### Source excerpt Configuration management tools have recently gained a lot of popularity. At trivago we use SaltStack to automate our infrastructure. As the complexity of configuration files and formulas is increasing, we need a fast, reliable way to test our changes. ## Writing custom modules for Ansible DevFeed: [Writing custom modules for Ansible]() Original publisher: [Read original article]() Author: Wojtek Gawroński (afronski) Published: 2016-03-28T19:00:00Z Content type: tutorial Language: en Sources: [Wojtek Gawroński]() Topics: [Ansible](), [modules](), [Automation](), [configuration-management](), [Erlang](), [JSON](), [YAML](), [Scripting]() Tags: [ansible](), [automation](), [c-sharp](), [canvas](), [clojure](), [code](), [commands](), [configuration](), [configuration-management](), [css](), [css3](), [erlang](), [html](), [html5](), [javascript](), [json](), [modules](), [mono](), [net](), [node-js](), [programming](), [scripting](), [sicp](), [vagrant](), [webgl]() ### AI overview This tutorial explains Ansible modules, including their role in remote infrastructure management, YAML-based declarative configuration, dependencies on the provisioned machine, and JSON input/output requirements. It then introduces a case study for implementing a custom module in Erlang to process XML status pages. ### Source excerpt Writing custom modules for Ansible Introduction What is Ansible and what is a module? If you are a big fan of automation, if you are focused on spreading and building software in line with DevOps culture, tools related with automation / configuration management like Chef or Ansible are probably well known to you. From the other hand that what differentiates those tools is a topic for a next blog post. Without diving into those differences, let's briefly zoom into details for those people which do not know what Ansible and modules are. Ansible is a free-software platform for configuring and managing machines. It combines deployment, ad-hoc tasks execution and configuration management. This tool uses YAML and declarative way of defining steps, which are modifying state of your fleet. Module is a single piece of those steps, a well defined way of executing certain tasks on the remote infrastructure. It executes commands, and communicates by outputting JSON to standard output - it means that it can be written in any programming or scripting language. Development Before we'll start actual implementation we need to know how it works underneath. Requirements If you want to write a custom module, we stated above that you have to be aware of two things. Your module code will be executed on the provisioned machine, so all dependencies which your module requires, have to be there. Second, your module communicates over specific input and output protocols. It uses certain syntax for sending input parameters (either sent as a stdin or a file) and JSON protocol which will be consumed as an output of the module. And nothing more - any other, non-JSON compliant output will be treated as an error, and would not be consumed by Ansible properly. Case Study We would like to consume XMLified status pages and do certain actions based on checked and exposed facts, scraped from aforementioned place. Because I like Erlang, I will use that language to implement that module. We will do it usin