# Provisioning Published articles for Provisioning. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## AWS Elastic Beanstalk introduces Cluster Mode DevFeed: [AWS Elastic Beanstalk introduces Cluster Mode]() Original publisher: [Read original article]() Author: Channy Yun (윤석찬) Published: 2026-09-17T19:20:21Z Content type: release Language: en Sources: [AWS News Blog]() Topics: [Amazon Web Services](), [Deployment](), [Amazon EKS](), [autoscaling](), [Monitoring](), [observability](), [Provisioning](), [Secrets Management](), [AWS Certificate Manager](), [CI/CD]() Tags: [amazon-eks](), [amazon-elastic-kubernetes-service](), [application](), [autoscaling](), [aws](), [aws-certificate-manager](), [aws-elastic-beanstalk](), [ci-cd](), [cluster](), [code](), [compute](), [container](), [deployment](), [dockerfiles](), [https](), [infrastructure](), [kubernetes](), [launch](), [monitoring](), [news](), [provisioning]() ### AI overview AWS Elastic Beanstalk introduces a fully managed Cluster Mode that runs multiple applications on shared infrastructure powered by Amazon EKS. It also highlights AI-assisted environment analysis, GitHub Actions deployment, observability, traffic-splitting deployments with rollback, autoscaling, secrets management, and HTTPS by default. ### Source excerpt Run an application on AWS Elastic Beanstalk Cluster Mode without provisioning or operating the compute underneath it. You provide a container image or source code; Elastic Beanstalk with service-operated compute creates and operates the environment that runs it. ## How Equinix cut operational overhead with a shared services architecture on Amazon EKS DevFeed: [How Equinix cut operational overhead with a shared services architecture on Amazon EKS]() Original publisher: [Read original article]() Author: Chhavi Kaushik Published: 2026-09-17T18:00:56Z Content type: article Language: en Sources: [AWS Architecture Blog]() Topics: [Amazon EKS](), [Kubernetes](), [Architecture & Design](), [Cloud](), [Deployment](), [Provisioning](), [observability](), [Security](), [CI/CD](), [Open Source]() Tags: [amazon-eks](), [amazon-elastic-kubernetes-service](), [architecture](), [customer-solutions](), [deployment](), [infrastructure](), [kubernetes](), [observability](), [pipelines](), [provisioning](), [security]() ### AI overview Equinix moved from independently managed Kubernetes clusters on Amazon EC2 to a shared services architecture on Amazon EKS. The approach centralizes governance and common infrastructure services while addressing operational sprawl, lifecycle complexity, security, networking, observability, and deployment consistency. ### Source excerpt Equinix, the world's digital infrastructure company, built a shared services architecture on Amazon EKS to eliminate the operational sprawl of its self-managed Kubernetes environment. Learn how a multi-account North Star architecture centralized governance and shared services, delivering 4x faster deployments and 40% less operational overhead. ## How to attach an owner to every cloud resource you find DevFeed: [How to attach an owner to every cloud resource you find]() Original publisher: [Read original article]() Author: Zeen Rachidi Published: 2026-09-15T14:00:00Z Content type: tutorial Language: en Sources: [The New Stack]() Topics: [Cloud](), [Provisioning](), [Open Policy Agent](), [audit trail]() Tags: [audit-trail](), [cloud](), [cloud-services](), [devops](), [env-zero](), [how-to](), [logs](), [open-policy-agent](), [platform-engineering](), [policy](), [post-contributed](), [provisioning](), [sponsor-env-zero](), [sponsored-post-contributed]() ### AI overview This tutorial explains how to identify cloud resources without assigned owners and prevent new ownerless resources. It presents continuously synced inventory queries, Open Policy Agent policies requiring owner tags, and logs or audit trails for resource governance. ### Source excerpt The engineer who knew why that cloud instance existed has left the company. The instance is still running, the bill The post How to attach an owner to every cloud resource you find appeared first on The New Stack. ## Inside LuBot's database-per-tenant architecture DevFeed: [Inside LuBot's database-per-tenant architecture]() Original publisher: [Read original article]() Author: Carlota Soto Published: 2026-09-14T12:00:00Z Content type: article Language: en Sources: [Blog -- Neon Docs]() Topics: [Database](), [Software as a service](), [Supabase](), [Provisioning](), [stripe](), [API]() Tags: [api](), [architecture](), [billing](), [case-studies](), [checkout](), [database](), [infrastructure](), [product](), [provisioning](), [saas](), [scale](), [stripe]() ### AI overview This article explains LuBot's database-per-tenant architecture. LuBot uses Supabase for shared administrative data such as organizations, users, and billing state, while each paying customer receives an isolated Postgres database. Stripe checkout triggers a webhook that provisions a Neon branch through the Neon API, with deterministic naming to prevent duplicate tenants. Neon branches provide independent compute and can scale idle tenants to zero. ### Source excerpt It took six days to go from zero to isolated Postgres per tenant, provisioned the moment someone pays. A traditional Postgres setup would have been a full quarter of work. ## KCP: How to Migrate to Confluent Cloud in Days, Not Weeks DevFeed: [KCP: How to Migrate to Confluent Cloud in Days, Not Weeks]() Original publisher: [Read original article]() Author: Ahmed Saef Zamzam Published: 2026-09-14T07:00:00Z Content type: tutorial Language: en Sources: [Confluent: Data in motion]() Topics: [Kafka](), [migration](), [Confluent Cloud](), [Replication](), [Infrastructure as code](), [Provisioning](), [Access Control](), [Structured-data]() Tags: [access-control](), [confluent](), [confluent-cloud](), [data-replication](), [infrastructure-as-code-iac](), [kafka](), [migration](), [open-source](), [provisioning](), [replication](), [schema]() ### AI overview The article explains how Confluent's open source KCP tool automates migration from Amazon MSK to Confluent Cloud. KCP supports discovery, infrastructure provisioning, ACL and schema mapping, and migration, while Cluster Linking provides offset-preserving data replication. Support for self-managed Kafka migrations is described as coming soon. ### Source excerpt Use Kafka Copy Paste (KCP) to automate Kafka migration with infrastructure generation, ACL and schema mapping, and offset-preserving data replication. ## How to answer the identity questions on an enterprise security questionnaire DevFeed: [How to answer the identity questions on an enterprise security questionnaire]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [WorkOS Blog]() Topics: [Security](), [Single sign-on (SSO)](), [Provisioning](), [OpenID connect (OIDC)](), [App]() Tags: [configuration](), [enterprise](), [how-to](), [identity](), [integration](), [oidc](), [okta](), [provisioning](), [saml](), [security](), [sign-in](), [sso]() ### AI overview A practical guide to answering identity-related questions in enterprise security questionnaires. It explains what reviewers are really assessing behind SAML single sign-on and SCIM provisioning questions, including implementation details such as per-organization configuration, certificate rotation, and reliable deprovisioning. ### Source excerpt Every line has a literal answer and a real question behind it. Here is what the buyer is actually checking, which answers you can buy, and the three you cannot fake. ## See How Organizations Achieved 137% ROI with VMware Cloud Foundation 9 DevFeed: [See How Organizations Achieved 137% ROI with VMware Cloud Foundation 9]() Original publisher: [Read original article]() Author: vmwareblogs Published: 2026-09-08T15:00:00Z Content type: article Language: en Sources: [VMware Blogs]() Topics: [Cloud](), [Provisioning](), [systems](), [Security]() Tags: [cloud](), [cloud-infrastructure](), [compliance](), [cost](), [efficiency](), [financial](), [home-page](), [infrastructure](), [legacy](), [private-cloud](), [provisioning](), [survey](), [vcf-9-0](), [vcf-9-1](), [vmware](), [vmware-cloud-foundation](), [webinar]() ### AI overview The article presents a commissioned Forrester Consulting Total Economic Impact study of VMware Cloud Foundation 9. Based on interviews with eight customers and a survey of 55 customers over a modeled three-year period, it describes projected financial and operational benefits for large enterprises running VCF 9 in production, including lower infrastructure costs, reduced operational effort, less downtime, faster delivery, tool consolidation, and improved security and compliance. The title reports 137% ROI. ### Source excerpt Enterprises running private cloud face a common question: what does the investment actually deliver? To answer it, we commissioned Forrester Consulting to conduct an independent New Technology Total Economic Impact (TEI) study on VMware Cloud Foundation 9 (VCF 9). Forrester interviewed decision-makers at organizations running VCF 9 and surveyed additional customers to develop a composite ... Continued The post See How Organizations Achieved 137% ROI with VMware Cloud Foundation 9 appeared first on VMware Blogs. ## SCIM directory sync: A deep dive into deprovisioning DevFeed: [SCIM directory sync: A deep dive into deprovisioning]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-09-08T00:00:00Z Content type: article Language: en Sources: [WorkOS Blog]() Topics: [Protocol (disambiguation)](), [Security](), [Parser](), [Entra ID]() Tags: [audit](), [deep-dive](), [filter](), [protocol](), [provisioning](), [reconciliation](), [security]() ### AI overview This deep dive explains how SCIM directory deprovisioning reaches applications, why identity providers commonly deactivate users instead of deleting them, and how provider-specific payloads and missed events can create security risks. It covers normalization, reconciliation, session termination, and inspecting provider requests. ### Source excerpt What actually happens when a user is removed: the event your app receives, the directories that never send one, and how to catch what gets dropped. ## Vespa Newsletter, September 2026 DevFeed: [Vespa Newsletter, September 2026]() Original publisher: [Read original article]() Author: Bonnie Chase Published: 2026-09-08T00:00:00Z Content type: news Language: en Sources: [Vespa Blog]() Topics: [ann](), [Latency](), [Provisioning](), [Algorithm](), [telemetry](), [Graphs]() Tags: [2026](), [algorithm](), [cloud](), [features](), [graph](), [latency](), [newsletter](), [product](), [provisioning](), [ranking](), [retrieval](), [september-2026](), [telemetry](), [updates]() ### AI overview The September 2026 Vespa newsletter announces updates including time-constrained ANN search, sub-query ranking support, flexible provisioning, new rank features, and telemetry export. It also introduces Vespa.ai Live, an in-person community meetup focused on retrieval and ranking systems. ### Source excerpt Advances in Vespa include time-constrained ANN search, sub-query ranking support, flexible provisioning, new rank features and telemetry export ## Nuxt co-creator Alexandre Chopin joins Encore DevFeed: [Nuxt co-creator Alexandre Chopin joins Encore]() Original publisher: [Read original article]() Author: Marcus Kohlberg Published: 2026-09-07T00:00:00Z Content type: news Language: en Sources: [Encore Updates]() Topics: [Provisioning](), [Cloud](), [Vue.js](), [Command-line interface](), [GitHub](), [Open Source](), [SDKs](), [AI-assisted coding]() Tags: [agentic-development](), [ai-agents](), [cli](), [developer](), [developer-relations](), [github](), [infrastructure](), [open-source](), [provisioning](), [sdk](), [teams](), [vue]() ### AI overview Encore announces that Alexandre Chopin, co-creator of Nuxt, has joined the company as Head of Developer Relations. He will work with developers and engineering teams and help shape Encore's roadmap around automated infrastructure. ### Source excerpt Alexandre joins as Head of Developer Relations to help bring automated infrastructure to more developers and teams. ## AgentOps: How to build AI agents at scale DevFeed: [AgentOps: How to build AI agents at scale]() Original publisher: [Read original article]() Author: Matar Peles Published: 2026-09-06T18:44:36Z Content type: tutorial Language: en Sources: [Developer Experience & Platform Engineering Blog | Port]() Topics: [AI Agent](), [Artificial Intelligence](), [Provisioning](), [Authorization](), [Cloud]() Tags: [agents](), [ai](), [ai-agents](), [best-practices](), [build-ai-agents](), [developer](), [how-to](), [platform](), [provisioning](), [workflow]() ### AI overview This article presents AgentOps as the practice of creating, running, and operating AI agents reliably in production and at scale. It recommends governing agents throughout their lifecycle, starting with an agent registry and a standardized golden-path workflow for creating new agents. The proposed workflow captures an agent's purpose and dependencies, obtains approval for sensitive access, creates scoped service accounts with minimum permissions, provisions the agent on a selected platform, and registers it. ### Source excerpt AgentOps is the practice of running AI agents reliably at scale. See what it covers, which teams own it, and where to start. ## From Bottleneck to Breakthrough: Centralizing GitOps at Enterprise Scale with VCF 9.1.1 DevFeed: [From Bottleneck to Breakthrough: Centralizing GitOps at Enterprise Scale with VCF 9.1.1]() Original publisher: [Read original article]() Author: vmwareblogs Published: 2026-09-03T14:03:46Z Content type: article Language: en Sources: [VMware Blogs]() Topics: [GitOps](), [Platform Engineering](), [CI/CD](), [Automation](), [Cloud](), [Provisioning](), [Tooling]() Tags: [argo-cd](), [automation](), [cloud-infrastructure](), [cloud-native](), [continuous-delivery](), [deployment](), [gitops](), [home-page](), [platform](), [platform-engineering](), [provisioning](), [self-service](), [vcf-9-1](), [vcf-automation](), [vmware](), [vmware-cloud-foundation]() ### AI overview This VMware article announces VCF 9.1.1, which introduces a native GitOps service for VCF Automation Org users in Tech Preview. By integrating Argo CD, the update aims to centralize declarative application delivery, continuous delivery pipelines, and lifecycle management at enterprise scale, reducing manual work and operational friction for platform engineering teams. ### Source excerpt In today's fast-paced digital economy, where AI-driven innovation demands unprecedented agility, IT leaders are tasked with more than just provisioning infrastructure; they are expected to deliver a frictionless, self-service platform that accelerates software delivery. For platform engineers, cloud architects, and IT executives, the goal is to bridge the gap between robust infrastructure and modern application ... Continued The post From Bottleneck to Breakthrough: Centralizing GitOps at Enterprise Scale with VCF 9.1.1 appeared first on VMware Blogs. ## Announcing native MySQL databases: Bring your MySQL workloads to Appwrite DevFeed: [Announcing native MySQL databases: Bring your MySQL workloads to Appwrite]() Original publisher: [Read original article]() Author: Jake Barnby Published: 2026-09-02T00:00:00Z Content type: release Language: en Sources: [Appwrite Blog]() Topics: [Appwrite](), [MySQL](), [Databases](), [Provisioning](), [Availability](), [Replication](), [autoscaling](), [TLS (Transport Layer Security)]() Tags: [announcements](), [autoscaling](), [availability](), [database](), [databases](), [mysql](), [provisioning](), [replication](), [tls]() ### AI overview Appwrite announces native managed MySQL databases that can run inside the same project as an application's existing backend. The service supports MySQL 8.4 and 8.0, standard drivers and ORMs, TLS, backups and point-in-time recovery, replicas with automatic failover, database branches, scaling, and connection pooling. ### Source excerpt Provision a managed MySQL 8.4 instance inside your Appwrite project and keep using the drivers, ORMs, and tools your applications already depend on. ## Developer Self-Service Pipelines with Harness IDP DevFeed: [Developer Self-Service Pipelines with Harness IDP]() Original publisher: [Read original article]() Author: Rashmi Hegde Published: 2026-08-26T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [CI/CD](), [Deployment](), [Provisioning](), [Microservice]() Tags: [ci-cd](), [deployment](), [developer](), [idp](), [platform](), [provisioning](), [self-service]() ### AI overview This article explains how platform teams can connect Harness IDP self-service workflows to CI/CD and deployment pipelines. It covers triggering deployments, provisioning infrastructure, and managing promotion logic while preserving governance and operational consistency. ### Source excerpt Connect developer self-service to production with Harness IDP's pipeline integration. Automate deployments and boost velocity. Learn more. | Blog ## Auth0 Enterprise Connect in beta vs. WorkOS for enterprise SSO and SCIM DevFeed: [Auth0 Enterprise Connect in beta vs. WorkOS for enterprise SSO and SCIM]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-08-21T00:00:00Z Content type: comparison Language: en Sources: [WorkOS Blog]() Topics: [Auth0](), [Single sign-on (SSO)](), [Provisioning](), [OpenID connect (OIDC)](), [saml](), [Security]() Tags: [auth0](), [enterprise](), [oidc](), [provisioning](), [saml](), [sso]() ### AI overview This comparison examines Auth0 Enterprise Connect, which is in beta, alongside WorkOS for enterprise SSO and SCIM. It explains how Auth0 preserves an existing authorization server while adding enterprise identity capabilities, and highlights differences in SCIM direction, plan tier, pricing, and access requirements. ### Source excerpt Auth0's beta keeps the authorization server you already run and adds the enterprise surface around it. The differences from WorkOS show up in SCIM direction, plan tier, and which pricing table you are actually reading. ## Continuous Delivery Excellence with Harness IDP DevFeed: [Continuous Delivery Excellence with Harness IDP]() Original publisher: [Read original article]() Author: Rashmi Hegde Published: 2026-08-21T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [Continuous Delivery (CD)](), [internal developer portal](), [CI/CD](), [Platform Engineering](), [Deployment](), [Automation](), [Orchestration](), [Provisioning]() Tags: [automation](), [ci-cd](), [continuous-delivery](), [deployment](), [developer-velocity](), [idp](), [internal-developer-portal](), [orchestration](), [platform-engineering](), [provisioning](), [self-service](), [tooling]() ### AI overview This article explains how Harness Internal Developer Portal can support continuous delivery through self-service workflows, standardized deployment pipelines, and unified service catalogs. It argues that delivery friction often comes from cognitive overhead, unclear prerequisites, fragmented permissions and configuration, and insufficiently discoverable workflows rather than a lack of pipeline capability. ### Source excerpt Achieve continuous delivery excellence using Harness Internal Developer Portal. Streamline deployments, boost velocity, and empower developers. Learn more. | Blog ## Jamf Administrators: Your Backup Deployment Just Got Simpler DevFeed: [Jamf Administrators: Your Backup Deployment Just Got Simpler]() Original publisher: [Read original article]() Author: Kari Wilson Published: 2026-08-19T13:28:18Z Content type: article Language: en Sources: [Backblaze Blog | Cloud Storage & Cloud Backup]() Topics: [Deployment](), [Provisioning](), [configuration](), [App](), [Orchestration]() Tags: [app](), [backing-up](), [backup](), [businessbackup](), [configuration](), [deployment](), [featured](), [featured-backing-up](), [onboarding](), [provisioning]() ### AI overview This article explains how Backblaze simplifies backup deployment for Mac fleets managed with Jamf. It describes fixed-email matching for devices with known owners, dynamic user detection for devices assigned later, and the ability to combine both methods within one deployment. ### Source excerpt Simplify Mac backup deployment with Backblaze and Jamf. Flexible user matching reduces manual setup, streamlines onboarding, and helps IT teams protect every device using their existing Jamf workflows. The post Jamf Administrators: Your Backup Deployment Just Got Simpler appeared first on Backblaze Blog | Cloud Storage & Cloud Backup ## Migrating Live Enterprise SCIM Directories to WorkOS with SCIM Bridge DevFeed: [Migrating Live Enterprise SCIM Directories to WorkOS with SCIM Bridge]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-08-14T00:00:00Z Content type: tutorial Language: en Sources: [WorkOS Blog]() Topics: [migration](), [Provisioning]() Tags: [architecture](), [bridge](), [database](), [migration](), [okta](), [provisioning](), [proxy](), [rollback]() ### AI overview The article presents SCIM Bridge, a reversible migration proxy for moving live enterprise directories from a home-grown SCIM endpoint to WorkOS Directory Sync. It describes dual-writing, backfilling, verification, staged authority, and rollback before final cutover. ### Source excerpt How SCIM Bridge moves live enterprise directories onto WorkOS Directory Sync with zero downtime, staged authority, and lossless rollback until the last step. ## Enterprise Managed Users is now generally available DevFeed: [Enterprise Managed Users is now generally available]() Original publisher: [Read original article]() Author: Bel Curcio Published: 2026-08-11T20:38:00Z Content type: release Language: en Sources: [Vercel News]() Topics: [Vercel](), [Single sign-on (SSO)](), [Authentication](), [Provisioning]() Tags: [authentication](), [docs](), [enterprise](), [identity](), [provisioning](), [sign-in](), [sso](), [updates](), [vercel]() ### AI overview Vercel Enterprise Managed Users is now generally available, giving organizations centralized control over accounts on verified domains through SAML SSO, Directory Sync, and IdP-managed profiles. ### Source excerpt Enterprise Managed Users (EMU) gives organizations full control over the Vercel accounts tied to their verified domains. It makes the organization's identity provider the single source of truth for authentication and account lifecycle, so accounts on company domains are governed centrally rather than owned by individuals. Now generally available IdP-enforced sign-in: Managed users sign in through SAML SSO only. All other login methods, including email OTP, GitHub, Google, and GitLab, no longer work for managed accounts. SCIM provisioning & lifecycle: Directory Sync creates, updates, and deprovisions managed users automatically, keeping accounts in sync with your IdP. Owned by your organization: Profile settings are managed through your IdP rather than by the individual. Self-serve enablement: Turn EMU on for a verified domain in Team Settings under Security & Privacy, and extend it across multiple eligible teams in a single step. Requires an Enterprise plan, enforced SAML SSO, active Directory Sync, and at least one verified domain. In Beta, available on request Hobby team transition: Members with an existing personal account on a newly managed domain are guided to add a personal email (keeping their hobby projects) or delete the account, then continue to their work through SSO. Automatic conversion: Personal accounts with no content or activity are archived automatically, and their owners land in a new managed account at their next SSO sign-in. To request access, contact your account team. Learn more in the Enterprise Managed Users and Hobby team transition docs. Read more ## DevOps Automation Platform Explained: Why You Need One DevFeed: [DevOps Automation Platform Explained: Why You Need One]() Original publisher: [Read original article]() Author: Eric Minick Published: 2026-08-11T00:00:00Z Content type: tutorial Language: en Sources: [Harness Blog]() Topics: [DevOps](), [Automation](), [Deployment](), [Artificial Intelligence](), [ci](), [Provisioning](), [Terraform](), [Ansible](), [Incident response]() Tags: [ai](), [ansible](), [automation](), [ci](), [deployment](), [devops](), [incident](), [monitoring](), [provisioning](), [security](), [terraform]() ### AI overview This article explains how a DevOps automation platform connects build, test, deployment, security, provisioning, incident response, and rollback workflows. It contrasts an integrated, workflow-aware platform with separate automation tools such as Ansible, CI runners, and Terraform, and describes AI-native capabilities including test selection, failure diagnosis, anomaly detection, and auto-remediation. ### Source excerpt What is a DevOps automation platform and why does your team need one? How deployment automation, AI, and automated DevOps speed up delivery. | Blog ## Terraform and Kubernetes: A Practical Guide for 2026 DevFeed: [Terraform and Kubernetes: A Practical Guide for 2026]() Original publisher: [Read original article]() Author: Pulumi Content Team Published: 2026-08-07T00:00:00Z Content type: tutorial Language: en Sources: [Pulumi]() Topics: [Kubernetes](), [Terraform](), [Provisioning](), [Testing](), [Artificial Intelligence]() Tags: [ai](), [ai-agents](), [deployment](), [general](), [guide](), [infrastructure-as-code](), [kubernetes](), [platform-engineering](), [provisioning](), [terraform](), [testing]() ### AI overview A practical guide to using Terraform with Kubernetes, covering the Kubernetes provider, provisioning workflows, testing, policy, deployment, and the role of AI agents. It explains limitations including provider ordering and the need for Kubernetes API access during planning. ### Source excerpt Yes, Terraform can manage Kubernetes: the official hashicorp/kubernetes provider lets you declare Deployments, Services, and other objects as HCL resources, and community providers like kubectl fill in the gaps. It works well for many teams. The friction shows up around two well-documented limits -- provider ordering and plan-time API access -- and around testing, where a general-purpose language changes what's possible. That friction matters more in 2026 than it did a few years ago. Kubernetes infrastructure now sits next to AI-driven engineering workflows: agents that propose changes, run previews, and open pull requests need infrastructure code they can read, test, and reason about with the same tools they use for application code. A cluster definition written in HCL and a workload definition written in YAML are both harder for an agent -- and a person -- to unit test, refactor, or type-check than the equivalent in TypeScript, Python, or Go. This guide is about the operating model for Kubernetes infrastructure: how the cluster, the platform layer, and the workloads on top of it get provisioned, tested, and shipped. It's a different question from "should I write my Kubernetes manifests in YAML, HCL, or a real language," which we cover in detail in YAML, Terraform, or Pulumi: what's the smart choice for deployment automation with Kubernetes? Read that post first if you're deciding how to author manifests; read this one for the wider workflow -- provisioning, testing, policy, and where AI agents fit. How does Terraform manage Kubernetes today? The hashicorp/kubernetes provider (current release v3.2.1, requiring Terraform 1.0.0 or later) is the primary path, and teams typically combine it with one or two others depending on what they're deploying: Approach What it's for Notes Typed resources (kubernetes_deployment_v1, kubernetes_service_v1, etc.) Core, well-known object types Full HCL validation and typed attributes for the objects the provider models explicitly kubernete ## Infrastructure Control Plane | Day 2 Operations & Drift DevFeed: [Infrastructure Control Plane | Day 2 Operations & Drift]() Original publisher: [Read original article]() Author: Nicole Morgan Published: 2026-08-06T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [Infrastructure as code](), [Software-defined networking](), [Provisioning](), [Ansible](), [CI/CD](), [configuration](), [Amazon EC2](), [AWS CloudFormation](), [Amazon Web Services]() Tags: [ansible](), [aws](), [ci-cd](), [cloudformation](), [configuration](), [deployment](), [ec2](), [incident](), [infrastructure](), [infrastructure-as-code](), [provisioning](), [systems](), [tools]() ### AI overview This article explains that infrastructure problems often emerge during day 2 operations, after initial deployment. It describes how console changes, incidents, and isolated Terraform, Ansible, and CI/CD workflows create infrastructure drift, and argues that control planes can enforce governance, detect divergence, and automate remediation. ### Source excerpt Learn why infrastructure breaks after deployment and how control planes enforce governance, detect drift, and automate remediation across Terraform, Ansible, an | Blog ## The Pulse: Bending Spoons' Acquisition Strategy DevFeed: [The Pulse: Bending Spoons' Acquisition Strategy]() Original publisher: [Read original article]() Author: Gergely Orosz Published: 2026-08-05T11:45:13Z Content type: opinion Language: en Sources: [The Pragmatic Engineer]() Topics: [migration](), [Architecture & Design](), [Microservices](), [Java](), [virtual machines](), [Cloud](), [Google Cloud Platform (GCP)](), [legacy application]() Tags: [architecture](), [backend](), [cloud](), [google-cloud](), [java](), [legacy](), [microservices](), [migration](), [performance](), [provisioning](), [virtual-machines]() ### AI overview The article examines Bending Spoons' acquisition strategy, including its announced $1.285 billion cash purchase of Airtable and its approach to operating struggling products with smaller teams. It also describes the company's reported modernization of Evernote from a Java 11 monolith running across 750 manually provisioned virtual machines on Google Cloud to a managed-database and microservices architecture in about six months, with reported improvements in performance, reliability, operating cost, and on-call load. ### Source excerpt In only 5 years, Hopin went from zero to a $7.7B valuation, and back to zero again. Also: Bending Spoons' startup acquisition model. ## Using Pulumi With an Internal Developer Portal | Port DevFeed: [Using Pulumi With an Internal Developer Portal | Port]() Original publisher: [Read original article]() Author: Mor Paz Published: 2026-07-30T10:17:19Z Content type: tutorial Language: en Sources: [Developer Experience & Platform Engineering Blog | Port]() Topics: [internal developer portal](), [Infrastructure as code](), [Provisioning](), [GitOps](), [DevOps](), [Architecture & Design]() Tags: [building](), [catalog](), [developer](), [developer-portal](), [developers](), [devops](), [how-to](), [iac](), [infrastructure](), [infrastructure-as-code](), [internal-developer-portal](), [learn](), [platform](), [provisioning](), [resources](), [software](), [software-catalog]() ### AI overview This tutorial explains how internal developer portals can make infrastructure as code easier and safer for developers. It describes using a software catalog and reusable self-service actions to abstract IaC details and provision developer environments, with Pulumi and Port as the example. ### Source excerpt Internal developer portals can close the IaC and developer loop. Let's look at a live example of how to use Pulumi and internal developer portals. [Next page]()