Digest #171: Git Optimization, FinOps X, Terraform State, Kubernetes 1.33, and DevOps Security Threats

GitLab’s 41-min backup breakthrough, AI-powered FinOps from the cloud giants, Infrastructure-from-Code pitfalls, Terraform state best practices, Kubernetes live pod resizing, cryptojacking in CI/CD.

Welcome to this week’s edition of the DevOps Bulletin!

GitLab engineers reduced backup times from 48 hours to just 41 minutes by revisiting a long-standing Git function. At FinOps X 2025, major cloud providers introduced AI-powered features for proactive cost management, while security researchers warned about a new cryptojacking campaign (JINX-0132) targeting common DevOps tools.

Tutorials this week walk through topics like Kubernetes pod resizing, building an enterprise CI/CD pipeline, and even deploying a Super Mario game to AWS EKS using Terraform. We also feature new open source tools: Envilder for managing environment variables with AWS SSM, Tattoy for building terminal interfaces, Eathar for quickly extracting Kubernetes security insights, and more.

All this and more in this week’s DevOps Bulletin—don’t miss out!

Newsworthy stories

• How we decreased GitLab repo backup times from 48 hours to 41 minutes

• FinOps X 2025 cloud announcements

• DevOps tools targeted for cryptojacking

• Infrastructure from code: what went wrong

• Snowflake is cheaper & faster than Databricks Serverless SQL

• You can’t prevent your last outage, no matter how hard you try

• Terraform state is great!

• No output from your MCP server is safe

Ngrok makes Load Balancing simple with Endpoint Pools

Today’s cloud-native workloads often span multiple clusters, container runtimes, networks, and even clouds, but existing load balancers are limited to balancing only within a single cluster or a single network. ngrok load-balances between two endpoints whether they're running on different machines, environments, networks, or even in different clouds. You can even balance across cloud infrastructure and your own hardware, and it's available on our free plan.

Sign up and Load Balance for free

Video of the week

Tutorials of the week

• Weaponizing Dependabot

• Resizing Kubernetes pods without the drama

• Deploying Super Mario game on AWS EKS

• Analyze media content using AWS AI services

• Kubectl get hacked

• Building an enterprise-grade AWS CI/CD pipeline

Projects of the week

• container is a tool that you can use to create and run Linux containers as lightweight virtual machines on your Mac.

• Envilder is a CLI that securely centralizes your environment variables from AWS SSM as a single source of truth.

• Tattoy is a text-based compositor for modern terminals. It works in any terminal emulator that supports true colour.

• GetHooky is a simple git hook manager for everyone. Inspired from husky but built for every stack.

• Eathar is a tool designed to pull some interesting security-related information from Kubernetes clusters quickly.

• XenevaOS is an operating system for both x86_64 and ARM64 architectures, built from the ground up.

Meme of the week

If you have feedback to share or are interested in sponsoring this newsletter, feel free to reach out via LinkedIn, or simply reply to this email.