Notes on building observable systems and operating them at scale.
Istio's NetworkPolicy guide explains why service-aware proxy policy benefits from separate network enforcement. Its Bookinfo examples restrict ingress ports and allowed callers without relying on every control running inside the Pod.
Kompose graduates from the Kubernetes Incubator with a 1.0 announcement. Its conversion model helps separate an application's container configuration from the Kubernetes controllers and storage it needs.
The August security update rejects empty passwords at the server, further restricts foreign-server credential visibility, and adds the missing large-object write permission check.
rqlite 4.0.2 includes the original query string in leader redirects. That preserves SQL queries, consistency choices and transaction flags carried in the URL.
Python 3.5.4 delivers its final general maintenance update before security-only support, including bytecode compatibility and process cleanup corrections.
RediSearch uses thread-safe contexts to interleave expensive queries with other work. Redis data access remains serialized, and yielding changes the atomicity of a search.
The new malloc tcache avoids arena locking for eligible cached chunks. Its size classes, refill behavior and per-thread retention explain both the fast path and its memory cost.
Terraform 0.10 installs providers during initialization and gives them independent versions. Configuration now describes acceptable provider versions as well as provider settings.
SQLite 3.20.0 adds typed pointer binding, extraction and results. Extensions must adopt the new representation where ordinary SQL values previously carried native addresses.
The first DBHub.io beta server lets DB Browser for SQLite upload and retrieve databases. Its early integration makes the database file the unit of exchange and leaves backup responsibility explicit.
TypeScript 2.4.2 fixes language-service failures involving incomplete code and declaration files, and preserves method JSDoc during class conversion.
The second-anniversary retrospective describes a project whose growth depends on distributed leadership. Cluster lifecycle work and the 1.6 release process provide concrete examples of what that means.
A lease-transfer race let requests run before the new holder accounted for earlier reads. CockroachDB 1.0.4 corrects that ordering to preserve serializability.
The second candidates for Rails 5.0.5 and 5.1.3 retain a repair to joins affected by current scope. The 5.1 branch also corrects persistence of children removed before their parent is saved.
Justin Morant's JavaScript client supports browser and Node.js applications. The underlying rqlite API retains its SQL result format, request-scoped transactions and selectable read consistency.
Native unions simplify foreign interfaces while leaving the programmer responsible for choosing a valid field interpretation. The initial stable form permits Copy fields and excludes Drop implementations.
Librdkafka 0.11 adds message-format compatibility while keeping exactly-once functionality outside this release's implementation.
The first stable OCI image and runtime specifications define different parts of portability, with certification and broader platform behavior outside this milestone.
SE-0181 adds package-wide C and C++ language-standard settings for Swift 4. Its limited scope addresses a pressing build requirement while the broader build-settings design remains deferred.
Python 3.6.2 fixes URL host parsing and Windows subprocess environment handling, alongside Expat updates and asynchronous resource cleanup.
Concepts enter draft C++20 with changes to definition syntax and limits on shorthand forms. The merge separates established constraint machinery from notation that still lacks consensus.
The maintenance release handles the security and compatibility tension in base.pm's optional loads. It also fixes a disagreement between Perl's PATH taint checking and Unix path interpretation.
PSYNC2 lets Redis recognize a shared replication history after some role changes and restarts. Redis 4.0 also makes modules available in the stable release and changes cluster upgrade compatibility.
Russ Cox asks the community to document where Go fails at production and development scale. Compatibility and a limited capacity for major changes shape the proposed process.
PostgreSQL 10 beta 2 changes ALTER SEQUENCE and fixes interactions among partitioning, triggers, and logical replication. The beta requires an explicit upgrade from beta 1.
The development list moves from nix-dev to nix-devel on Google Groups. The change matters to an RFC process that uses mailing-list announcements to invite wider review.
N2159 asks whether writing a structure member can disturb flexible-array elements that overlap trailing padding. Its proposed correction separates member updates from whole-structure assignment.
Terraform 0.9.11 changes a state-equivalence check from an execution error to a log entry. The hotfix keeps the newer backend state while allowing serialization differences that triggered false mismatches.
Kubernetes 1.7 adds beta StatefulSet update strategies while expanding API extensibility. Its security changes address separate boundaries, including pod connectivity, kubelet authority and stored Secrets.
Terraform 0.9.10 fixes state serial handling that can fail Atlas consistency checks. Refresh-only changes reveal why a plan's state snapshot and the backend's current metadata need separate treatment.