OffNet Newsroom

Daily topic roundup

Automation / DevOps / IaC

Thursday, August 13, 2026 · 8 stories, curated & summarized — click any story for the source.

PostgreSQL News database

Dasha: Agentless PostgreSQL Fleet Performance Dashboard

Dasha is an open-source dashboard that monitors PostgreSQL clusters using a read-only role without installing agents or extensions on database hosts. It aggregates per-instance statistics across all nodes, including replicas, to provide a unified view of the fleet's health. The tool calculates a composite Health Score and offers prioritized recommendations based on combined data from primary and standby instances.

  • Zero footprint: No agents or new extensions required on database hosts.
  • Unified view: Aggregates per-instance stats across all cluster nodes and replicas.
  • Context-aware: Detects issues like unused indexes that are active on standbys.
  • Centralized: One Dasha instance can serve multiple clusters and their replicas.
  • Actionable: Provides a 0-100 Health Score with drill-down recommendations.
BY THE NUMBERSUnified PostgreSQL Health Score100Composite health score rangeAggregates primary and standby data

AWS has generally available its IAM Role Manager, which automatically provisions or reuses IAM roles when configuring supported services like Lambda and EventBridge. The system applies AWS-managed templates to ensure correct permissions, reducing manual role setup in the console. Users can toggle the feature on or off and inspect the underlying templates at any time.

  • Reduces manual IAM configuration effort for supported services like Lambda and EventBridge
  • Automatically creates default roles or reuses existing ones with matching permissions
  • Uses AWS-managed templates to enforce consistent permission baselines
  • Fully toggleable via console, allowing granular control over automation
CHECKLISTIAM Role Manager BenefitsReduces manual IAM configuration effortAutomatically creates or reuses rolesEnforces consistent permission baselinesFully toggleable via console

AWS Secrets Manager now supports managed external secrets for Jenkins API tokens and SonarQube tokens. This integration allows automatic credential rotation directly from the console without custom code. For Jenkins, the service verifies new tokens before revoking old ones to ensure CI/CD continuity.

  • No custom rotation code required for Jenkins and SonarQube credentials.
  • Jenkins rotation verifies new tokens before revoking old ones to prevent downtime.
  • Supports self-rotation and admin-assisted rotation for Jenkins tokens.
  • SonarQube supports rotation of User, Global Analysis, and Project Analysis tokens.
CHECKLISTExternal Secrets SetupNo custom rotation code requiredJenkins verifies new tokens firstSupports self and admin rotationSonarQube supports multiple token types

Netflix has migrated the majority of its batch processing tasks to Kueue, replacing a long-standing in-house solution. The engineering team mapped existing internal capabilities to Kueue’s native features while leveraging new functionalities that would have been too expensive to build internally. This move reflects a broader strategy to adopt open-source tools that scale more efficiently than custom-built systems.

  • Netflix replaced its custom batch scheduler with the open-source Kueue system.
  • Migration involved mapping legacy in-house features to Kueue's native capabilities.
  • Adoption enabled access to advanced features previously too costly to develop internally.
  • This shift highlights the trend of moving from homegrown to cloud-native orchestration tools.

The InfoQ editorial team, including Steef-Jan Wiggers and Matt Saunders, has published their annual report identifying key shifts in Cloud and DevOps. The document synthesizes insights from various industry experts to highlight emerging practices and technologies. This release serves as a strategic overview for engineering leaders planning their infrastructure roadmaps for the coming year.

  • InfoQ experts identify major shifts in Cloud and DevOps practices for 2026.
  • Report synthesizes insights from senior editors and industry contributors.
  • Provides strategic direction for infrastructure and engineering roadmaps.
  • Covers emerging technologies and operational model changes.
  • Serves as a high-level guide for senior technical decision-makers.

Ryan Dahl, the creator of Node.js, has released Durable Objects as an open standard through the Celld project. This move allows developers to implement the same stateful isolation pattern on their own infrastructure rather than relying exclusively on Cloudflare's platform. The release aims to decouple the durable state model from a specific vendor's ecosystem.

  • Durable Objects are now an open standard, not a Cloudflare-exclusive feature.
  • Developers can deploy stateful isolation on their own infrastructure via Celld.
  • Decouples stateful logic from specific cloud vendor lock-in.
  • Enables portable, stateful microservice patterns across different environments.
AWS Database Blog awsdatabase ↺ since 08-12

AWS RDS Aurora logs move to CloudWatch Infrequent Access for 50% cost cut

Organizations paying standard rates for rarely accessed database logs can now migrate these resources to the Infrequent Access log class. This automated, tag-driven approach shifts RDS and Aurora log groups to a lower-cost tier, reducing ingestion expenses by approximately half. The solution enables practitioners to retain access while optimizing spend on archival database telemetry.

  • Automated migration using tags reduces log ingestion costs by ~50% for RDS and Aurora.
  • Standard log groups can be shifted to Infrequent Access tier without losing data retention.
  • Implement tag-driven logic to identify low-access logs for automatic class migration.
  • Review retention policies to ensure compliance after moving logs to cheaper storage tiers.
AWS What's New awsdatabase ↺ since 08-12

AWS Glue adds one-click access to SageMaker Unified Studio

AWS Glue now offers direct, single-click navigation to Amazon SageMaker Unified Studio from the Glue console. This integration allows data engineers and analysts to seamlessly transition from browsing the catalog or building ETL jobs to querying data and running quality checks within SageMaker. The feature extends similar unified access to other AWS consoles including S3 Tables, Athena, EMR, and Redshift.

  • Glue console users can now launch SageMaker Unified Studio with one click
  • Streamlines workflow from catalog browsing to data querying and pipeline building
  • Access is also available from S3 Tables, Athena, EMR, and Redshift consoles
  • Reduces context switching for data engineers working across AWS services
HOW IT WORKSUnified Console Access Flow1Browse Glue Catalog2Click SageMaker Link3Query Data4Run Quality Checks5Build Pipelines