About this episode

This episode discusses recent vulnerabilities in containerd, PostgreSQL HA testing by Datadog, and AWS's new features for incident response and control-plane egress.

This week on Ship It Weekly : containerd disclosed a batch of CRI plugin vulnerabilities, Datadog tested PostgreSQL high availability on Kubernetes and found that failover is not useful if it cannot happen safely, AWS DevOps Agent and Datadog MCP Server moved AI incident response closer to real production workflows, and Amazon EKS added customer-routed control-plane egress. The bigger theme: the control plane keeps getting wider. Runtimes, databases, incident agents, API-server egress, credentials, the cloud console, and object metadata are all becoming part of the production blast radius. And when something breaks, users do not experience your architecture diagram. They experience waiting. In the lightning round, Brian covers GitHub self-service credential revocation for incident response, AWS Management Console Private Access without internet connectivity, Vercel Connect and short-lived agent credentials, and Amazon S3 annotations. Links containerd CRI plugin vulnerabilities / AWS security bulletin https://aws.amazon.com/security/security-bulletins/2026-046-aws/ Datadog: PostgreSQL high availability on Kubernetes…

People in this episode

Host: Brian

Topics covered

• container vulnerabilities
• PostgreSQL high availability
• AWS DevOps
• incident response
• EKS control plane
• user experience

Keywords

• containerd CRI vulnerabilities
• Datadog PostgreSQL HA
• AWS DevOps Agent
• EKS control plane egress
• incident response
• cloud architecture
• user experience

Mentioned in this episode

Organizations: containerd, Datadog, PostgreSQL, Kubernetes, AWS, Amazon EKS, AWS Management Console, Vercel, Amazon S3

More episodes of Ship It Weekly - DevOps, SRE, Platform and Cloud Engineering News

• Ship It Conversations: Mat Ryer of Grafana Labs on AI Observability, Agents, Evals, and Operating AI in Production · July 19, 2026 · 45 min
• GitHub API Enumeration, Grok Build CLI Data Exposure, AWS Security Hub Network Scanning, AI-Powered Patch Pressure, and Why Visibility Is Not Ownership · July 17, 2026 · 19 min
• EKS Rollbacks, GitHub Actions Supply Chain Attacks, AI Agentjacking, CloudWatch Log Alarms, and Why Safety Nets Don’t Replace Ownership · July 10, 2026 · 19 min
• Ship It Conversations: Evan Phoenix of Miren on Deployment Pain, Terraform, Waypoint, and Better Defaults for Small Teams · July 6, 2026 · 42 min
• Amazon Q CVEs, Hijacked npm and Go Packages, AWS WAF HTTP/2 Issues, Lambda MicroVMs, and Why Execution Is the Boundary Now · July 2, 2026 · 18 min
• Ship It Conversations: Kat Traxler of Vectra AI on AI Security, the Zero-Day Clock, IAM, and Cloud Risk · June 28, 2026 · 43 min

Explore listener stats, chart rankings, contacts and more on the Ship It Weekly - DevOps, SRE, Platform and Cloud Engineering News podcast page.