惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

GbyAI
GbyAI
N
News and Events Feed by Topic
D
DataBreaches.Net
MongoDB | Blog
MongoDB | Blog
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Engineering at Meta
Engineering at Meta
T
Tailwind CSS Blog
博客园_首页
Microsoft Azure Blog
Microsoft Azure Blog
Y
Y Combinator Blog
博客园 - Franky
Hugging Face - Blog
Hugging Face - Blog
月光博客
月光博客
A
About on SuperTechFans
I
InfoQ
S
Securelist
Last Week in AI
Last Week in AI
S
Schneier on Security
C
CXSECURITY Database RSS Feed - CXSecurity.com
Hacker News: Ask HN
Hacker News: Ask HN
Schneier on Security
Schneier on Security
Know Your Adversary
Know Your Adversary
腾讯CDC
大猫的无限游戏
大猫的无限游戏
S
Security @ Cisco Blogs
博客园 - 三生石上(FineUI控件)
Simon Willison's Weblog
Simon Willison's Weblog
D
Darknet – Hacking Tools, Hacker News & Cyber Security
T
Tor Project blog
美团技术团队
aimingoo的专栏
aimingoo的专栏
G
Google Developers Blog
罗磊的独立博客
Vercel News
Vercel News
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
The Cloudflare Blog
S
Secure Thoughts
www.infosecurity-magazine.com
www.infosecurity-magazine.com
Latest news
Latest news
Recent Announcements
Recent Announcements
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
L
LINUX DO - 热门话题
Security Latest
Security Latest
TaoSecurity Blog
TaoSecurity Blog
Cyberwarzone
Cyberwarzone
有赞技术团队
有赞技术团队

Datadog | The Monitor blog

Introducing our open source AI-native SAST Instrument and monitor Boomi integration flows with OpenTelemetry and Datadog Not all index scans are equal: How we cut query latency by over 99% Platform engineering metrics: What to measure and what to ignore Integrate Recorded Future threat intelligence with Datadog Cloud SIEM CI/CD security: threat modeling using a MITRE-style threat matrix CI/CD security: How to secure your GitHub ecosystem Ingress NGINX is EOL: A practical guide for migrating to Kubernetes Gateway API Operating agentic AI with Amazon Bedrock AgentCore and Datadog LLM Observability: Lessons from NTT DATA Introducing the Datadog Code Security MCP Capture and analyze custom heatmaps in Session Replay Understand session replays faster with AI summaries and smart chapters Monitor ClickHouse query performance with Datadog Database Monitoring How we designed empathetic alert sounds for on-call engineers Search and act across Datadog to resolve issues faster with Bits Assistant Measure the business impact of every product change with Datadog Experiments Analyzing round trip query latency Configuring JavaScript caches for better performance Introducing Bits AI Dev Agent for Code Security Datadog achieves ISO 42001 certification for responsible AI Monitor Nutanix clusters, hosts, and VMs with Datadog Monitor Juniper Mist in Datadog A new Host Map for modern infrastructure Annotate traces to improve LLM quality with Datadog LLM Observability What’s new in Cloud SIEM: AI-powered investigations, enhanced threat intelligence, and scalable security operations Explore Kubernetes with native OpenTelemetry data Monitor Oracle Fusion Cloud Applications with Datadog Announcing the Datadog Terraform provider v4.0.0 Scaling Kubernetes workloads on custom metrics How to design cloud environments for AI-powered threat analysis Monitor Aruba Central in Datadog How we centralize and remediate risks with Datadog Case Management Accelerate incident response with Datadog and ServiceNow Monitor your application and network load balancer logs Understanding Karpenter architecture for Kubernetes autoscaling Tools for collecting metrics and logs from Karpenter Monitor Karpenter with Datadog What your product data is actually saying Key metrics for monitoring Karpenter Securing Datadog’s platform in the AI age: The role of observability data Four ways engineering teams use the Datadog MCP Server to power AI agents Approaching your observability migration with the right mindset Meet the new Bits AI SRE: Deeper reasoning, twice as fast Key learnings from the 2026 State of DevSecOps study Use plain English to query your multi-cloud infrastructure in Resource Catalog Simplifying troubleshooting across the user journey with Datadog Synthetic Monitoring Protect your OCI resources with Datadog Cloud Security This Month in Datadog - February 2026 Amazon EC2 security: How misconfigured and public AMIs expand your cloud attack surface Enable end-to-end visibility into your Java apps with a single command Measure and improve mobile app startup performance with Datadog RUM Evaluating our AI Guard application to improve quality and control cost Identify untested code across every level of your codebase Make use of guardrail metrics and stop babysitting your releases Monitor Versa Networks SD-WAN performance in Datadog Improve performance and reliability with APM Recommendations Remediate transitive vulnerabilities faster with Datadog Software Composition Analysis Generate audit-ready vulnerability and compliance reports with Datadog Sheets Monitor Fortinet FortiManager performance in Datadog Improve test coverage across codebases with Datadog Code Coverage Move fast, don’t break things: Consistent testing standards at scale Enrich logs with ServiceNow CMDB context before routing to any SIEM or logging tool Monitor Lustre with Datadog Make faster, better product decisions with Datadog Product Analytics Surface and remediate runtime posture issues with Workload Protection Findings Protect agentic AI applications with Datadog AI Guard How to optimize JavaScript code with CSS Trace Google Pub/Sub workloads in Cloud Run with Datadog Detect human names in logs with ML in Sensitive Data Scanner How we cut our NLQ agent debugging time from hours to minutes with LLM Observability Debug PostgreSQL query latency faster with EXPLAIN ANALYZE in Datadog Database Monitoring Datadog acquires Propolis Unify and correlate frontend and backend data with retention filters Scale compliance across global frameworks with Datadog Cloud Security Monitor Arista VeloCloud SD-WAN performance with Datadog Building reliable dashboard agents with Datadog LLM Observability Simplify log collection and aggregation for MSSPs with Datadog Observability Pipelines Mitigation for Node.js denial-of-service vulnerability affecting Datadog APM Automate flaky test fixes with the Bits AI Dev Agent and Test Optimization How we built an AI SRE agent that investigates like a team of engineers Datadog integrations 2025 recap: Observability for AI, security, and hybrid cloud Design effective executive dashboards with Datadog Implement dbt data quality checks with dbt-expectations Bring faster visibility into AWS Lambda functions with remote instrumentation Troubleshoot faster with the GitLab Source Code integration in Datadog How Cambia Health Solutions saved $30,000 monthly with Cloud Cost Management and the Datadog Resource Catalog Normalize any logs for Cloud SIEM with Datadog's OCSF processor Optimizing Datadog at scale: Cost-efficient observability at Zendesk Detect, diagnose, and resolve network issues easily with CNM Network Health Connect engineering errors to user impact in early-stage products Cilium configuration for Kubernetes operations at scale Designing feedback loops for progressive delivery Ship features faster and safer with Datadog Feature Flags Choosing the right OpenTelemetry Collector distribution Route your monitor alerts with Datadog monitor notification rules Automate Cloud SIEM investigations with Bits AI Security Analyst Cloud threat detection: How to identify risky activity across control and data planes Collecting Kafka performance metrics Monitoring Kafka with Datadog Monitoring Kafka performance metrics
Auto-remediate Kubernetes incidents using private actions in workflows and apps
2025-03-31 · via Datadog | The Monitor blog
Aneesh Kethini

Aneesh Kethini

Alex Flinois

Alex Flinois

The Datadog Action Catalog provides more than 1,400 actions to help you accelerate remediation across your infrastructure directly within Datadog. With actions, you can use Workflow Automation to configure workflows that automatically address issues as they happen and build custom apps in App Builder that empower anyone in your organization to act when incidents occur.

Until now, the Action Catalog has been focused on public cloud infrastructure integrations such as cloud providers (e.g., AWS and Azure), software delivery (e.g., GitHub), and ticketing (e.g., Jira). However, 45 percent of enterprise workloads are hosted in private environments, including self-hosted Kubernetes clusters, on-prem databases (e.g., PostgreSQL), and internal CI/CD systems (e.g., private GitLab instances).

We are pleased to announce the availability of private actions, which enable you to build workflows and apps to securely manage your self-hosted infrastructure. Private actions support 300+ actions across six connection types (Kubernetes, GitLab, Jenkins, PostgreSQL, Temporal, and HTTP). In order to use private actions, you need to install a private action runner on a host in your network.

This blog post explores how your team can use private actions to facilitate remediation in Kubernetes by using any of the 150+ supported Kubernetes actions. In particular, we describe how you can:

Build workflows to automatically restart Kubernetes deployments

Kubernetes deployments can fail without warning due to misconfigurations, resource constraints, or sudden crashes. When this happens, teams need to act quickly to restore service availability.

Private actions enable you to configure workflows to instantly restart deployments when monitors are triggered, check if the incident gets resolved, and escalate the issue to the team if necessary.

Private actions triggering mechanisms and operational models for App Builder and Workflow Automation.
Diagram showing how the private actions runner works to run apps and workflows within your VPN or corporate network.
Private actions triggering mechanisms and operational models for App Builder and Workflow Automation.

Let’s say your team has a metric monitor that checks for CPU usage that exceeds 90 percent for five consecutive minutes. This would indicate that your application is under significant load and that, without quick intervention, your users might experience latency or even service outages.

Without automation, responding to this issue might take your team 15–30 minutes or longer, depending on how quickly the on-call engineer responds and how long it takes to assess the problem. Here’s what that process might look like:

  1. Receive an alert from Datadog and notify the on-call engineer.
  2. Use kubectl to investigate logs and check resource utilization.
  3. Manually restart the deployment.
  4. Monitor performance afterward to ensure CPU usage has stabilized.

This manual and error-prone process slows down your mean time to resolution (MTTR), potentially leading to long downtimes. Instead, you can use Workflow Automation to build a workflow that restarts the Kubernetes deployment whenever the monitor is triggered, essentially remediating the issue in real time.

List of private actions available in the Action Catalog.
The Action Catalog showing the availability of 160 Kubernetes actions.
List of private actions available in the Action Catalog.

When the monitor is triggered, all of the relevant information about the Kubernetes deployment, as well as the auto-remediation plans, are communicated to the team via Slack. All necessary information is also passed to the restart deployment action, enabling it to easily target the right deployment.

Workflow to restart Kubernetes deployment when a monitor alerts.
Creating a Restart Kubernetes Deployment workflow.
Workflow to restart Kubernetes deployment when a monitor alerts.

To confirm that the restart deployment action has solved the issue, the workflow then uses a conditional check action to poll the monitor status for five minutes to see if the CPU usage has fallen back below 90 percent. If these conditions are met, it sends a message to the team relaying that the issue has been resolved. Otherwise, it triggers a PagerDuty incident with details about the issue. With this workflow, your self-hosted services remain stable and your team does not need to intervene manually unless absolutely necessary.

Manage Kubernetes deployments, pods, and containers with a custom app

Without a unified interface that enables both visibility and action, teams have to jump between multiple platforms to track down deployment failures, monitor resource availability, and perform remediations, leading to unnecessary context switching that can extend service disruptions.

With private actions, you can use App Builder to build an app that consolidates mission-critical information about your deployments, pods, and containers. This gives your team visibility and control without requiring Kubernetes expertise or even being logged in to the Kubernetes console.

The app in the following screenshot gives you real-time visibility into your deployments—with no CLI commands required. It surfaces the same information as kubectl get deploy and enables you to restart failed deployments with a single click.

App to manage Kubernetes resources, deployments, and pods and to create tickets and incidents.
An app that provides real-time visibility into your Kubernetes deployments.
App to manage Kubernetes resources, deployments, and pods and to create tickets and incidents.

Choosing a specific deployment opens a new page with all its pods, formatted with the same information that kubectl get pods -o wide would provide, including each pod’s status. From there, you can delete any pod with a single click, enabling you to quickly resolve issues such as CrashLoopBackOff.

When you choose a pod, a new tab opens with a detailed view of its containers, including their images, ports, and states. If an issue requires escalation, you can create a Jira ticket or PagerDuty incident with just a few clicks. The app automatically pulls in relevant details about the issue and the resources involved, which enables you to focus on remediation rather than information gathering.

Get started with private actions in your workflows and apps

The workflow and app in this post showcased remediation examples focused only on critical Kubernetes resources. We also have 300+ private actions that include GitLab, Postgres, Jenkins, Temporal, and custom HTTP requests, which you can use to create workflows and apps that help your team resolve incidents across your self-hosted infrastructure faster and with less effort than if it were done manually.

To explore how you can start auto-remediating your on-prem environments today, take a look at the private actions we support in our catalog as well as the pre-built blueprints for the workflow and app discussed in this post. To learn more, check out our private actions documentation as well as our Workflow Automation documentation and App Builder documentation. If you aren’t already a Datadog customer, get started with a 14-day free trial.