TLDR DevOps 2026-09-14
Spacelift Flows π, Evals in CI/CD π, RubyGems Cyberattack π₯·
Uber, CERN, and Apple have an open secret (Sponsor)
They're all going to
OpenSearchCon North America to share how they run search, observability, and data infrastructure at massive scale.
Are you coming? Get your ticket to three days of hands-on sessions including:
- Search relevance tuning, plugin development, AI-powered observability, and vector database optimization
- Build a full OpenTelemetry observability stack or an agentic AI search app yourself in two hands-on Developer Workshops
Attend live September 22 to 24 and claim your $250 certification voucher toward the Linux Foundation's OpenSearch Certified Associate exam.
See the full schedule and grab a seat before they fill up.
Spacelift Flows Is Live: Bring IaC Rigor to Day 2 (3 minute read)
Spacelift Flows brings Day 2 infrastructure operations into a visual, auditable workflow platform, enabling teams to automate incident response, provisioning, drift handling, and routine requests without scattered scripts or credentials. Its native integration with Spacelift Deploy also gives AI agents governed access, approval gates, and end-to-end auditability under one control plane.
Kubernetes v1.37: Native Histograms Graduates to Beta (3 minute read)
Native histogram support for Kubernetes metrics has graduated to Beta and is enabled by default in Kubernetes v1.37. The feature exposes latency and duration metrics with greater accuracy while reducing telemetry storage and scraping overhead. Prometheus Native Histograms replace static user-defined buckets with dynamic, exponential buckets stored as a single time series.
AWS CloudFormation now supports contract tests v2 for resource types (1 minute read)
AWS CloudFormation contract tests v2 provide deeper validation across resource handler operations, including live-state verification, schema compatibility checks, and input linting for hardcoded environment values. Local HTML and JUnit reports help developers catch implementation issues earlier, reducing iteration cycles before registry submission.
Catch AI Regressions Before They Ship with AI Evals in CI/CD (4 minute read)
Harness AI Evals integrates AI agent testing into CI/CD using golden datasets, behavioral metrics, and blocking quality gates to catch regressions that traditional tests miss. Repeated evaluations expose incorrect, incomplete, or inconsistent responses, ensuring agents meet quality thresholds before production deployment.
The lifecycle of a sharded Postgres query (23 minute read)
PlanetScale's Neki router makes a sharded Postgres deployment appear as a single database by handling authentication, protocol parsing, shard-aware planning, connection pooling, and distributed execution across many Postgres nodes. Query performance depends heavily on shard-key choice: co-locating related rows can turn an expensive cross-shard join that requires scatter-gather queries and router-side hash joins into local joins executed independently on each shard.
π¨βπ»
Resources & Tools
Stale data makes agents fail confidently (Sponsor)
Most AI agents fail confidently, not loudly. They act on stale data and produce wrong refunds, outdated quotes, and contradictory decisions. A
context engine computes real-time values at the moment of each decision, so your agents act on current, accurate context.
See exactly how it works.Claude-Red (GitHub Repo)
Claude-Red is a curated library of offensive security skills for the Claude AI system. It offers structured SKILL.md files that prime Claude with expert methodology for specific attack surfaces like SQL injection or EDR evasion. The project targets roughly 130 skills across 23 categories.
Colibrì (GitHub Repo)
Colibrì is a pure-C inference engine for running very large Mixture-of-Experts models across VRAM, RAM, and NVMe as a single memory hierarchy. It streams routed experts on demand instead of requiring the full model to fit in fast memory, supports CPU, CUDA, Metal, NUMA, and multi-machine execution, and currently runs nine model families ranging from 7B to 2.8T parameters.
From traces to experiments: A loop for improving AI agents (9 minute read)
Agent optimization should use a continuous loop of trace analysis, hypothesis formation, offline evaluation, controlled production experiments, and post rollout monitoring. Connecting observability with evaluations and experiments helps teams identify specific performance issues, validate improvements against representative and difficult cases, and continuously refine datasets and evaluators.
OpenAI agents carried out an undisclosed cyber-attack on RubyGems (20 minute read)
Researchers investigating the May 2026 GemStuffer campaign attribute more than 2,000 malicious RubyGems package uploads to an OpenAI agent swarm based on package contents, naming patterns, and other public evidence. The agents abused RubyDoc's automatic build system for remote code execution and attempted to exploit a then-novel RubyGems vulnerability to obtain user API keys, prompting RubyGems to disable new registrations for four days and remove hundreds of packages.
Rapidly scaling online storage to serve over 1 billion ChatGPT users (13 minute read)
OpenAI's Habitat storage platform now handles over 70 million requests per second and serves more than 500 petabytes of data. The team recently rewrote the service in Rust, which is 6x more CPU efficient and 15x more memory efficient than the previous Python version. Habitat first launched as a Python library at DevDay 2023 to support GPTs and evolved into a complex distributed system supporting over 1 billion weekly users across nearly 40 regions.
Build for the Agentic Internet at Cloudflare Connect 2026, Oct. 19-21 in San Francisco: (Sponsor)
100+ sessions, five tracks, top speakers, hands-on labs, and practical AI, security, and networking guidance.
Register NowWhose GPUs are these, anyway? Secure, self-service metrics for multi-tenant Kubernetes (5 minute read)
A multi-tenant Prometheus proxy can safely expose curated, namespace-isolated metrics to Kubernetes teams without opening the shared infrastructure store or creating noisy-neighbor problems.
Introducing automatic remediation policies with Cloudflare CASB (4 minute read)
Cloudflare CASB now supports automatic remediation policies.
Get our free daily newsletter with curated tools π», trends π, and insights π‘, for DevOps Engineers π¨βπ»
Join 350,000 readers for
one daily email