TLDR DevOps 2026-11-02

Buildkite, the CI orchestration platform for AI.

We provide programmable primitives you co-ordinate, running only what changes, across any cloud, any chip, your secrets, your infra. Control without compromise.

Build faster, more securely, more reliably, with the CI engineered for frontier scale, used by the teams setting the pace.

You deserve better CI. Start with our 30-day trial. Kick the tires →

Spacelift is expanding from IaC provisioning into Day 2 operations with Spacelift Flows. It also renamed its IaC and GitOps offering to 'Spacelift Deploy' and bundles it with the Spacelift Intelligence assistant in one control plane.

Cloudflare can now route public requests to private origin IPs over existing Cloudflare One connectivity while applying WAF, caching, bot management, and Workers. Origins retain private addresses without inbound firewall exceptions. Setup requires account enablement, supported connectivity, and appropriate return routes.

Grafana 13.3 adds cross-dashboard variables and Notebooks, both in public preview, plus the first phase of a visual refresh. It also brings Assistant dashboard plans and a generally available Undo turn option for reverting Assistant edits.

Google Cloud shows how GKE metadata in VPC Flow Logs gives workload-level attribution for network traffic without agents or sidecars. It walks through three Flow Analyzer examples on the Online Boutique demo.

Datadog argues that serverless should be the first execution model teams evaluate for AI agents. It cites a study of over 35,000 coding agent sessions where LLM or tool calls filled only 20% of the median session.

Meet the AWS Nitro System, the foundation for Amazon EC2 instances. Its purpose-built Nitro Cards handle networking, storage and management, delivering stronger security and faster performance while all of the host's CPU and memory go to your instance. Check out the deep dive

Vorssaint is a free and open-source macOS menu bar toolkit that replaces dozens of paid utility apps. It offers per-app volume controls, window snapping, a clipboard history, and system monitors. The tool runs locally with no account, telemetry, or subscription required.

OpenMAIC is an open-source AI platform that transforms documents into interactive classroom experiences with AI teachers, slides, and simulations. It supports over 20 providers, including OpenAI, Anthropic, and local options like Ollama.

Google Cloud explains how GKE Dataplane V2 avoids Cilium's 65,536 identity limit for high-density agent workloads by moving high-cardinality pod labels to annotations. The post reports 300 sandboxes per second at sub-second latency.

Researchers found a vulnerability that allowed them to take over ChatGPT accounts just by sending a victim a link. The exploit chain combined a MathLive keyboard feature and the HTML Preview to bypass the sandbox, allowing malicious code to run as chatgpt.com and access private conversations. OpenAI fixed the issue on October 26 and classified the report as P1.

Datadog Agent Observability now captures audio, transcripts, token usage, and tool calls for voice agents built on the OpenAI Realtime API. It also adds tracing for Amazon Nova 2 Sonic, with ElevenLabs Realtime support planned for ddtrace 4.17.0.

Explore agent memory, MCP, evals, security, and production AI across 100+ technical sessions at Neo4j NODES 2026. Register free.

The release marks general availability for the project's kernel-level observability tool.

CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed in upstream stable kernels on October 15.