TLDR DevOps 2026-11-04

DevOps made production feedback part of every software release. The AI loop works the same way: run, observe, curate, improve, evaluate. But it's spread across tools you have to glue together.

CoreWeave Forge brings all five into one environment and keeps you free to build with any model, framework, or cloud:

• Evaluate models and agents against your own production traces
• Turn flagged traces into training data and evaluations for release gates
• Retrain, fine-tune, or distill without starting over
• Keep every checkpoint portable, on any stack

Every run feeds the next.

Explore CoreWeave Forge

Grafana Alloy's OpenTelemetry engine is now in Public Preview as of Alloy v1.21.0. It runs standard OpenTelemetry Collector YAML configuration and supports Fleet Management for remote configuration. Users can run the OTel engine alongside the default engine or switch between them using an environment variable.

Lakebase Postgres is now generally available on Google Cloud as a fully managed, serverless database. It includes autoscaling, scale to zero, instant branching, and point-in-time recovery to help teams build and ship faster without managing database infrastructure. Operational and analytical data share the same storage format.

Shopify Overexposed is an internal scanner that finds GKE Ingresses and Cloud Run services reachable without authentication. A rebuild on GCP Cloud Asset Inventory plus an anonymous HTTP probe cut inconclusive Ingress verdicts by about 80%.

PlanetScale Metal uses locally attached NVMe storage to eliminate network latency between compute and disk. This architecture avoids the IOPS limits of network-attached storage like EBS, where defaults are often capped at 3,000 IOPS. Benchmarks show an instance with local NVMe storage costs $551.15 per month compared to $1,513.82 for a comparable EBS setup.

Amazon ECS now offers high-resolution CPU and memory metrics published every 20 seconds for target tracking, allowing services to detect and respond to load changes faster than the default 60-second resolution. AWS benchmarks show time to trigger scale-out fell 76%, from 363 seconds to 86 seconds, and SLA breach time on Fargate decreased 69% in gradual ramp tests.

For two weeks, throw everything at your code - free: GitLab Ultimate, Duo Agent Platform, Orbit and Secrets Manager, with up to $10,000 in free credits. Ship code. Let agents find and fix what matters. Watch fixes land under your own policies. Granted by request to qualifying teams. Request your security sprint by November 13

Floci is a free, open-source local AWS emulator for development, testing, and CI that works without a cloud account or auth token. It supports standard tools like Terraform and the AWS CLI, and Lambda or RDS workloads run in real Docker containers for higher fidelity than mocks. The project also acts as a drop-in replacement for LocalStack.

Agent-Desktop is a CLI that enables AI agents to see and operate desktop applications on macOS, Windows, and Linux through the OS accessibility tree. It reads the accessibility tree as JSON, allowing agents to interact with elements without using screenshots or pixel matching.

New Relic introduced NRQL Macros, which save an expression as a reusable named shortcut called by prefixing the name with a dollar sign. Macros can simplify long WHERE clauses and update many dashboard widgets by changing one definition.

Datadog tested its AI Guard product against self-replicating prompt injections that OpenAI reported in September. AI Guard flagged a planted email as indirect prompt injection at 99.5% confidence and a planted CSV file as jailbreak and obfuscation.

Ads get ignored on social media but not in TLDR! Reach DevOps and platform engineers where they actually pay attention. Learn more about sponsorship opportunities.

Agentic AI risk comes from tool permissions that accumulate unnoticed, so boundaries belong in the platform.

The CNCF End User Technical Advisory Board will preview KubeCon North America 2026 in Salt Lake City on November 9 to 12.

GitHub Actions will block pull_request_target events by default in all public repositories starting December 2.