TLDR DevOps 2026-08-28

You've been there: code's ready to ship, everyone's excited—then someone spots a vulnerability. Suddenly it's an all-hands emergency and time to cancel your evening plans.

Microsoft Azure bakes security in from the start. Microsoft Defender for Cloud helps keep your apps and code protected throughout the development lifecycle. Less last-minute surprises, more peace of mind.

Ship fast. Ship safely. Do both at the same time.

Build with built-in security →

Kubernetes v1.37, themed "Garhwal" after a Himalayan region of Uttarakhand, India, ships 67 enhancements: 16 promoted to Stable, 23 to Beta, 27 entering Alpha, and 1 deprecation or removal. Notable Stable graduations include the metrics.k8s.io API, which spent nearly nine years in Beta, and KYAML, a safer YAML subset for Kubernetes. The release also enables memory QoS and concurrent watch object decoding by default, and brings HorizontalPodAutoscaler scale-to-zero support to Beta. The 15-week cycle ran from May 18 to August 26, drawing contributions from up to 212 companies and 1,754 individuals.

RT Agents passively analyze Harness CD pipelines and Kubernetes workloads to detect resilience risks before production, then recommend, generate, and run chaos experiments or load tests to validate them. New capabilities include resilience dashboards, Resilience Scores, Java, JavaScript, and Python load testing, simplified Kubernetes onboarding, and a free plan.

Grafana 13.2 expands shared saved queries with search, RBAC, command palette access, and Terraform provisioning, while the new View panel sidebar improves exploration without edit permissions. Additional updates include Git Sync enhancements, a refreshed homepage, secure cloud data source authentication, improved variable editing, and dashboard organization.

Agentic AI expands enterprise security risks because agents can access sensitive systems and act autonomously, creating threats such as prompt injection and tool poisoning. Organizations should shift from simply blocking access to governance through secure-by-default design, agent identity and permissions, centralized oversight, and human approval for critical actions.

AI is making code abundant and shifting software development's central constraint from implementation to trust. As agents increasingly handle the lifecycle, enterprises need durable architecture for context, verification, governance, evidence, and organizational ownership across people, agents, and models.

OpenSearchCon North America is where technical experts share how they run open source search, observability, and infrastructure at scale. You'll get real production lessons, two hands-on workshops (build an OpenTelemetry stack and an agentic AI search app yourself), and a $250 certification exam voucher just for attending in person. See the full schedule →

Archify is a Node.js tool for Cursor, Claude Code, Codex CLI, and OpenCode that takes a codebase or system description and compiles it into an interactive HTML/SVG diagram. Agents produce typed JSON, and Archify converts it deterministically into a self-contained HTML file with motion, export options, and shareable URLs.

This repository is a curated set of agent skills for AI coding tools like Claude Code, Cursor, and Codex, covering five categories: web video presentations, web design, image generation, local knowledge retrieval, and article editing. Each skill is a self-contained folder built around a SKILL.md file that the agent loads on demand.

Tailcat is a userspace networking tool that reuses Tailscale's WireGuard data plane without requiring the Tailscale control plane, account, root access, or routing-table changes. Two peers exchange a short connection token out of band, bootstrap through DERP, and then upgrade to a direct peer-to-peer UDP path when NAT traversal succeeds. It can also tunnel TCP ports, SSH, SOCKS5 traffic, and exit-node access.

Building an AI factory on Kubernetes means solving two problems at once: keeping GPU utilization high and keeping tenants from interfering with each other on the same hardware. The stack to do it now exists mostly from CNCF and open source projects, including DRA (GA in Kubernetes 1.34), HAMi for software-based GPU partitioning, vCluster for per-tenant virtual control planes, KServe for inference, and OpenCost for per-tenant chargeback. Network and storage isolation increasingly get pushed into hardware, with DPUs such as NVIDIA BlueField handling enforcement off the host CPU.

Cloudflare cut memory usage across its Big Pineapple DNS platform by roughly 100 terabytes after five successive changes to how cache entries are stored. The optimizations reduced the per-entry memory footprint from 953 bytes to 420 bytes, a 56% reduction across more than 250 billion cache entries. At p99, per-instance resident memory fell from 9.3 GB to 5.3 GB. Cache insert throughput also rose 43% and lookup latency dropped 19%, as the changes reduced allocations and improved memory locality.

Tech stack complexity is out of control, and the last thing you need is a bigger ‘stack'. Microsoft Azure gives you a unified view of applications, cloud resources, and AI—so you can ship more software with less open tabs. Simplify with Azure

DigitalOcean has launched v5 Droplets, a new generation of virtual machines built on 5th Gen AMD EPYC processors.

Platform teams building golden paths for AI agents need intentional execution patterns, machine-consumable contracts, and dispatch controls rather than the conventions built for human developers.