TLDR DevOpsSeptember 18, 2026

TLDR DEVOPS 2026-09-18

6 sections18 entrieslinks blockcomplete parse

Parse notes

Subscription/account footer truncated before parsefooter_truncated

01GENERAL

WHAT DO CURSOR, OPENAI, ANTHROPIC, NOTION, AIRBNB, NVIDIA, UBER, META, PIERRE AND BUN HAVE IN COMMON?

Buildkite, the pro-tool that hands you building blocks for CI orchestration and then gets out of the way. Enough with constant downtime. No more band-aids or burden. We provide programmable primitives you co-ordinate, running only what changes, across any cloud, any chip, your secrets, your infra. Control without compromise. Build faster, more securely, more reliably, with the CI engineered for frontier scale, used by the teams setting the pace.

buildkite.comSponsor

YOU DESERVE BETTER CI. START WITH OUR 30-DAY TRIAL. KICK THE TIRES →

buildkite.com

02NEWS & TRENDS

SALESFORCE STAGGERS BACK TO FEET AFTER GLOBAL OUTAGE

Salesforce experienced an hours-long global outage affecting hundreds of instances, causing severe delays, intermittent errors, and inaccessible services, due to requests stalling on an internal login service and exhausting server resources. A validated fix was deployed fleetwide, but some instances required manual restarts and continued experiencing scheduled-job failures.

theregister.com4 min read

KUBERNETES V1.37: POD-LEVEL RESOURCE MANAGERS GRADUATED TO BETA

The Pod-Level Resource Managers feature has graduated to Beta status in Kubernetes v1.37. This enhancement allows the Kubelet to use pod-level resource declarations when making hardware placement decisions. It solves a previous limitation where operators had to choose between dedicating physical cores to sidecars or forfeiting NUMA alignment.

kubernetes.io2 min read

03OPINIONS & TUTORIALS

HOW TO AUTOMATE DOCKER REGISTRY CREATION WITH HARNESS PIPELINES AND TERRAFORM

Harness demonstrates a three-stage CI/CD pipeline that uses Terraform to dynamically provision a unique Docker virtual registry and Docker Hub upstream proxy, builds and pushes an image, then deploys it to Kubernetes with rolling updates and automatic rollback. Output variables and Harness expressions connect resources across stages without hardcoding.

harness.io14 min read

RUNNING OPENBAO ON KUBERNETES WITH A CLOUDNATIVEPG POSTGRESQL BACKEND

OpenBao and CloudNativePG can manage infrastructure secrets on Kubernetes without vendor lock-in by using certificate authentication and synchronous replication. OpenBao uses the CloudNativePG PostgreSQL cluster as an encrypted key-value store, and a schema-init job revokes default public permissions to lock down the database. CloudNativePG automatically renews client certificates every 90 days, but OpenBao requires a rolling restart to load the new files. The setup runs three OpenBao replicas and three Postgres instances across separate nodes.

cncf.io9 min read

I DON'T LIKE LLMS

LLMs can be highly useful while still being unpleasant to interact with because they present fabricated and correct information with the same confident, human-like tone. AI agents also reflect the values and culture of the companies that build them, making trust, behavior, and interaction design important alongside raw model capability.

martinfowler.com4 min read

04RESOURCES & TOOLS

OBSERVABILITY TOOLING PROMISED MORE VISIBILITY AND DELIVERED…ENDLESS CONFIGS. NO LONGER

It's time to stop asking engineers to babysit telemetry pipelines. In Apica Ascent 3.0, the AI agent, Venn, turns plain-language requests into pipeline rules [12], dashboards, and agent management. Bring your own AI and reserve human approval for every change. Say goodbye to

apica.ioSponsor

tickets and queues. See it live Oct. 20th

apica.io

BROWSERSKILL

BrowserSkill connects AI agents such as Cursor, Claude Code, and Codex to a user's logged-in browser. The tool requires agents to explicitly borrow open tabs and return them after finishing a task. It includes a command-line interface, a daemon, and a browser extension.

github.comGitHub repository

CLINE

Cline is an open-source coding agent that runs in IDEs, terminals, and as a native desktop app for macOS and Windows. It reads project structures, edits files, and executes terminal commands with human-in-the-loop approval. Users can switch between Plan and Act modes or use the SDK to build custom tools and coordinate multi-agent teams. The tool runs on any model and supports integrations through plugins or MCP servers.

github.comGitHub repository

05MISCELLANEOUS

HARNESSTAX: HOW MUCH DOES THE HARNESS MATTER FOR CODING AGENTS?

Coding-agent harnesses such as Claude Code, Codex CLI, and Pi can produce similar task success rates while using dramatically different amounts of tokens and money. Across 21 model–harness combinations on SWE-bench Lite and Terminal-Bench 2.0, harness choice changed cost by as much as 5×, and the model provider's own harness was not consistently the most efficient option.

harnesstax.github.io8 min read

GETTING STARTED WITH RUNTIME SECURITY AND FALCO

Runtime security protects cloud workloads while they are executing, filling gaps that posture management cannot catch, such as zero-days, privilege escalation, and compromised credentials. Falco provides cloud-native runtime detection across hosts, containers, Kubernetes, and cloud services by analyzing system calls and plugin events, adding contextual alerts, and deploying easily with Helm.

webflow.sysdig.com11 min read

KOMODOR EXTENDS AI SRE REACH FOR KUBERNETES TO AI AGENTS

Komodor launched an Agentic Operations Platform that lets SREs deploy, customize, govern, and audit AI agents through familiar DevOps workflows, with 50+ built-in agents, integrations, guardrails, approvals, and spending controls. The platform aims to help teams manage growing fleets of production AI agents while preserving existing change management and governance practices.

cloudnativenow.com3 min read