TLDR DevOpsOctober 28, 2026

TLDR DEVOPS 2026-10-28

6 sections18 entrieslinks blockcomplete parse

Parse notes

Subscription/account footer truncated before parsefooter_truncated

01GENERAL

ADD RAG TO YOUR ELASTIC STACK

Your data is already in Elasticsearch — use Elastic Cloud [5] to power Retrieval Augmented Generation (RAG). Skip the new database and add vector storage and LLM-powered search without changing your stack. * Reuse your data layer: Store vector embeddings directly in Elasticsearch indices alongside your existing data — no separate vector database required * Wire up RAG end to end: Connect Elastic Cloud, LangChain, and Amazon Bedrock with a working Python pipeline from document ingestion to LLM query * Access models through a unified API: Use Elasticsearch's Open Inference API to call Amazon Bedrock models for chat completion and text embeddings Follow the step-by-step tutorial and start asking questions of your data today.

aws.amazon.comSponsor

Build a RAG pipeline on AWS >

aws.amazon.com

02NEWS & TRENDS

GHEIST: ATTEMPTED SCALED ABUSE OF STOLEN GITHUB TOKENS STUMBLES

Gheist is an automated campaign that plants secret-dumping workflows in repositories using stolen GitHub tokens. It has targeted over 850 compromised accounts since September 15. GitHub's recent security controls blocked the attack in public repositories, but private and enterprise environments remain vulnerable.

wiz.io9 min read

WHAT TOOK THE INTERNET OFFLINE IN Q3 2026

Cloudflare Radar recorded 49 Internet disruptions during the third quarter, including 19 government-directed shutdowns and 14 power outages. The incidents illustrate dependencies beyond network redundancy.

blog.cloudflare.com8 min read

03OPINIONS & TUTORIALS

WHY KUBERNETES AUTOSCALERS KEEP FIGHTING EACH OTHER (AND WHY THE SOLUTION MUST BE AUTONOMOUS)

Nikhil Kurup argues that HPA, VPA, KEDA, and Karpenter mutate the same workload fields from independent loops, producing four failure modes, including a VPA and HPA death spiral and GitOps drift ping-pong. He calls for a unified, predictive autoscaler with explainable decisions.

thenewstack.io7 min read

HOW TO BUILD GOLDEN PATHS IN PLATFORM ENGINEERING

Spacelift defines a golden path as an opinionated, documented, self-service route for a common task. The guide lists five building blocks and four rollout phases, with a worked Postgres example on AWS built as an rds-postgres module using OpenTofu 1.10.3. Production gets Multi-AZ and deletion protection.

spacelift.io19 min read

THE BRIDGE TO AGENT-SCALE GIT INFRASTRUCTURE

GitHub is replacing repository-wide write serialization with per-reference quorums to overcome cross-region latency during its Azure migration. Internal tests showed 3–4x higher throughput for writes to different references, while an object-storage-backed design allows read capacity to scale independently.

github.blog8 min read

04RESOURCES & TOOLS

HOW DO YOU RESPOND WHEN YOUR AI TOOLING AND MODELS FAIL?

Engineers from incident.io [13] and Skyscanner discuss what happens when AI tooling becomes a single point of failure, and what both teams

incident.ioSponsor

are doing about it. _Watch Now→_

incident.io

AGENT-REACH

Agent-Reach is an open source CLI tool that lets agents read and search platforms like Twitter, Reddit, YouTube, GitHub, and Bilibili without API fees. It handles login-gated sites, video content, and Chinese platforms to provide structured data for AI agents.

github.comGitHub repository

OPENBOT

OpenBot is a local-first desktop workspace for persistent AI teammates that runs Codex, Claude, Grok, and Gemini with dedicated workspaces and task queues. It provides a shared desktop channel, file transfers, and an embedded browser that agents can control. A development preview is available for macOS, Windows, and Linux.

github.comGitHub repository

05MISCELLANEOUS

BEFORE YOU EXPAND YOUR GPU POOL, MEASURE THE OUTCOME

Teams should define each workload's outcome and deadline before expanding a GPU pool. Teams can stagger flexible jobs, load test sustainable serving capacity, and track cost per verified outcome with OpenCost before adding GPUs.

thenewstack.io8 min read

FIXING TOOL-CALL ACCURACY IN VLLM

vLLM 0.31 can achieve 100% tool-call schema accuracy for Kimi and DeepSeek models through constrained decoding, a technique that guarantees schema adherence during token generation. This fixes a reliability issue where vLLM 0.28 produced invalid tool calls 8% of the time, causing agentic workloads to build up nonsensical context.

ubicloud.com7 min read