MCP Goes Stateless on July 28: Why Model Context Protocol Servers Can Finally Run Behind a Plain Kubernetes Load Balancer
MCP's July 28, 2026 spec removes Mcp-Session-Id and the initialize handshake, so any request can land on any server instance — here's the before/after Kubernetes architecture and what it unlocks for an MCP server with deploy authority.
Neon's Instant Postgres Branches Need Three Services CNPG Doesn't Have — What Self-Hosting Them on Kubernetes Actually Takes
CloudNativePG, Zalando, and StackGres all run HA Postgres on Kubernetes — none of them can branch a database in under a second. Neon can, because it isn't a Postgres operator at all. Here's the architecture that trick requires, and what standing it up yourself on Kubernetes actually involves today.
NixOS as a Cluster API Node Image: What It Buys and Costs Against Talos Linux
NixOS can replace the Ubuntu base under a Cluster API Hetzner fleet with a single reproducible flake — but unlike Talos it ships no dedicated CAPI provider and no hardening by default. Here's the actual wiring and the honest trade-off.
OpenTofu Crosses CNCF Sandbox Status While HCP Terraform Caps Its Free Tier at 500 Resources: What a BSL-Free IaC Layer Actually Buys a Cluster-API Fleet
HashiCorp relicensed Terraform to the BSL in 2023, and HCP Terraform's free tier now caps out at 500 managed resources. Here's what OpenTofu's state encryption, CNCF backing, and per-resource pricing actually mean for the IaC layer underneath a Cluster-API fleet — and where Terraform's remaining features still make sense.
BYOC's Hidden Floor: Porter's $225 AWS Tax and Flightcontrol's $397 Preview-Environment Paywall, Recomputed
Porter's BYOC pricing hides a ~$225/month AWS floor and Flightcontrol gates preview environments behind a $397/month plan. A line-by-line recompute of the same workload against a Cluster API fleet on owned Hetzner hardware.
Preview Environments Went Mainstream in 2026 — Here's What a Per-PR Environment Actually Requires on a Cluster API PaaS
67% of enterprises are now investing in preview environments. Here's what the pattern actually requires underneath — fast per-branch deploy, zero-touch DNS/TLS, PR-close teardown — and why a Cluster-API git-push PaaS already has two of the three built.
Railway's July 2 Outage: How a 20-Minute Network Blip Became a 2-Hour Storage Outage
A 20-minute network blip at Railway on July 2, 2026 turned into two hours of degraded disk and 20,000 blackholed private-network tunnels — because of a hidden Linux routing bug nobody had tested under real load.
Sidero Labs Ships CA Rotation and Cosign Verification for Talos and Omni — What's Automatic, What's Manual, and What Still Breaks
Sidero Labs' Q1 2026 Talos/Omni release adds CA rotation on cluster import and native Cosign image verification. Here's exactly what each one does, which parts are operator-triggered rather than automatic, and a real bug that shipped with the new verification gate.
Fake Client vs envtest vs Testcontainers K3s: The Real Cost of Testing a Cluster API Controller
envtest runs a real Kubernetes API server but no controller-manager, so garbage collection never actually fires in your tests. Here's what that gap costs a Cluster API controller, and where Testcontainers' K3s module actually closes it.