Kubernetes SIG Storage's Next Move Isn't Another Snapshot Feature: What Volume Health Monitoring and Mutable PV Affinity Actually Buy a Self-Hosted Fleet
Kubernetes SIG Storage's Volume Health Monitoring and Mutable PV Affinity don't need Hetzner's still-missing CSI snapshot support to matter — but only one of them actually works on a self-hosted fleet today. Here's the verified breakdown of both KEPs, straight from the spec text and the driver source.
The Heroku Buildpack Compatibility Myth: What Render's 'Zero-Config Migration' Actually Runs On
Render's 'Heroku buildpack support' is Cloud Native Buildpacks auto-detection, not the literal bin/detect/compile/release scripts your Heroku app runs today — here's the real API gap and what closing it actually takes.
Your AI App Builder Ships Where It Wants: The Open Deploy-Target Gap Behind v0, Bolt, Lovable, and Replit
v0, Bolt, Lovable, and Replit Agent all generate a working app and default to deploying it on their own cloud. Here's exactly what 'export the code' does and doesn't get you, and what it actually takes to run the result somewhere you own.
VolumeAttributesClass Went GA Promising Online Volume Resize. Here's What Actually Happens on a Self-Hosted Hetzner Fleet
Kubernetes 1.34 made VolumeAttributesClass GA, promising online volume tier changes with no detach-recreate cycle. Here's what actually happens when you check the CSI drivers a self-hosted Hetzner fleet runs — and the live gap even the one that supports it hasn't closed yet.
AWS's New ACME Endpoint Isn't Free: What $1 Per Domain, Every 45 Days, Costs a Multi-Tenant PaaS
AWS Certificate Manager now speaks ACME, but it charges $1 per domain on every issuance and renewal — at a 45-day cert lifetime, that's a metered bill free Let's Encrypt never had. Here's the worked cost comparison.
AWS CloudFront's Control-Plane Failure Took Down Hugging Face and Canvas: What Owning Your Infrastructure Doesn't Save You From
A CloudFront control-plane bug took down Hugging Face, Canvas, and Blackboard at once, even though none of them run application logic on CloudFront. A layer-by-layer look at what owning your own ingress actually removes from that risk — and what it only relocates.
Why bex Skips the Crossplane-Style Multi-Cloud Abstraction Layer
Crossplane just graduated CNCF's top maturity tier promising one API across every cloud. Here's why bex, a Cluster API-based platform, deliberately skips that abstraction to keep every workload traceable to one physical machine.
Kaniko Is Archived: What Actually Changes When a Buildpacks Pipeline Switches to Buildah
Google archived Kaniko in June 2025 and its Chainguard fork is maintenance-only. Here's exactly what changes in a Kubernetes build pod's spec, caching architecture, and registry auth when a buildpacks-based PaaS switches its Dockerfile-fallback builder to Buildah — and the one dependency on Kaniko you can't migrate away from.
cgroup v1 Is About to Break Your Kubernetes Nodes: A Migration Checklist Before August 26, 2026
Kubernetes v1.37 makes kubelet refuse to boot on cgroup v1 nodes by default. Here's the exact command to check your fleet, what changes in tenant CPU/memory enforcement, and a migration checklist before the August 26, 2026 deadline.