CloudNativePG's Snapshot PITR Can Restore a Multi-TB Postgres in Minutes — Hetzner's CSI Driver Still Can't Take the Snapshot
CloudNativePG's snapshot-based backup can restore a multi-terabyte Postgres cluster in minutes, but Hetzner's own CSI driver has never implemented volume snapshots. Here's what actually runs on Hetzner today — the Barman Cloud Plugin path — and when swapping in Piraeus/LINSTOR for snapshot support is worth the operational cost.
Cluster API v1.12: What Chained Upgrades Actually Save a Kubernetes Fleet That Fell Behind
Cluster API v1.12 adds in-place updates and chained upgrades — here's what collapsing three separate Kubernetes minor-version rollouts into one reconciliation pass actually saves a bare-metal Hetzner fleet that fell behind, and where the old drain-and-verify discipline still applies.
ClusterClass Turns Tenant Cluster #500 Into a One-Line Diff From Cluster #1
Cluster API's ClusterClass collapses seven hand-copied objects per tenant cluster into one shared template plus a handful of variable overrides — the concrete before/after, the patch mechanics, and what it still doesn't solve.
CNCF Buildpacks Graduation: What Reaching the Top Maturity Tier Actually Changes
Cloud Native Buildpacks reached CNCF's Graduated maturity level on July 17, 2026. Here's what the governance milestone actually verifies, what it doesn't change technically, and why it matters for a platform team betting its build layer on the spec.
CNCF's Composable-by-Design Rule: What It Actually Costs to Build a Swappable PaaS
CNCF says platforms should be built from swappable, API-first building blocks. Here's what that actually costs on day one versus a hardcoded platform, worked through two real architecture cases — one of them a GPU request a Cluster API-based PaaS wasn't built to handle.
The Docker Desktop License Threshold Nobody Rechecks: What 250 Employees or $10M Revenue Actually Costs a Team
Docker Desktop stops being free the moment a company crosses 250 employees or $10M in revenue — whichever it hits first. For a 30-developer team, that's $5,400 to $8,640 a year, plus a three-year audit lookback most finance teams never see coming.
Preventing etcd Zombies on Upgrade to 3.6: A Cluster API Operator's Pre-Flight Checklist
Kubeadm still pins etcd to v3.5.24-0 for Kubernetes 1.31 through 1.33 — one patch below the v3.5.26 floor etcd's maintainers say you need before v3.6. Here's why Cluster API's machine-replacement upgrade model skips that safety margin entirely, and the pre-flight checklist to run before you cross the boundary.
Grafana Fleet Management Now Pushes Config to Any OTel Collector — But Still Can't Run Air-Gapped
Grafana Fleet Management went GA for vendor-neutral OpenTelemetry Collectors on July 8, 2026 — one control plane, one matcher-scoped push, instead of a per-node config edit. The catch: it still requires a live Grafana Cloud backend, and a 20-star open-source project is the only fully self-hosted alternative.
kpack: The Buildpack Controller That Rebuilds When the Base Layer Patches, Not When You Push
Most git-push PaaS tools only rebuild an app image when you push code — so a CVE patched into the base image sits unused until you happen to touch your source again. kpack's Image/Builder/ClusterStack CRDs close that gap by watching the base layer itself.