Kubernetes 1.36 Lets You Resize a Job Before It Starts: The Queue-Then-Resize Pattern a Build Queue Needed
Kubernetes 1.36 lets a queue controller patch a suspended Job's CPU/memory/GPU requests down to whatever's actually free, then unsuspend it, without losing the Job's identity or history. Here's the worked example, the safety guarantee behind it, and how to wire it into a build-queue controller.
Kubernetes 1.36 Ships Sharded Watch — Cluster API's Own Controllers Can't Use It Yet
KEP-5866 lets Kubernetes 1.36 filter watch events at the API server instead of every controller replica. Cluster API's own controllers can't use it yet — here's the architecture gap and what would actually close it.
Your Kubernetes Autoscaler Can't See Your Queue: Building the Exporter That Fixes It
CPU and memory can't see a growing job queue on an I/O-bound worker. Here's the exact Go exporter, Prometheus adapter config, and HPA YAML that lets Kubernetes autoscale on queue depth instead — and what shipping it as a golden path would take on a self-hosted PaaS.
Your Post-Quantum TLS Migration Isn't a Second Certificate Format — It's the Same Freshness Problem You Already Solved for 6-Day Certs
Let's Encrypt is skipping a direct ML-DSA swap for Merkle Tree Certificates because the naive post-quantum handshake blows past 14,700 bytes. Here's the actual byte math, the late-2026 staging timeline, and what a self-hosted PaaS's ACME automation needs to track before production MTCs land in 2027.
From 3 Days to 11 Minutes: What the Widely-Cited MCP Deploy Speedup Stat Actually Measures
The '3 days to 11 minutes' MCP integration stat traces to one unverified blog testimonial, not a benchmark. Here's what it actually measures, and what a fair before/after would require.
Northflank Has Four Kubernetes Modes. Only One Puts You in the Driver's Seat
Northflank markets four ways to run Kubernetes under its platform. Three of them mean Northflank's software still operates the control plane — only one hands that job to you. Here's the breakdown, with real numbers.
pgBackRest Got Archived, Then Rescued: The Bus-Factor Checklist Every Self-Hosted Postgres Backup Stack Needs
pgBackRest's repo went read-only in April 2026 after its corporate sponsor was sold, then a nine-company coalition revived it three weeks later. Here's the five-question checklist that story exposes, applied to the two real backup paths a CloudNativePG operator can choose today.
Railway's New MCP Server Has 7 Tools. bex's Shipped One Has 13 — and Still Can't Deploy
Railway's remote MCP server ships 7 tools and a one-line agent install; bex's already-shipped MCP server exposes 13. Here's what each actually lets an agent do unattended, and the one deploy verb bex still owes its own roadmap.
The Self-Hosted PaaS Category Gets Crowded in 2026: What Coolify, Dokku, CapRover, and Dokploy Actually Don't Do
Coolify, Dokku, CapRover, and Dokploy now cover the self-hosted PaaS category from every angle. A grounded look at the three things none of them do — and the real cost of the Kubernetes-native alternative that does.