Kubernetes 1.36 Just Removed gitRepo Volumes and IPVS kube-proxy — Here's the Audit Your Cluster API Fleet Needs Before You Upgrade
Kubernetes 1.36 permanently kills gitRepo volumes (closing a CVE-2024-10220-class RCE) and removes IPVS kube-proxy mode as hard failures, not warnings. Here are the exact audit commands a Cluster API fleet needs before upgrading, including the CAPI config gap that hides IPVS on Hetzner clusters.
Kubernetes Dashboard Is Officially Dead: What Breaks When You Move to Headlamp
Kubernetes Dashboard is archived for good. Here's exactly what breaks in a kubectl proxy workflow when you move to Headlamp, what RBAC setup transfers untouched, and what the Cluster API plugin gives a fleet operator that Dashboard never could.
The State of Platform Engineering Vol 4: 29.6% of Platform Teams Don't Measure Success at All
A 2026 survey of 518 platform engineers found nearly a third don't measure success at all. Here's what the budget and adoption data actually show — and three cheap metrics to instrument instead so your platform isn't next year's defunded line item.
Your Files Never Moved: What Plex's July 2026 Outage Reveals About Fake Self-Hosting
Plex's July 14, 2026 outage never touched a single self-hosted file — but users still got locked out, because auth and discovery route through Plex's cloud by default. Here's what that reveals about the gap between owning your disk and owning your infrastructure.
Tekton Joins the CNCF: What Building a Git-Push PaaS's Pipeline Directly on Kubernetes CRDs Actually Buys You
Tekton became a CNCF incubating project on March 24, 2026. Here's what building a self-hosted PaaS's build pipeline directly on its Task and Pipeline CRDs actually gets you architecturally — and where the platform still has to fill in the gaps.
Pinterest Ran 66,000 MCP Tool Calls a Month — Here's the Gate Your Deploy Agent Needs
Pinterest's production MCP fleet handled 66,000 tool calls a month across 844 users. Here's the registry-and-gate architecture behind those numbers, and the concrete rate-limit and audit-retention policy a deploy-from-chat PaaS should ship on day one.
Kubelet Config Drop-in Directories Just Went GA: What Kubernetes 1.35 Actually Buys a Cluster API Fleet
Kubernetes 1.35 took kubelet's --config-dir flag to GA, letting drop-in KubeletConfiguration snippets replace one monolithic file. Here's the exact Cluster API YAML that uses it, and the node drift it still doesn't fix.
The Kubernetes Descheduler Can Cut Compute Spend 30-50% — Here's the Math on a Real Hetzner Fleet
A worked example turning the abstract 'bin-packing cuts compute 30-50%' claim into real node counts and euros on a Hetzner fleet, plus the PodDisruptionBudget and eviction-cadence config a multi-tenant PaaS needs before enabling it.
PSI Metrics Reach GA in Kubernetes 1.36: What Your Node's CPU/Memory Graphs Have Been Hiding
Kubernetes 1.36 graduates PSI metrics to GA, but the kubelet's own eviction manager still doesn't read them. Here's the exact wiring a self-hosted, Cluster-API-managed fleet needs to build itself — and the CPU-PSI gotcha that will burn you if you skip it.