Northflank Has Four Kubernetes Modes. Only One Puts You in the Driver's Seat
Northflank markets four ways to run Kubernetes under its platform. Three of them mean Northflank's software still operates the control plane — only one hands that job to you. Here's the breakdown, with real numbers.
npm v12 Turns Off 16 Years of Automatic Code Execution: The Exact Packages You Need to Re-Approve Before Your Build Breaks
npm v12 flipped install scripts, Git dependencies, and remote tarballs to off by default after a year of worm-driven supply chain attacks — here's the exact audit of which packages need re-approving and what it means for a git-push PaaS's Node buildpack.
pgBackRest Got Archived, Then Rescued: The Bus-Factor Checklist Every Self-Hosted Postgres Backup Stack Needs
pgBackRest's repo went read-only in April 2026 after its corporate sponsor was sold, then a nine-company coalition revived it three weeks later. Here's the five-question checklist that story exposes, applied to the two real backup paths a CloudNativePG operator can choose today.
Railway's New MCP Server Has 7 Tools. bex's Shipped One Has 13 — and Still Can't Deploy
Railway's remote MCP server ships 7 tools and a one-line agent install; bex's already-shipped MCP server exposes 13. Here's what each actually lets an agent do unattended, and the one deploy verb bex still owes its own roadmap.
The Self-Hosted PaaS Category Gets Crowded in 2026: What Coolify, Dokku, CapRover, and Dokploy Actually Don't Do
Coolify, Dokku, CapRover, and Dokploy now cover the self-hosted PaaS category from every angle. A grounded look at the three things none of them do — and the real cost of the Kubernetes-native alternative that does.
SNCF Rebuilt Its Cloud-Native Platform on Cluster API — Here's What Changed
CNCF gave SNCF its 2026 Top End User Award for a Cluster API rebuild that cut cluster provisioning from a month to 30 minutes and production incidents by 90%. Here's the stack, the before/after numbers, and what it proves about running Cluster API at production stakes.
SPIRE Needs Your Fleet's Shape in Advance. An Orchestrator Spawning Sub-Agents Doesn't Have One.
SPIRE requires every workload to be pre-registered before it can attest — a model that breaks the moment an orchestrator spawns sub-agents on demand. Here's the actual registration race, the ClusterSPIFFEID fix, and what it still doesn't solve.
What Bunnyshell and Okteto Actually Charge for 'Namespace Per PR' — And What It Costs to Build Once
A line-by-line breakdown of what Bunnyshell's per-minute meter and Okteto's per-seat fee actually cost a mid-size team's PR preview environments each month, versus building the same namespace-per-PR workflow on owned Cluster API infrastructure.
Ceph Tentacle's FastEC vs MinIO's Maintenance Mode: What Self-Hosting Block and Object Storage Looks Like on a Cluster-API Fleet in 2026
Ceph Tentacle's FastEC cuts erasure-coding overhead for small block I/O by 2-3x. Worked out on real Hetzner-class hardware against 3x-replicated Longhorn, plus the January 2026 production incident that shows exactly how not to enable it.