Kubernetes 1.35 Killed the CPU Restart Tax. Memory Still Pays It.
Kubernetes 1.35 made CPU resizes truly restart-free, but memory resizes still restart the container by default. Here's the resizePolicy mechanics, the real constraints, and how a self-hosted PaaS should wire this into its tenant plan-upgrade flow.
Lagoon Outlived Its Mirantis Acquisition: What a Drupal-Born Kubernetes PaaS Still Gets Right
Lagoon, the Drupal-born Kubernetes PaaS Mirantis acquired in 2022, still automates per-branch config-imports and database provisioning that Coolify, Dokploy, Kubero, and Canine haven't fully matched — a concrete look at the mechanism and what a general-purpose platform has to build to catch up.
LiteLLM's Agent Platform Fixes Session Amnesia With One Postgres Table, Not a New Kubernetes Primitive
BerriAI's alpha-stage LiteLLM Agent Platform keeps an AI agent's session alive through a pod restart by storing state in Postgres instead of the sandbox itself — here's the actual mechanism, how it stacks up against E2B, Daytona, and Modal, and what it means for any MCP server with real deploy authority.
MCP Goes Stateless on July 28: Why Model Context Protocol Servers Can Finally Run Behind a Plain Kubernetes Load Balancer
MCP's July 28, 2026 spec removes Mcp-Session-Id and the initialize handshake, so any request can land on any server instance — here's the before/after Kubernetes architecture and what it unlocks for an MCP server with deploy authority.
Neon's Instant Postgres Branches Need Three Services CNPG Doesn't Have — What Self-Hosting Them on Kubernetes Actually Takes
CloudNativePG, Zalando, and StackGres all run HA Postgres on Kubernetes — none of them can branch a database in under a second. Neon can, because it isn't a Postgres operator at all. Here's the architecture that trick requires, and what standing it up yourself on Kubernetes actually involves today.
NixOS as a Cluster API Node Image: What It Buys and Costs Against Talos Linux
NixOS can replace the Ubuntu base under a Cluster API Hetzner fleet with a single reproducible flake — but unlike Talos it ships no dedicated CAPI provider and no hardening by default. Here's the actual wiring and the honest trade-off.
Northflank Now Runs 16 Managed Regions, Including Melbourne and Tokyo — What It Would Take a CAPH Fleet to Say the Same
Northflank now runs 16 managed regions including Melbourne and Tokyo at a flat $0.06/GB. A Hetzner-based fleet has six, none in Japan or Australia — here's the real cost and infrastructure gap behind that difference.
One Binary, Six Categories: What Octelium's VPN-ZTNA-MCP-Gateway-PaaS Convergence Actually Buys and Costs
Octelium bundles a VPN, ZTNA platform, API/MCP gateway, and PaaS into one AGPL binary with per-agent identity for AI tool calls. Here's exactly what that convergence buys in security and what it costs in blast radius, licensing, and bus factor.
OpenTofu Crosses CNCF Sandbox Status While HCP Terraform Caps Its Free Tier at 500 Resources: What a BSL-Free IaC Layer Actually Buys a Cluster-API Fleet
HashiCorp relicensed Terraform to the BSL in 2023, and HCP Terraform's free tier now caps out at 500 managed resources. Here's what OpenTofu's state encryption, CNCF backing, and per-resource pricing actually mean for the IaC layer underneath a Cluster-API fleet — and where Terraform's remaining features still make sense.