E2B vs Daytona vs Modal in 2026: Sandbox Pricing Hit Parity — Here's the Utilization Number That Decides If You Should Self-Host
E2B and Daytona both landed on the exact same $0.0504/vCPU-hour price in 2026. Here's the actual utilization percentage where running your own Hetzner sandbox fleet gets cheaper than renting theirs.
etcd v3.7's RangeStream Fixes a Decade-Old List-Watch Bug — But Not the One That Actually Broke Cluster API at Scale
etcd v3.7 ships RangeStream, a real fix for a decade-old memory-buffering bug in large list-watch reads. But Cluster API's own 300-cluster scale test shows the actual ceiling on a management cluster's etcd comes from somewhere else entirely.
Self-Hosted Kubernetes Installs Don't Stall on Kubernetes — They Stall on Your Registry, Network, and Approval Chain
Fairwinds' CTO named the real reason self-hosted Kubernetes installs drag on for months — and it's rarely Kubernetes. Here's what that means for any Cluster-API PaaS that might one day sell into a customer's own infrastructure.
Fly.io Kills GPUs on August 1, 2026: Where Do Your Agent Sandboxes Go Now?
Fly.io fully deprecates GPU Machines on July 31, 2026. Here's the duty-cycle cost breakdown across RunPod, Modal, and a self-hosted Hetzner GPU box for the teams whose agent sandboxes and fine-tuning jobs have to move.
Headlamp's Cluster API Plugin: Browser-Native Fleet Management Arrives for Clusters You Actually Own
Headlamp's new Cluster API plugin puts MachineDeployment and MachineSet reconciliation state in a browser tab instead of a kubectl session — a concrete before/after for anyone running a self-hosted fleet on owned hardware.
ingress-nginx's EOL Didn't Stop CVE-2026-3288: What Patching a Dead Project Means for Your Routing Layer
ingress-nginx's official end of life didn't stop three RCE patches from landing in its final weeks and months after — here's the sourced timeline, a fleet-wide audit you can run today, and why the blast radius is worse on a self-hosted PaaS.
Karpenter's Alpha Cluster API Provider vs. Cluster Autoscaler: What Actually Autoscales an Owned-Hardware Kubernetes Fleet in 2026
A Hetzner-backed Cluster API fleet gets its node-ready time from Cluster API's own machine lifecycle, not from which autoscaler is asking — here's what Cluster Autoscaler, alpha Karpenter-for-CAPI, and vCluster's Auto Nodes each actually deliver today.
Kata Containers vs gVisor: A RuntimeClass Decision Framework for Multi-Tenant Kubernetes
runC's 2025-2026 escape vulnerabilities settled the question of whether untrusted multi-tenant workloads need stronger isolation. This is the decision framework for which one, per workload, actually pays off.
Kubernetes 1.36 Retires the Webhook for Tenant Defaulting — Here's the Before/After
Kubernetes 1.36 graduates MutatingAdmissionPolicy to stable, letting CEL expressions replace the tenant-defaulting webhook most self-hosted PaaS platforms hand-roll. Here's the before/after code, what operationally disappears, and where a hand-written webhook still wins.