694 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own
Treat Your AI Agents Like Tenants: RBAC, Quotas, and Autonomous Drift Remediation as the Next Platform Engineering Primitive
A concrete blueprint for giving an AI agent its own Kubernetes namespace, RBAC role, resource quota, and audit trail — instead of just handing it a human's API token.
Agent Golden Paths: The 3-Point Audit for a Deploy API AI Agents Can Actually Walk
A concrete 3-point audit for whether your platform's self-service golden path can actually be walked unsupervised by an AI agent — and what happens when you run a typical Render-compatible deploy API through it.
Agent-Substrate vs. Kubernetes' Agent-Sandbox CRD: What 30x Pod Oversubscription Costs You in Scheduling Complexity
Agent-Substrate claims 30x pod oversubscription over Kubernetes' Agent-Sandbox CRD by sharing a worker pool instead of pinning one pod per agent. Here's exactly what that density costs in scheduling complexity, and when it's worth paying for.
The AI Sandbox Market Just Got a Hyperscaler Problem
Five hyperscalers shipped agent-execution sandboxes within seven months. Here's what each one actually does, how it's squeezing E2B, Daytona, and Modal on price, and why the entry itself makes the case for running agent code on the same fleet that already deploys your app.
Anthropic Acquires Bun to Power Claude Code's $1B Run-Rate: What an AI-Lab-Owned, Still-MIT-Licensed JS Runtime Means for a git-push PaaS's Buildpack Neutrality
Anthropic now owns the runtime Claude Code ships as an executable on. Seven months of release history, a $165K AI-driven Zig-to-Rust rewrite, and what a self-hosted PaaS's build layer should actually do about the risk.
MCP Gives Agents Tools. Agent Skills Gives Them Runbooks.
A folder with a SKILL.md file can hold an entire deploy-troubleshooting runbook and cost an agent almost nothing until it's actually needed. Here's the token math on why that beats stuffing the same runbook into an MCP tool description — and what a deploy-from-chat MCP server should borrow from it.
Argo CD 3.5 Adds Internal mTLS and Commit Signing — Here's the Bar Your Own GitOps Reconciler Should Clear
A July 2026 unpatched Argo CD RCE proved the unauthenticated internal RPC problem was real. Here's what Argo CD 3.5's mutual TLS and commit-signing fix actually close, and why any git-to-cluster reconciler needs the same two guarantees from day one.
Building a Bex Golden Path in Backstage: A Working Software Template, Not a Wiki Page
A hands-on walkthrough of building a real Backstage Software Template — template.yaml, a custom scaffolder action, and the generated manifest — that scaffolds a service straight onto a self-hosted PaaS fleet, no wiki page required.
Broadcom's VMware Price Reset Hits 800-1,500%: What the 72-Core Minimum Actually Costs, by Fleet Size
Broadcom's VMware repricing produces increases from 31% to 2,000% depending on one variable: cores per host. Here's the math across four real fleet sizes, and the honest scope of what moving to bare-metal Kubernetes actually requires.