July 2026
502 posts · 2026 archive
- The $2 Million Threshold: What Building Your Own Platform Actually Costs
- Windsurf Split Into Three Companies in a Week — Then the Brand Died Too
- Your Deploy Agent Has the Same Privileges as a Human Push — and No Insurance
- Friendly Fire: The AI Security Review That Executes the Attack It's Supposed to Catch
- What Bunnyshell and Okteto Actually Charge for 'Namespace Per PR' — And What It Costs to Build Once
- Ceph Tentacle's FastEC vs MinIO's Maintenance Mode: What Self-Hosting Block and Object Storage Looks Like on a Cluster-API Fleet in 2026
- Docker Compose's models: Key Has Been in the Official Spec Since June 2025 — What That Means for a Compose-to-Cluster-API Build Step
- Dokploy Passed CapRover's GitHub Stars in Two Years, Not Nine
- The Deploy That Pointed at Nothing: Firetiger's CI Race Condition and the One Check That Would Have Stopped It
- CVE-2026-50566: How Namespace-Scoped RBAC Became a 9.9 Node Compromise in Fission
- Gateway API on kind: The Local Reproduction Recipe for Ingress Bugs You Can't Debug on Bare Metal
- GitHub Copilot's Worktree Isolation Is Not a Sandbox — Why That Matters for Deploy-Authority Agents
- Do You Still Need kubectl for Cluster API Fleet Management? Headlamp's New Plugin Says Mostly No
- Hetzner's GEX131 GPU Server: What €889/Month for a Blackwell RTX PRO 6000 Buys Against AWS's g5.xlarge
- K3s vs K0s Under Cluster API: Which Lightweight Distro Actually Fits a Hetzner Fleet's Machine Lifecycle
- Kamaji Turns Kubernetes Control Planes Into Pods — But It Only Cuts the Control-Plane Bill, Not the Worker-Node One
- Kamal Supports Cloud Native Buildpacks, Not Just Dockerfiles: What That Means for bex's Own Build Path
- Kubernetes 1.36 Just Removed gitRepo Volumes and IPVS kube-proxy — Here's the Audit Your Cluster API Fleet Needs Before You Upgrade
- Kubernetes Dashboard Is Officially Dead: What Breaks When You Move to Headlamp
- Your Monitoring Stack Was a Root Shell: What Kubernetes v1.36's Kubelet Authorization GA Actually Fixes
- A 'Medium' CVE Popped a Full Reverse Shell: What ms-agent's Six-Layer Regex Bypass Teaches About Agent Sandboxing
- Next.js 16.2 Ships a Stable Adapter API — Vercel's Build Contract Is Now Public
- The State of Platform Engineering Vol 4: 29.6% of Platform Teams Don't Measure Success at All
- Your Files Never Moved: What Plex's July 2026 Outage Reveals About Fake Self-Hosting
- PowerDNS Operator: The Last Layer a Self-Hosted PaaS Still Outsources
- Your Namespace-Scoped Sealed Secret Wasn't: What CVE-2026-22728's Rotation Bug Actually Broke
- How SNCF Cut Kubernetes Cluster Provisioning From 30 Days to 30 Minutes With Cluster API
- Tekton Joins the CNCF: What Building a Git-Push PaaS's Pipeline Directly on Kubernetes CRDs Actually Buys You
- Gateway API v1.6 Graduates UDPRoute to GA: What It Actually Takes to Route Non-HTTP Traffic on a Self-Hosted PaaS
- Pinterest Ran 66,000 MCP Tool Calls a Month — Here's the Gate Your Deploy Agent Needs
- Your Deploy Agent's MCP Server Is a Trust Boundary — Here's the Threat Model
- Fly.io's 'Global Edge' Has a 6x Egress Cliff — and Flat Hetzner Pricing Wins the Workload It's Marketed For
- Kubelet Config Drop-in Directories Just Went GA: What Kubernetes 1.35 Actually Buys a Cluster API Fleet
- The Kubernetes Descheduler Can Cut Compute Spend 30-50% — Here's the Math on a Real Hetzner Fleet
- Hetzner Raised Prices Twice in 2026: What It Actually Does to the Self-Hosting Cost Pitch
- Cluster API's Docker Resources Are Deprecated, Not Removed: The Real CAPD→CAPDev Timeline and What to Migrate Before v1.15
- Cursor and Windsurf Can Now Run Your Code in the Cloud. Neither One Can Ship It.
- Depot's Cache Meter vs. Your Own NVMe: What $0.20/GB Actually Costs a Real Cache Footprint
- Incus as a Cluster API Node Substrate: A Real Provider, a Narrow Case, and a Default You Should Flip
- PSI Metrics Reach GA in Kubernetes 1.36: What Your Node's CPU/Memory Graphs Have Been Hiding
- GhostApproval: The AI Coding Agent Flaw That Turned 'Approve This Edit?' Into a Rubber Stamp
- Hetzner Tripled Some Cloud Tiers in 2026 — OVHcloud and Scaleway Didn't: A Line-by-Line Node-Pool Cost Comparison
- Your PaaS Bill Lied to You: The Hidden Line Items on Render, Railway, and Fly.io — and the Ones Self-Hosting Doesn't Tell You About Either
- Your Buildpack Only Checks bun.lockb. Bun Stopped Writing It in 2026.
- Coolify's 6% Idle CPU Tax vs Dokploy's 0.8%: What Single-Daemon PaaS Resource Overhead Actually Costs at Fleet Scale
- Daytona's $24M Compliance Bet: What a HIPAA/SOC 2 AI Sandbox Really Costs to Build Yourself
- DigitalOcean's Per-Second Billing Won't Save Your Always-On Fleet a Cent
- Docker's CVE-2026-34040 Is the Second Time This AuthZ Bypass Shipped: A Padded HTTP Request Still Grants Host Access on Unpatched Engines Below 29.3.1
- Dokploy Ships Four Buildpack Backends: What Buildpack Plurality Buys a Git-Push Platform Over Picking One
- Fly.io's July 9, 2026 Depot Builder Outage in IAD: What Renting a Shared Remote-Build Fleet Costs When the Region Itself Degrades
Showing 151–200 of 502 posts