September 2026
756 posts · 2026 archive
- Your Agent's Firewall Can't Read SQL. Deno's Claw Patrol Can.
- Railway Locked Enterprise Deploys to a GitHub Org Allowlist: Build the Same Guardrail on Your Own Fleet
- Headlamp Ships a Cluster API Plugin: Declarative Cluster Lifecycle Finally Gets the UI Kubernetes Dashboard Never Had
- Heroku vs Railway vs Render vs Fly.io: Read the Feature Matrix, Not the Price List (2026)
- Hetzner DNS Makes the RRSet TTL Required on September 30: Audit Your DNS Automation Before Updates Start Failing
- Hetzner Is Giving Away Free Inference. Should Your Fleet Still Run Its Own vLLM?
- Hetzner Traffic Overage Math: €1/TB on Owned EU Boxes vs $150/TB on Render, and What It Means for Tenant Bandwidth Pricing
- KEP-5677: Tell Tenants 'No GPU Left' Up Front Instead of Parking Their Pods in Pending
- Your API Server Still Proxies Every kubectl exec in 1.36: What ExtendWebSocketsToKubelet Really Moves and the 4 Checks Before You Upgrade
- Kubernetes Shipped a Sandbox API for AI Agents: What a Declarative Singleton-Workload Primitive Means for a Deploy-From-Chat PaaS
- MCP's 10,000-Server Problem: Building an Allowlisted, Audited Tool Catalog Before an Agent Can Deploy to Your Fleet
- 450+ MCP Servers Catalogued and Quality-Scored Daily: What the Ecosystem Census Says About the Tool Sprawl Your Deploy Platform Inherits
- MCP Bets H2 2026 on Server Cards: What Your Registry-Less Server Must Hand-Roll Today
- Your Agent Doesn't Need Your API Key: What Qovery's Infrastructure-MCP Play Proves About Governed Tool Interfaces
- Deploy From Chat: What Coolify, Arcade, and Azure APIM Prove About MCP Servers for PaaS Ops
- Modal's $355M Series C Puts a Price on the Sandbox: What $0.33/Hour Per Agent Sandbox Really Costs vs Self-Hosted
- Netlify vs Vercel in 2026: Where the Pricing Actually Crosses Over (and What Self-Hosting Costs Instead)
- That $5–10 Hetzner + Coolify Next.js Stack: A Line-by-Line Recompute Against Vercel, Railway, and Fly.io
- No Monthly Minimum: What Four Usage-Only PaaS Bills Cost at 10%, 50%, and 100% Utilization
- Northflank vs Owning the Stack: What the 'Cloud-Native Coolify Alternative' Really Costs
- Your PaaS Is Now an Install Flag: What One-Click Installers Assume About Where Self-Hosters Start
- Every Heroku Exit Guide Crowns Its Author: What Puter's Top-5 Left Out
- Don't Trust It With Production Data Yet: The 2026 Managed-Postgres Gap Across Railway, Render, and Fly.io
- Railway Turned Its CLI MCP Server Into a Proxy: One Credential for Every Agent, and an Audit Trail You Can No Longer See
- Railway vs Render vs Fly.io vs a €4 Hetzner Box: A Line-by-Line Bill for the Same Node.js + Postgres App
- Six Coding Agents on a Private Network: Threat-Model the Credential Blast Radius Before You Copy Railway's Sandbox
- Render's New Memory-Optimized Plans Repriced: A Steady Web Service Bill vs a Fixed Hetzner Node
- Render Killed Per-Seat Pricing: A Worked Five-Person Bill for Railway vs Render vs a $19 Hetzner Box
- Agents Will Operate Your Platform With or Without You: What Frigade's Show HN Proves About Agent APIs
- Run Claude Code and Codex on a Remote VPS Without Going Broke: 2026 Provider Rankings After Hetzner's Price Hike
- Salesforce Closed Both Deploy Doors: The Complete Exit Map for Functions and Heroku Teams
- Your Pod Can Now Evict Its Neighbors to Grow: Scheduler Preemption for In-Place Resize Goes Alpha in Kubernetes v1.37
- Running Your First StorageVersionMigration: What Kubernetes v1.37's GA Migration API Changes in Your Cluster API Upgrade Runbook
- Suga Ranked 7 Heroku Alternatives for Docker Workloads — I Recomputed the Bill on One Reference Stack
- 1.5TB of RAM and 192 vCPUs for Under €600/Month: What a Hybrid Talos-on-Hetzner Build Validates About Splitting Control Planes From Workers
- Your CI Server Just Became an Agent Tool: What TeamCity's MCP Server Means for Deploy-From-Chat
- X Ships a Hosted MCP Server, and Agent Access Is Now Table Stakes
- Who Sent This Agent, and Whose Authority Is It Spending? What the IETF's AIMS Draft Means for MCP Server Auth
- Automatic TLS on Owned Hardware: Caddy vs cert-manager After Hetzner's July Load Balancer Disruption
- Your REST API Is Already an MCP Server: The Gateway Bridge That Skips the Rewrite (and Where It Breaks)
- Backstage's All-In Cost Hits $700K a Year for 100 Engineers: What Port's Days-to-Weeks Setup Trades Away for the Price
- Bare-IP TLS Is GA: Instant HTTPS for Preview URLs Without a DNS Round-Trip
- Better-PaaS and the 'Agent-First' PaaS Pitch: What a Single-VPS Deploy Tool Gets Right — and Where It Stops at the Second Machine
- Bottlerocket Killed Bare-Metal Kubernetes After 1.28: Picking a Node OS for Your CAPH Fleet
- Cloud Native Buildpacks Win on CVE Day, Not Day One
- Cilium 1.20: Default to Portable Policy, Go Cilium-Native Only Where It Earns It
- Cilium 1.20 Puts Tenant Auth in the CNI: What ExternalAuth Means for Fleets Still on ingress-nginx
- Codex Deploys End-to-End Without Leaving Chat: What That Means for Your Deploy API's Trust Boundary
- Fail Closed Before the Agent Acts: What Conduct's Guard-Before-Every-Tool-Call Model Means for Governing Deploy Agents
- containerd 1.7 Is Dead: The Node-Image Audit Your Fleet Owes Itself Before the Next Kubernetes Upgrade
Showing 201–250 of 756 posts