Dora Noda
Software Engineer
Dora Noda is a Software Engineer writing about Web3 infrastructure, blockchain networks, and self-hosting.
3404 posts · View all authors
Kubernetes 1.35's Job managedBy Field Ends the Reconciliation Fight Over Agent-Triggered Batch Work
Kubernetes 1.35 made the Job managedBy field GA, letting a platform's own controller claim a Job's status end-to-end instead of racing the built-in controller for it — here's what that means for AI agents triggering migrations and one-off tasks from chat.
Kubernetes 1.36's User Namespaces Go GA: The hostUsers: false Default Every Multi-Tenant PaaS Should Ship
Kubernetes 1.36 graduated User Namespaces to GA — here's the exact node-image, subuid, and admission-policy recipe to make hostUsers: false the cluster-wide default for every tenant pod, plus the shared-kernel limitation it doesn't fix.
Kubero vs a Cluster-API PaaS: Two Kubernetes-Native Bets on "Heroku Without the Monthly Bill"
Kubero and a Cluster-API-based PaaS both promise Heroku without the invoice, but they eliminate different halves of it — here's the CRD-level breakdown of what each actually owns, what it costs, and which problem it solves.
Let's Encrypt's 6-Day Certificates Are GA: The Renewal Math Your PaaS's ACME Automation Needs to Survive It
Let's Encrypt's 6-day certificates are live and 45-day defaults are coming by 2028 — the renewal-frequency math, the real rate-limit bottleneck (your DNS provider, not Let's Encrypt), and what a self-hosted PaaS's ACME automation needs to change first.
MCP Server Cards Won't Advertise Your Tools — Here's What They Actually Do
A draft MCP proposal lets servers publish machine-readable metadata at a .well-known URL — but the real schema deliberately leaves out tool names, and that omission changes what publishing one actually buys a self-hosted platform.
MCP's Stateful Session Bottleneck: Why the 2026 Transport Roadmap Is Racing to Make Agent Servers Horizontally Scalable
MCP's official spec drops protocol-level sessions on July 28, 2026 — here's why that's the fix for the exact bug that makes a deploy-from-chat MCP server a worse single point of failure than the app it manages.
MCP Tasks Gets Retry Semantics and Expiry Policies: The 'Call Now, Fetch Later' Pattern for Deploys That Outlive an HTTP Timeout
MCP's Tasks primitive just went Final: client-generated task IDs make retries idempotent, keepAlive sets result expiry, and the 2026-07-28 spec reshapes both into a formal extension — what a deploy-from-chat MCP server needs to implement for deploys and rollbacks that outlast an HTTP timeout.
MCP Tool Schemas Are Eating 72% of Your Context Window: How to Design an Infrastructure MCP Server That Doesn't
A production benchmark shows MCP tool schemas can eat 72% of an agent's context window before a single query runs. Here's why, how Pinterest fixed it at scale, and how to design an infrastructure MCP server that doesn't repeat the mistake.
Ephemeral Preview Environments on Kubernetes: A Namespace-Per-PR Recipe for a Git-Push PaaS
A working ArgoCD ApplicationSet recipe for namespace-per-PR previews, what it actually costs in cluster resources at 10 vs 50 concurrent PRs, and the quota/network-policy/TTL guardrails that keep a busy repo from starving a shared cluster.