Blog
Insights, analysis, and updates from the AI agent economy. Browse by tag · Browse the archive.
Kubernetes 1.37 Makes HPA Scale-to-Zero Default: Do You Still Need KEDA or Knative?
Kubernetes 1.37 graduates HPA scale-to-zero to beta and enables it by default. What minReplicas 0 replaces, the two gaps that keep KEDA and Knative in the stack, and a worked cost comparison for idle tenants.
Heroku to Kubernetes With Near-Zero Downtime: What Migration Services Sell vs. What the Cutover Requires
A service-by-service read of Qovery's modernization roundup: consultancies and hyperscalers run the cutover, platforms own day two, and the only honest downtime number is a minutes-long database write pause — plus what the same stack costs on owned hardware.
Heroku Wants $140+/mo for Your Django App. Fly.io Does It for $15–$35: Pricing a Django Exit in 2026
A production Django stack — web, Celery worker, scheduler, Postgres, Redis — bills $140+/mo on Heroku against $15–$35 on Fly.io. A line-by-line recompute across Render, Railway, Fly.io, and flat-rate Hetzner, plus the migration costs and sensitivity cases that move the ranking.
Heroku Alternatives in 2026: Auditing the Render vs Railway vs Fly.io Rankings, Priced to the Dollar
Render, Railway, and Fly.io top every Heroku-alternatives ranking in 2026. This audit stress-tests each platform's claims against a real Heroku exit and prices the same workload four ways, including a flat-rate Hetzner baseline.
hcloud-cloud-controller-manager's Experimental Server Cache: Fewer Hetzner API Calls, and the Staleness Question It Reopens
hcloud-cloud-controller-manager v1.32.0 added an experimental server cache that collapses per-Node Hetzner API lookups into one snapshot per window — and v1.33.0 fixed the stale not-found it shipped with. Here is the worked call math against the 3,600-request hourly budget, the staleness trade, and the upgrade checklist for a CAPH fleet.
Harbor's CVSS 9.4 Default Password: How to Tell If Your Registry Is Exposed, and the First-Boot Rule That Prevents the Next One
Harbor 2.15.0 and below ships with a working admin/Harbor12345 default worth CVSS 9.4. A five-minute exposure audit, the rotate-first fix order, what to hunt if it was reachable, and the first-boot rule your own platform should steal.
GitHub Actions Goes Down and So Do Your Deploys: Designing a Git-Push Deploy Path That Survives an August 2026-Style GitHub Outage
On August 6, 2026, a nine-hour GitHub Actions outage froze builds, webhooks, and Pages publishes — including teams on self-hosted runners. This guide maps the blast radius and lays out a five-piece git-push deploy path that keeps shipping when the forge goes dark.
GitHub's Egress Firewall Won't Cover Your Self-Hosted Runners — Here's the Blueprint That Will
GitHub's 2026 roadmap adds a root-proof egress firewall for hosted runners only. Replicate that guarantee on self-hosted ARC runners with ephemeral pods, default-deny egress, Cilium DNS allowlists, and SHA-pinned actions.
GitHub's July 29 Runner-Registration Outage: Your Build Pipeline Runs on Capacity Someone Else Plans
On July 29, 2026, GitHub's runner-administration service ran out of memory and builds quietly stopped starting. It was one of seven capacity-rooted incidents across July and August, and a concrete case for running the build step on capacity you plan yourself.
Subscribe
New posts land in your reader as soon as they publish. Pick a format — all three carry the same posts.
Current feeds keep roughly two days of posts so daily polling does not miss a burst. Older entries stay reachable from the feed's next-page link in readers that follow it, or from the blog archive.
Following one topic instead? Browse tags