CAREN Meets Flux: Composable Runtime Hooks for Day-2 Cluster API Without Custom Controllers
CAREN turns Cluster API day-2 operations into composable Runtime SDK hooks — CNI, CCM, CSI, and LoadBalancer GC sequenced through blocking lifecycle callbacks. A concrete walkthrough of wiring CAREN into a CAPH ClusterClass and closing the loop with Flux GitOps.
Eleven Minutes, Zero Humans: What Kairos's Self-Healing Upgrades Teach a Bare-Metal PaaS
A CNCF Kubestronaut ran an 11-minute, zero-human Kubernetes upgrade on Kairos's A/B immutable OS — and documented every bug that almost broke it. Here is the pipeline, the two fixes that saved etcd quorum, and how to translate it to a Hetzner + Cluster API fleet.
Gateway API v1.6 Graduates TCPRoute to Standard: Exposing Postgres, MQTT, and Game Servers Without NodePort Hacks
Gateway API v1.6 moves TCPRoute and UDPRoute to v1 on the Standard channel. A concrete guide to replacing NodePort and per-service LoadBalancers with one Gateway, a support matrix for Envoy Gateway, Cilium, Traefik and NGINX Gateway Fabric, and the port and TLS semantics that still bite.
Fork in 3ms: What Kedge's Snapshot Tree Means for the Next Agent Sandbox
Kedge forks a hardware-isolated microVM in 3ms from a warm-pool snapshot tree — 10,000x faster than a Cluster API Machine on Hetzner. How the architecture works, what it costs, and what a self-hosted fleet must build to match it.
Kubernetes 1.36 'Haru': Three GA Graduations Your Small Fleet Actually Needs
Kubernetes 1.36 ships 70 enhancements with 18 graduating to Stable. Only three change day-to-day ops for a modest Hetzner-backed fleet: User Namespaces, MutatingAdmissionPolicy, and Volume Group Snapshots — with YAML, constraints, and the 15 you can safely defer.
AWS Still Charges $0.09/GB — But Your Egress Bill Tripled Anyway
AWS egress is still $0.09/GB in 2026. A worked recompute shows why a mid-traffic SaaS app pays 3-7x more for the same product shape, and what that traffic is worth on Hetzner's 20TB-included hardware.
Kubero's PaaS on Kubernetes: What a Dashboard Over kubectl Actually Solves — and What You Still Operate Yourself
Kubero gives you a polished PaaS surface on Kubernetes — git-push deploys, pipelines, and add-ons without Helm — but it assumes you already own a healthy cluster. Here is exactly what the dashboard automates, what it leaves you holding, and where a Cluster API fleet closes the gap.
Coolify v4.0.0 Goes Stable: What a Two-Year Beta Promoted to Stable Actually Guarantees — and What It Doesn't
Coolify shipped v4.0.0 stable on April 27, 2026 after 468 beta tags, 57,000 stars, and production use by thousands — plus 11 disclosed CVEs. What the stable tag actually guarantees for upgrade and security, what single-host Docker architecture it leaves unchanged, and how to decide whether to pin it today.
Dokploy Switched to Plain Apache 2.0 on January 21, 2026 — Why a Late Cleanup Is Harder to Trust Than Starting Clean
Dokploy replaced its custom Apache 2.0 plus commercial appendix with clean Apache 2.0 core on January 21, 2026. A before-and-after of what changed, what still sits under DSAL, and why a retroactive fix is weaker trust than starting clean.