Backstage's 89% Market Share Hides a 10% Adoption Problem
Backstage owns 89% of the IDP market but gets opened by about 10% of eligible engineers at a typical adopter. Here's what the plugin-upgrade tax behind that gap means for any platform's golden-path bet.
Buildpacks Now Auto-Detect 80% of New Web Apps in 2026: What the Remaining 20% Actually Needs From a Real Dockerfile
Zero-config buildpacks now cover roughly 80% of new web apps with no Dockerfile at all — but native dependencies, unsupported runtimes, multi-stage builds, and monorepos make up the other 20%, and how a platform handles that failure, cleanly or not, is a design choice.
CAPH Quietly Renamed Its Annotations and Finalizers — Here's Every Old-to-New Key
CAPH renamed every annotation and finalizer key to match Kubernetes convention back in 2024 with zero announcement — here's the full old-to-new mapping, why finalizers self-healed but annotations didn't, and the grep to run before you trust either one.
CVE-2026-25518: The cert-manager Bug That Lets a Poisoned DNS Reply Crash Your Whole TLS Pipeline
A crafted DNS response can crash the cert-manager controller mid-renewal. Here's exactly what CVE-2026-25518 breaks, why the fix isn't just an upgrade, and the two config changes a self-hosted PaaS's TLS automation needs today.
Chainguard and Wolfi Cross 2,000 Zero-CVE Images: Should a Self-Hosted PaaS Default to Them?
Chainguard's Wolfi-based images cut CVE counts from ~280 to zero and shaved 60-80% off build time and egress in a real migration. Here's what defaulting a git-push PaaS's build output to Wolfi would actually change — and the honest build-vs-buy call against Chainguard's paid catalog.
CNCF's Platform Engineering Maturity Model Just Got a v2 — We Ran a Cluster-API PaaS Through All 5 Aspects
CNCF shipped a v2 of its Platform Engineering Maturity Model at KubeCon EU 2026. Here's what actually changed in the rubric, and a concrete, honest self-assessment of a Cluster-API git-push PaaS against all 5 aspects.
Convex's FSL License Bans Building a Competitor: What 'Open, Except to Compete With Us' Actually Costs You
Convex's backend is source-available under the Functional Source License — free to self-host, but banned from powering a competing hosted product for two years. Here's what that non-compete clause actually forecloses, concretely, versus a plain Apache-2.0 license.
Kubernetes Promised a CSI for Buckets in 2022. It's Still Pre-Alpha Four Years Later
COSI, Kubernetes' answer to 'CSI for buckets,' targeted beta by Kubernetes 1.32 in December 2024. It's mid-2026 and the project is still pre-alpha. Here's the dated timeline, what hosted PaaS platforms shipped instead, and what a self-hosted PaaS should build for tenant object storage right now.
Daytona vs E2B for Self-Hosted AI Sandboxes: The Helm Chart Doesn't Do What You Think
Daytona's Helm chart looks like the easy self-hosting path for AI code sandboxes, but its own README shows the control plane never leaves Daytona's cloud. Here's what standing up Daytona and E2B actually requires on a Cluster API–managed fleet.