Kubernetes Just Deprecated externalIPs. Here's the Exact Migration Path for Bare Metal
Kubernetes 1.36 deprecated Service externalIPs over a security hole the project never patched. Here's the exact four-stage removal timeline and the commands to migrate a bare-metal fleet to MetalLB before the default flips in 1.40.
Kubernetes 1.36 Ships Gang Scheduling In-Tree: What It Actually Buys an AI-Agent Batch Fan-Out
Kubernetes 1.36 ships PodGroup and Workload APIs in-tree, letting the scheduler gang-schedule a multi-pod fan-out atomically. Here's exactly what the five alpha feature gates do, what they replace Volcano/Kueue for, and how far alpha still is from safe for tenant workloads.
Your Kubernetes Install Doesn't Have a Finish Line — And More Docs Won't Give It One
Why self-hosted Kubernetes installs for AI platforms stall for weeks, and why owning the node fleet with Cluster API fixes what better documentation can't.
Kubernetes 1.35 Killed the CPU Restart Tax. Memory Still Pays It.
Kubernetes 1.35 made CPU resizes truly restart-free, but memory resizes still restart the container by default. Here's the resizePolicy mechanics, the real constraints, and how a self-hosted PaaS should wire this into its tenant plan-upgrade flow.
Lagoon Outlived Its Mirantis Acquisition: What a Drupal-Born Kubernetes PaaS Still Gets Right
Lagoon, the Drupal-born Kubernetes PaaS Mirantis acquired in 2022, still automates per-branch config-imports and database provisioning that Coolify, Dokploy, Kubero, and Canine haven't fully matched — a concrete look at the mechanism and what a general-purpose platform has to build to catch up.
MCP Goes Stateless on July 28: Why Model Context Protocol Servers Can Finally Run Behind a Plain Kubernetes Load Balancer
MCP's July 28, 2026 spec removes Mcp-Session-Id and the initialize handshake, so any request can land on any server instance — here's the before/after Kubernetes architecture and what it unlocks for an MCP server with deploy authority.
Neon's Instant Postgres Branches Need Three Services CNPG Doesn't Have — What Self-Hosting Them on Kubernetes Actually Takes
CloudNativePG, Zalando, and StackGres all run HA Postgres on Kubernetes — none of them can branch a database in under a second. Neon can, because it isn't a Postgres operator at all. Here's the architecture that trick requires, and what standing it up yourself on Kubernetes actually involves today.
NixOS as a Cluster API Node Image: What It Buys and Costs Against Talos Linux
NixOS can replace the Ubuntu base under a Cluster API Hetzner fleet with a single reproducible flake — but unlike Talos it ships no dedicated CAPI provider and no hardening by default. Here's the actual wiring and the honest trade-off.
OpenTofu Crosses CNCF Sandbox Status While HCP Terraform Caps Its Free Tier at 500 Resources: What a BSL-Free IaC Layer Actually Buys a Cluster-API Fleet
HashiCorp relicensed Terraform to the BSL in 2023, and HCP Terraform's free tier now caps out at 500 managed resources. Here's what OpenTofu's state encryption, CNCF backing, and per-resource pricing actually mean for the IaC layer underneath a Cluster-API fleet — and where Terraform's remaining features still make sense.