E2B vs Daytona vs Modal in 2026: Sandbox Pricing Hit Parity — Here's the Utilization Number That Decides If You Should Self-Host
E2B and Daytona both landed on the exact same $0.0504/vCPU-hour price in 2026. Here's the actual utilization percentage where running your own Hetzner sandbox fleet gets cheaper than renting theirs.
etcd v3.7's RangeStream Fixes a Decade-Old List-Watch Bug — But Not the One That Actually Broke Cluster API at Scale
etcd v3.7 ships RangeStream, a real fix for a decade-old memory-buffering bug in large list-watch reads. But Cluster API's own 300-cluster scale test shows the actual ceiling on a management cluster's etcd comes from somewhere else entirely.
Gartner's 80%-by-2026 Platform Team Number Is Real. Here's the Golden-Path Math That Decides If It Was Worth It
Gartner's 80%-of-orgs-by-2026 platform-team prediction is on track, but the number that actually predicts a lead-time win is the golden path underneath it: 80%+ voluntary adoption with one, under 20% without.
Headlamp's Cluster API Plugin: Browser-Native Fleet Management Arrives for Clusters You Actually Own
Headlamp's new Cluster API plugin puts MachineDeployment and MachineSet reconciliation state in a browser tab instead of a kubectl session — a concrete before/after for anyone running a self-hosted fleet on owned hardware.
Kubernetes 1.36 Retires the Webhook for Tenant Defaulting — Here's the Before/After
Kubernetes 1.36 graduates MutatingAdmissionPolicy to stable, letting CEL expressions replace the tenant-defaulting webhook most self-hosted PaaS platforms hand-roll. Here's the before/after code, what operationally disappears, and where a hand-written webhook still wins.
Kubernetes 1.36's Fine-Grained Kubelet Authorization Is GA — Here's Exactly What It Doesn't Fix
Kubernetes 1.36 splits kubelet API permissions out of the all-or-nothing nodes/proxy grant — but exec, attach, and portforward stay bundled together by design, so tenant kubectl exec access is exactly as risky as before.
The 20-40% Kubernetes Tax: What Small-Team Maintenance Data Actually Costs, and When Fleet Management Pays It Off
Small teams running their own Kubernetes lose 20-40% of an engineer's time to upgrades, cert rotation, and etcd backups — here's what that costs in dollars, and when Cluster API automation actually claws it back.
User Namespaces Are GA in Kubernetes 1.36: Exactly What It Buys You (and What It Doesn't) for Multi-Tenant and AI-Agent Nodes
Kubernetes 1.36 makes User Namespaces GA — a near-free identity remap that neutralizes four real container-escape CVEs, but stops short of the kernel-level isolation AI agents running untrusted code still need.
Kubernetes 1.36's Volume Group Snapshots Go GA: Can Your Self-Hosted Fleet Actually Use It?
Kubernetes 1.36 graduated VolumeGroupSnapshot to GA — a crash-consistent, multi-volume snapshot API. Here's the CSI driver support matrix that decides whether a Hetzner or Longhorn fleet can actually use it today, and the one path that works.