Skip to main content

368 posts tagged with "Engineering"

Engineering insights and technical deep dives

View all tags

GitHub's September Reliability Deadline Arrived. The Incident Record Says It Missed.
·Dora Noda·9 min

GitHub's September Reliability Deadline Arrived. The Incident Record Says It Missed.

GitHub's COO promised fewer availability problems by September 2026. The July-to-September incident record — an eight-hour August outage, another Actions failure weeks later, and a five-service degradation on September 13 — says the deadline was missed. What the verdict means for pipelines that treat github.com as load-bearing, and the three mechanisms that harden them.

developer tools
infrastructure
engineering
PaaS
kube-hetzner vs CAPH: What Your First Hetzner Provisioning Choice Costs by the Second Cluster
·Dora Noda·10 min

kube-hetzner vs CAPH: What Your First Hetzner Provisioning Choice Costs by the Second Cluster

Terraform or Cluster API for Hetzner Kubernetes? A day-2 comparison of kube-hetzner and CAPH across upgrades, node replacement, and the June 2026 server-type churn — and exactly where the answer flips.

Kubernetes
self-hosting
infrastructure
engineering
What PR Preview Environments Really Cost: Render vs Railway vs Self-Hosted
·Dora Noda·10 min

What PR Preview Environments Really Cost: Render vs Railway vs Self-Hosted

Render and Railway both land near $40 a month for PR preview environments, but neither copies your data — and the self-hosted math flips past 30 PRs a month. A concrete rent-vs-build accounting.

PaaS
cost-optimization
self-hosting
engineering
A2A Turns One: What 150+ Organizations Standardizing Agent-to-Agent Messaging Means for a PaaS Whose Agents Deploy Apps
·Dora Noda·11 min

A2A Turns One: What 150+ Organizations Standardizing Agent-to-Agent Messaging Means for a PaaS Whose Agents Deploy Apps

A2A hit v1.0 with 150+ organizations and production rollouts at Microsoft, AWS, Salesforce, SAP, and ServiceNow. Here is the MCP-vs-A2A routing rule, a worked deploy-agent delegation, and when a self-hosted PaaS should ship its own Agent Card endpoint.

AI agents
Model Context Protocol
PaaS
engineering
Only 21% of Teams Can Stand Up a Pipeline in Under Two Hours — The Setup Tax Git-Push PaaS Erases
·Dora Noda·10 min

Only 21% of Teams Can Stand Up a Pipeline in Under Two Hours — The Setup Tax Git-Push PaaS Erases

Harness's 2026 survey found only 21% of teams can add a build-and-deploy pipeline in under two hours — while elite teams deploy 973x more often than laggards. A timed, row-by-row breakdown of where the setup hours go on the Dockerfile path, and what the git-push path deletes.

PaaS
self-hosting
developer tools
engineering
GitHub's July 29 Runner-Registration Outage: Your Build Pipeline Runs on Capacity Someone Else Plans
·Dora Noda·9 min

GitHub's July 29 Runner-Registration Outage: Your Build Pipeline Runs on Capacity Someone Else Plans

On July 29, 2026, GitHub's runner-administration service ran out of memory and builds quietly stopped starting. It was one of seven capacity-rooted incidents across July and August, and a concrete case for running the build step on capacity you plan yourself.

self-hosting
PaaS
infrastructure
engineering
Kubernetes v1.37 'Garhwal' for Platform Operators: Storage Version Migration GA and a Stable Metrics API
·Dora Noda·9 min

Kubernetes v1.37 'Garhwal' for Platform Operators: Storage Version Migration GA and a Stable Metrics API

Kubernetes v1.37 graduates built-in Storage Version Migration and the stable metrics.k8s.io/v1 API. What each change means for self-hosted fleets, which runbook steps disappear, and the ordered checklist for your next chained upgrade.

Kubernetes
PaaS
self-hosting
engineering
SEP-835 Scopes: Least-Privilege MCP Tokens for Agents That Hold Deploy Keys
·Dora Noda·9 min

SEP-835 Scopes: Least-Privilege MCP Tokens for Agents That Hold Deploy Keys

MCP's SEP-835 adds native per-tool scopes and RFC 8707 audience binding, so a status-check agent holds read-only scopes while deploy and rollback stay behind explicit step-up — and a compromised tool call fails closed instead of shipping an unauthorized deploy.

AI
security
identity
engineering
Node Readiness Controller Goes Alpha: Declarative Taint Gating for GPU and Driver Readiness
·Dora Noda·10 min

Node Readiness Controller Goes Alpha: Declarative Taint Gating for GPU and Driver Readiness

Kubelet marks GPU nodes Ready before their drivers finish installing, and pods pay for the gap. The alpha Node Readiness Controller adds declarative per-pool taint gating — here is the gate YAML, the dry-run adoption ladder, and whether a self-hosted fleet should run it now.

Kubernetes
self-hosting
infrastructure
engineering
Showing 46–54 of 368 posts