E2B Joined the OpenAI Agents SDK. The Real Story Is How Many Times It's Had To.
E2B's OpenAI Agents SDK integration is its tenth publicly documented per-product integration guide, not its first — here's what the real count reveals about building versus betting on MCP for a self-hosted sandbox platform.
Envoy AI Gateway Hits v1.0: A CNCF Blueprint for Securing Your Own MCP Server
Envoy AI Gateway's v1.0 release stabilizes MCPRoute and MCPRouteSecurityPolicy, giving self-hosted platforms CEL-based per-tool authorization and audit trails for AI agents — without building an MCP authorization layer from scratch.
Gateway API v1.5's ListenerSet Just Solved Multi-Tenant Custom Domains — Here's the RBAC Layout That Replaces Your Ingress Hacks
Gateway API v1.5's ListenerSet lets tenants self-serve custom domains on a shared Gateway without cluster-wide write access — here's the actual YAML, precedence rules, and RBAC layout that makes it safe, not just self-service.
GitHub Tried to Meter Self-Hosted CI Runners, Then Backed Off
GitHub announced a $0.002/minute charge on self-hosted Actions runners, then postponed it within 48 hours. Here's the cost math it would have meant, and the control-plane dependency it exposed even for teams that already self-host their compute.
Hetzner Already Killed the datacenter Field — What a CAPH Fleet Must Check Before August 1
Hetzner already removed the datacenter field from its API on July 1, and EC2-compatible metadata routes disappear August 1 — here's exactly what breaks in a CAPH-managed fleet, what's already patched, and how to check.
Ingress NGINX Is Officially Dead: The Gateway API Migration a Self-Hosted PaaS Can't Skip
Ingress-nginx went EOL on March 24, 2026 with no more CVE fixes ever. Here's the head-to-head on the two sanctioned exits — Traefik as a drop-in stopgap vs. migrating straight to Gateway API's Gateway/HTTPRoute model — plus the before/after YAML a self-hosted PaaS's routing layer should generate.
Kamal 2 Bet Against Kubernetes and Rails 8 Made It the Default: What SSH-Based Docker Deploy Gets Right (and Where It Runs Out of Room)
Kamal 2 ships zero-downtime Docker deploys over plain SSH with no cluster and no control plane — here's the exact technical wall it hits, and what a Cluster-API-managed fleet does differently on the other side of it.
Kubernetes 1.36's Pod-Level Resource Managers: The Sidecar Bin-Packing Math, After Hetzner's Price Hikes
Kubernetes 1.36 lets a Pod share one CPU/memory budget across its containers instead of summing per-container reservations. Here's the worked bin-packing math — in real CCX43 nodes and euros, after Hetzner's 2026 price hikes.
Kubernetes 1.35's Job managedBy Field Ends the Reconciliation Fight Over Agent-Triggered Batch Work
Kubernetes 1.35 made the Job managedBy field GA, letting a platform's own controller claim a Job's status end-to-end instead of racing the built-in controller for it — here's what that means for AI agents triggering migrations and one-off tasks from chat.