640 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Your Tenant Asked for a Full VM: the KubeVirt-vs-VM-API Decision Table for a Containers-First Fleet
A tenant wants a full VM on your containers-first fleet. This decision table maps five real VM requests to KubeVirt, VM API, CAPI infra providers, or outsourcing — with what Broadcom's CNCF Sandbox VM API changes and the four conditions that would make VMs a first-class deploy target.
Hetzner's ARM Discount Is Dead: the CAX-vs-CX Math for Your CAPH Fleet
Hetzner's ARM line now costs about 31% more than spec-identical x86 while EU capacity stays dry. Fleet-level CAX-vs-CX cost tables, a reshuffle-proof CAPH machine-template pattern, and why multi-arch buildpack images still matter.
Service ExternalIPs Are Going Away: The v1.36 Deprecation Timeline and Your Migration Runbook
Kubernetes 1.36 deprecated Service spec.externalIPs, with kube-proxy support ending by v1.43. A fleet-wide audit command, a decision table mapping each usage to its Gateway API, LoadBalancer, or NodePort replacement, and an ordered runbook for self-hosted fleets.
Automatic TLS Without a Hosted Edge: The Real Ops Bill for Custom Domains and Wildcards on a Self-Hosted Fleet
Fifty tenants, 51 certificates, and roughly 620 renewal events a year at 45-day lifetimes: what Caddy, Traefik with cert-manager, and Envoy SDS each cost to operate for custom domains and wildcards on a self-hosted fleet — plus the six-item renewal runbook to finish before February 10, 2027.
Your ingress-nginx Fork Subscription Is a Bridge, Not a Home: Pricing the Runway Against the Gateway API Migration
Chainguard's EmeritOSS and the Facets community fork sell extra runway for retired ingress-nginx — 78 days left on the Facets pledge. A priced comparison of fork maintenance against finishing the Gateway API migration, and the date math that decides which one you buy.
KubeCon NA 2026 Preview: VM API, VMware's Cluster API Bet, and a Self-Hosted Fleet Watch List
KubeCon NA 2026 runs November 9–12 in Salt Lake City — a self-hosted fleet operator's watch list with the VM API verdict, VMware's Cluster API bet, sessions worth attending, and three actions for the Monday after.
Kubernetes 1.36 Killed gitRepo and Started the Clock on externalIPs: A Bare-Metal Migration Guide
Kubernetes 1.36 permanently removes gitRepo volumes and deprecates Service externalIPs ahead of removal in v1.43 — a migration playbook with detection commands and bare-metal replacements for each.
The Kubernetes 1.37 Containerd Deadline That Doesn't Exist: A Fleet Upgrade Verification Playbook
Kubernetes 1.37 did not drop containerd 1.x support — the CRI fallback removal was deferred to 1.38 — but viral upgrade guides say otherwise. The changelog receipts, the four real 1.37 gates, the containerd 1.7 deadline that actually passed, and a 15-minute pre-rollout check for self-hosted fleets.
LiteBox 0.1: Microsoft's Rust Library OS Wants the Seat Between gVisor and Firecracker
Microsoft's LiteBox v0.1 is a Rust library OS claiming the empty seat between gVisor and Firecracker for sandboxing untrusted AI-agent code. A hands-on read of the release, an eight-row comparison table, and the six-item checklist before it earns a node pool.