509 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Crossplane and AI: Why Agent-Operated Platforms Need Declarative APIs, Not Dashboards
CNCF's case that AI agents need API-first declarative infrastructure is right — but Crossplane's sprawling CRD surface is the wrong window into it. Agents need a small typed PaaS API over declarative machinery.
CrowdSec 1.8 Adds Bot Detection to Its Open-Source WAF: What Fingerprinting Plus Proof-of-Work Changes at a Self-Hosted Edge
CrowdSec 1.8 adds fingerprint-plus-proof-of-work bot detection to its open-source WAF and a Kubernetes datasource that lets one instance read pod logs from the API server. How the challenge scores bots, what it changes versus fail2ban and Anubis, and a six-item adoption checklist for your ingress.
Every Pull Request Gets a Live Environment: The Namespace-Per-PR Blueprint for Self-Hosted Kubernetes
Preview environments are now the default developers expect: 40% of teams run them and top performers nearly all do. What the Vercel/Railway bar requires, the namespace-per-PR blueprint for your own cluster, database strategies that stop short of a DBaaS, and the cost math versus always-on staging.
Fly.io Postgres vs Self-Hosted CloudNativePG: Pricing the Multi-Region Story
Fly.io's Postgres story is really two products — deprecated multi-region fly pg and single-region-first Managed Postgres. This inventory prices MPG, legacy fly pg, and a self-hosted CNPG fleet for a typical HA workload, with a decision rule for when Postgres-near-every-region earns its invoice.
Gateway API v1.5 Went All-In on Stable: Your Ingress-to-Gateway Migration Checklist for a Self-Hosted Fleet
With ingress-nginx past end of life and Gateway API v1.5 promoting six features to Standard, migrating off Ingress is now a scheduled project. A worked conversion, a manual-pass checklist, and a cutover runbook for small self-hosted fleets.
GitHub's Egress Firewall Won't Cover Your Self-Hosted Runners — Here's the Blueprint That Will
GitHub's 2026 roadmap adds a root-proof egress firewall for hosted runners only. Replicate that guarantee on self-hosted ARC runners with ephemeral pods, default-deny egress, Cilium DNS allowlists, and SHA-pinned actions.
hcloud-cloud-controller-manager's Experimental Server Cache: Fewer Hetzner API Calls, and the Staleness Question It Reopens
hcloud-cloud-controller-manager v1.32.0 added an experimental server cache that collapses per-Node Hetzner API lookups into one snapshot per window — and v1.33.0 fixed the stale not-found it shipped with. Here is the worked call math against the 3,600-request hourly budget, the staleness trade, and the upgrade checklist for a CAPH fleet.
Heroku to Kubernetes With Near-Zero Downtime: What Migration Services Sell vs. What the Cutover Requires
A service-by-service read of Qovery's modernization roundup: consultancies and hyperscalers run the cutover, platforms own day two, and the only honest downtime number is a minutes-long database write pause — plus what the same stack costs on owned hardware.
Kubernetes 1.37 Makes HPA Scale-to-Zero Default: Do You Still Need KEDA or Knative?
Kubernetes 1.37 graduates HPA scale-to-zero to beta and enables it by default. What minReplicas 0 replaces, the two gaps that keep KEDA and Knative in the stack, and a worked cost comparison for idle tenants.