509 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Istio's Agentgateway Gambit: The Service Mesh Is Coming for Your Agent Traffic
Istio's experimental agentgateway support puts MCP tool calls, agent-to-agent sessions, and LLM routing inside the service mesh. What the KubeCon EU 2026 announcement changes for platform teams, and how close it is to production-ready.
Kubernetes Gets Its Own Agent Sandbox: What the Sandbox CRD Means for a Self-Hosted PaaS
Kubernetes SIG Apps shipped a Sandbox CRD for running AI agents as isolated, stateful workloads. Here is what warm pools, snapshot resume, and pluggable gVisor/Kata isolation mean for teams running their own PaaS, and the gaps to track before adopting it.
The Kubernetes Integration Tax, Itemized: What Prometheus, Cilium, and the Rest Really Cost a Two-Person Platform Team
An itemized accounting of self-hosted Kubernetes: what Cilium, Prometheus, TLS, GitOps, backups, upgrades, and policy cost a two-person team in setup and quarterly maintenance hours, converted to dollars and set against a $23–54 hosted PaaS bill.
Kubernetes v1.37 'Garhwal' for Platform Operators: Storage Version Migration GA and a Stable Metrics API
Kubernetes v1.37 graduates built-in Storage Version Migration and the stable metrics.k8s.io/v1 API. What each change means for self-hosted fleets, which runbook steps disappear, and the ordered checklist for your next chained upgrade.
Node Lifecycle Conditions Land in Kubernetes v1.37: One Status Channel for the Drain Dance
Kubernetes v1.37 introduces five well-known Node conditions that replace blind drain-state inference with a shared status channel. What DrainInProgress, Drained, and the maintenance conditions change for Cluster API remediation, and the ownership discipline your fleet needs first.
Node Readiness Controller Goes Alpha: Declarative Taint Gating for GPU and Driver Readiness
Kubelet marks GPU nodes Ready before their drivers finish installing, and pods pay for the gap. The alpha Node Readiness Controller adds declarative per-pool taint gating — here is the gate YAML, the dry-run adoption ladder, and whether a self-hosted fleet should run it now.
Restic vs Kopia in 2026: Which Backup Engine to Run for Encrypted Tenant Backups on S3-Compatible Storage
Restic and Kopia compared on published throughput, memory, repo size, encryption, and Velero alignment — with a decision guide for encrypted tenant backups on storage you own.
slip Promises Zero-Downtime Deploys From CI Without Kubernetes: What the Thinnest Deploy Primitive Covers, and What Breaks at Machine #2
slip is a Rust daemon that turns a CI webhook into a health-gated blue-green deploy on one server — previews, TLS, and rollback included. This breakdown maps what the thin loop genuinely covers against what breaks the day you need a second machine.
Stop Passing Service Account Tokens to CSI Drivers in Volume Context: What the v1.35 Token-in-Secrets Fix Means for Your Storage Layer
CSI drivers received workload-identity tokens in a log-visible gRPC map, and two CVEs printed them into driver logs. How the v1.35 secrets-field fix works, the rollout order that avoids breaking mounts, and how to audit your fleet.