510 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Your Queue Is Retrying Itself Slow: What OpenFaaS Adaptive Concurrency Fixes About Async Batch Work on Kubernetes
OpenFaaS's April 2026 queue-worker update replaces greedy async dispatch with a feedback loop that learns each function's capacity — clearing the same batch about 50% faster with far fewer 429 retries. How it works, what it costs, and whether a git-push PaaS should host functions or just containers.
Every Pulumi Stack Is Now a Kubernetes CRD: What Operator 2.0 Buys a Cluster API Fleet (and Where Crossplane Already Covers It)
Pulumi Kubernetes Operator 2.0 runs each stack in its own Workspace pod behind the stable Stack CRD. We grade what IaC-as-CRD buys a Cluster API management cluster, where Crossplane already covers the same ground, and which one your agent-operators inherit.
The Machine You Can't SSH Into: Why Talos Linux Is the Right Node OS for a Hetzner-Backed PaaS
Talos Linux removes SSH, shells, and package managers from Kubernetes nodes. A before/after comparison plus the Copy Fail CVE case shows what that buys a Hetzner-backed PaaS — and where the tradeoffs bite.
Your Next Platform Tenant Is Not Human: What 'Agent as a First-Class Consumer' Actually Requires From a Deploy API
CNCF's agentic-enterprise pitch says AI agents should be first-class platform tenants. A row-by-row check of what that demands from a deploy API — identity, scopes, machine-readable state, audit trails, resource graphs — against what a self-hosted Render-compatible platform ships today.
Hot-Pluggable GPUs Join the CNCF: What CoHDI's Sandbox Debut Means for Your Self-Hosted GPU Pool
CoHDI entered the CNCF Sandbox promising hot-pluggable GPUs via Kubernetes DRA. A grounded accounting of the before/after math for a small self-hosted GPU pool, the Cluster API implications, and why DRA on fixed GPUs is the move today.
Great at Code, Bad at the Terminal: Why Deploy Agents Need Structured APIs, Not Shell Access
Top coding agents score 74-79% on SWE-bench but drop twenty-plus points on Terminal-Bench's real shell tasks. Those failure modes map directly onto deploy incidents — and argue for scoped MCP tools over raw kubectl access.
Your Deploy CLI Should Behave Like kubectl: Kubeconfig Merges, Impersonation, and Agent-Operated Fleets
kubectl settled how fleet tools find their cluster and identity years ago: kubeconfig chains, first-wins merges, and impersonation as act-as-tenant. What your deploy CLI and agent tooling should borrow whole — and where kubectl parity stops.
Gateway API v1.5 Is the Green Light for Day-One PaaS Routing — With Three Exceptions
Gateway API v1.5 moved ListenerSet, TLSRoute, and four more features to the stable channel. A verdict for platform teams: new clusters can build custom-domain and TLS routing on it today, with exactly three workloads that should wait.
The GPU Isolation Fault Line: gVisor, Kata, and Edera Face Off Over Your Sandbox Pool
gVisor proxies CUDA calls, Kata hands the whole GPU to a VM, and Edera isolates tenants behind a hypervisor while sharing the card — what each model costs a self-hosted sandbox fleet in blast radius versus throughput, and which one to default to.