640 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Helm 3 Bug Fixes Are Over: A Fleet Owner's Migration Checklist for the Security-Only Runway to February 2027
Helm 3's last bug-fix release shipped September 9, 2026, and security patches end February 10, 2027, with no extended support to buy. This fleet-owner's checklist covers what 'security fixes only' actually means, how to choose between Helm 4, plain manifests, and a GitOps operator, and the four automation breakages to fix before the wall.
One Client Per Secret: What Infisical's Kubernetes Operator Rebuild Teaches About Controllers at Scale
Infisical rebuilt its Kubernetes operator after one-client-per-secret OOM'd the pod and turned restarts into rate-limited auth bursts. Here's what broke, the reference-split fix, and a 7-point scale audit for your own controllers.
Still on ingress-nginx? Your Migration Starts With an Audit, Not a Tool
The ingress-nginx repository has been read-only since March 2026. A close reading of the January retirement statement plus the ordered pre-migration audit — annotation inventory, five routing-behavior probes, default-backend and TLS semantics — to run before any conversion tool.
Half of Kubernetes Got a Two-Month Warning: What the Ingress-NGINX Governance Crisis Means for Self-Hosted Platforms
The Kubernetes Steering and Security Response Committees' joint ingress-nginx warning was a governance signal, not a CVE — here's the escalation ladder, a default-routing decision matrix, and a five-check policy for request-path dependencies.
Kool.dev's $49 BYOC vs. Owning the Whole Stack: A Cost-and-Control Teardown
Kool.dev's BYOC plan runs k0s on your VPS for $49/mo, but the $5 managed databases and $0.45/GB storage reintroduce the vendor dependency self-hosting was meant to remove. A three-column cost teardown with trust-boundary analysis.
What KubeCon Amsterdam Disagreed About: Golden Paths, Hidden Kubernetes, and Agents as Users
KubeCon EU 2026 Amsterdam agreed platform engineering is the standard org model but split on golden-path scope, Kubernetes abstraction depth, and agents as platform users. This synthesis maps the three fault lines with verdicts for small self-hosted teams.
KubeCon NA 2026: What a Solo Self-Hosted Operator Should Actually Watch in Salt Lake City
KubeCon + CloudNativeCon North America 2026 runs November 9-12 in Salt Lake City with a new AI Inference + Agentic track and eleven Monday co-located events. This filter gives a two-person self-hosted fleet team six prioritized picks — named sessions, the Monday pass decision, maintainer-track tactics — plus a skip list and a free remote-follow playbook.
The Most Useful Date in Kubernetes 1.37 Was July 22, Not August 26
Kubernetes 1.37's freeze calendar — enhancements freeze June 17, code freeze July 22, GA August 26 — gave fleets ten scope-locked weeks to audit cgroup v1 nodes, containerd 1.x, and deprecated kubelet flags before upgrading. Here is the milestone-to-action runbook mapping, worked against the real 1.37 breaking changes.
Kubernetes' AI Gateway Working Group: Build the Gateway Boundary Before You Add Another MCP Tool
Kubernetes' AI Gateway Working Group treats agent traffic as an operational boundary, not another app route. Here is the four-control gateway — agent identity, quotas, tool-call tracing, deny-by-default egress — a self-hosted PaaS should build before exposing deploy and rollback tools over MCP.