510 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Karmada for Cluster API Fleets: When One Control Plane Stops Being Enough
Karmada's hub-and-member model promises cross-cluster scheduling, federated quotas, and taint-driven failover for Cluster API fleets — but it doubles your control planes. A verdict-first guide to what it buys, what it costs, and the quarterly ceiling test that says when.
TCPRoute Went Stable, but Somebody Still Has to Own the IP: kube-vip vs Talos BGP vs Hetzner LBaaS
Gateway API 1.6 made TCPRoute portable, but something still has to announce the IP. A worked comparison: kube-vip ARP is free but LAN-bound, Talos BGP is free but needs a peer, and Hetzner LBaaS costs ~€7.49 per TCP service — €37 at five services, €150 at twenty.
One Bad GPU Shouldn't Sink the Node: Kubernetes 1.37's DeviceTaintRule Goes Stable
Kubernetes 1.37 promotes DRA device taints and tolerations to stable: a DeviceTaintRule fences one bad GPU with NoSchedule or NoExecute while the rest of the node keeps serving tenants. The YAML, the dry-run workflow, and what your health-check pipeline must build.
Kubernetes 1.37's Stable Metrics API: What Actually Changes for Metrics Server, HPA, and kubectl top
Kubernetes 1.37 promotes metrics.k8s.io to stable v1 after nine years in beta — a contract graduation, not a feature. What still needs metrics-server, how kubectl top and HPA behave through the transition, and an ordered checklist for self-hosted Cluster API fleets.
Kubernetes 1.37 Made Pod Certificates GA: The 4-Test Signer Harness to Run Before You Kill Static Credentials
Kubernetes 1.37 promotes Pod Certificates and Cluster Trust Bundles to stable, with 24-hour X.509 certs issued via PodCertificateRequest. A four-test harness for signer authorization, trust-bundle selection, lifetime refresh, and reload behavior that a self-hosted PaaS should pass before retiring static service-account tokens.
Kubernetes Fits in a Browser Tab: What ngrok's 140KiB Cluster Says Your Edge Fleet Can Drop
ngrok's webernetes project squeezed a working Kubernetes cluster into 140KiB of browser JavaScript. Its keep/drop inventory — verified against k3s — draws the line between what a single-node fleet can shed and what it must keep.
All or Nothing: What Kubernetes v1.36's PodGroup Scheduling Buys a Self-Hosted PaaS That Packs Tenants Tight
Kubernetes v1.36 gives kube-scheduler native all-or-nothing gang placement plus rack-aware co-location. A mini-fleet walkthrough shows what that saves a self-hosted PaaS bin-packing tenants onto fixed nodes — and the alpha limits that say don't run it in production yet.
Kubero's GitOps Engine: What Reconciliation-Driven Deploys Buy You Over Compose-on-a-VPS
Kubero implements GitOps on Kubernetes while Coolify and Dokploy shell out to Compose over SSH. A table-driven walkthrough of six lifecycle events shows exactly what reconciliation buys you — and where the cluster bill still lands.
Kyverno 1.17's CEL Policies Hit v1: What One Policy Language From Admission to Audit Buys a Multi-Tenant Fleet Over Gatekeeper's Rego
Kyverno 1.17 promotes its CEL policy engine to v1 and starts a removal clock on legacy ClusterPolicy, with deletion planned for v1.20 in October 2026. A side-by-side of validation, tenant defaulting, and image verification in CEL versus Rego, plus an eight-step migration checklist for multi-tenant fleets.