510 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Don't Build Cron Into Your PaaS: Running Windmill's Script-to-Webhook Engine as a Tenant Workload
Every git-push PaaS eventually needs cron and background workers. A concrete build-vs-route decision: run Windmill's open-source workflow engine as a tenant workload, or build your own — with the six-dimension tradeoff table and the three conditions that flip the answer.
When the Grid Itself Is the Threat Model: What Berlin's Four-Day Blackout Teaches About Fleet Placement
A January 2026 arson attack naming AI data centers left 45,000 Berlin households dark for four days. Why concentrated compute is now an explicit target — and why a distributed self-hosted fleet is the cheapest hedge.
Karpenter Still Doesn't Run on Bare Metal: What vCluster's Auto Nodes Workaround Really Buys You
Karpenter provisions right-sized cloud nodes in under a minute, but it still has no bare-metal provider in 2026. A stage-by-stage latency budget shows what vCluster's Terraform-backed Auto Nodes actually recovers — and why Cluster Autoscaler remains the sane default for a Cluster API fleet on owned hardware.
KEDA vs Knative vs Sablier: Three Ways to Make Idle Kubernetes Services Cost Nothing
KEDA, Knative, and Sablier put the scale-to-zero interception layer in three different places. A concrete comparison of cold starts, config cost, and probe hygiene — plus the health-check audit that decides whether any of them saves money.
Longhorn V2's Kernel Bypass: What SPDK Storage Actually Buys Your Self-Hosted Volumes
Longhorn's V2 engine moves block storage into userspace with SPDK for lower latency than the iSCSI-based V1 path — at the cost of a CPU core, 2 GiB of hugepages, and raw block disks per node. Measured gains, hardware caveats, and when to pilot it on your own metal.
Kubernetes 1.36 Made Mutating Webhooks Optional: What Your Admission Layer Can Delete — and What Has to Stay
Kubernetes 1.36 graduates MutatingAdmissionPolicy to stable, so CEL evaluated inside the API server can replace hand-rolled mutating webhooks for tenant defaults, baselines, and sidecars. A concrete migration map, the boundary where webhooks stay, and a fleet-upgrade checklist.
Bring Your Own Cloud, Keep Someone Else's Meter: What Northflank BYOC Really Costs Against Owned Hardware
Northflank's BYOC runs your workloads in your own cloud account, but its per-vCPU-hour meter runs on top of your cloud bill. A worked three-way cost comparison — hosted vs BYOC vs a flat Hetzner box — plus the ownership question no invoice shows: who controls the control plane.
Sessions Live, Sandboxes Die: How Perplexity Cut Agent Sandbox Creation From 185ms to 60ms
Perplexity's SPACE runtime cut agent sandbox creation from 185ms to 60ms median by making the session — not the sandbox — the durable unit. The mechanism, the honest median-vs-tail math, and what it sets as the bar for self-hosted sandboxes.
No Account, 60 Minutes, Zero Trust: The Abuse Controls Behind Anonymous Deploys
Railway's no-account 60-minute deploys show what instant agent-to-preview loops need — and what stops them from becoming free cryptominers. A hostile-user checklist for quotas, network cages, build scanning, and timed teardown on your own Kubernetes fleet.