510 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Kubernetes v1.36 Deprecated Service ExternalIPs: A Bare-Metal PaaS Migration Plan Before v1.40
Kubernetes v1.36 deprecated Service externalIPs ahead of planned kube-proxy disablement in v1.40. Use this migration plan to replace insecure tenant-selected addresses with MetalLB, Gateway API, controlled routing, and tested rollback.
CAPH v1.1.7 and the 429 That Ate a Healthy Machine: Why a Rate-Limited FindServer Marked 31 HCloudMachines as Gone
CAPH v1.1.7 (June 17, 2026) fixed a rate-limit false negative that marked ready HCloudMachines as not existing — 31 machines across 8 clusters in one reported incident. What the three shipped fixes change, how a 429 can trigger an unnecessary replacement, and the operator checklist a CAPH fleet needs before the next Hetzner throttle.
The Informer Tax: What Every controller-runtime Watch Costs on a 4GB Hetzner Box
Every watched GVK is a full in-memory copy of every object. How much that costs on a cheap Hetzner control-plane node, why naive controllers OOM at 10k Secrets, and the five cache levers that cut it by 25-90%.
Docker's Rate-Limit Reversal: Why Six Months' Notice Is Your Registry Strategy
Docker cancelled per-pull charges and shelved storage billing in early 2025, keeping only the 100/200 per 6-hour pull limits and promising six months' notice before any future enforcement. What that guarantee covers, when a pull-through cache still pays, and three hardening steps that let a self-hosted fleet wait safely.
etcd's fsync Tax: Why Your Kubernetes Control Plane Needs Local NVMe, Not a Cloud Volume
Every etcd write pays an fsync — and the 10 ms p99 budget decides whether your control plane feels fast or flaky. A fio benchmark comparison of Hetzner local NVMe vs Ceph-backed Cloud Volumes, with PromQL alerts that catch a slow disk before the API server does.
Kubernetes 1.37 Will Brick Your Fleet on Upgrade Day: ipvs, Static Pods, and cgroup v1
Kubernetes 1.37 lands August 26 with three fleet-breaking changes hiding behind deprecation warnings — ipvs enters a removal clock, static Pods can no longer reference Secrets, and cgroup v1 nodes refuse to start without an override.
Native Histograms Hit Kubernetes 1.37: The ~10x Prometheus Shrink Your Self-Hosted Fleet Pays For in Disk
Classic histograms turn every latency metric into N+2 time series. Native histograms collapse that to one — a ~10x storage win landing in the Kubernetes 1.37 cycle. A worked recompute for a self-hosted PaaS fleet on Hetzner, plus the scrape-config migration that gets there without re-instrumenting.
Temps Wants to Fix Coolify and Dokploy: Why a 99.9% Reliable One-Box PaaS Still Isn't a Fleet
Temps arrived January 2026 promising 99.9% deployment reliability by fixing the bugs that plague Coolify and Dokploy. It's the latest polished one-box self-hoster in a crowded field — and the clearest proof that a more reliable single server is still a single server.
Your Health Checks Are Quietly Killing Scale-to-Zero — And How to Get Idle Actually to Mean Zero on Kubernetes
You configured scale-to-zero but the service never sleeps — health checks and uptime monitors keep waking it. A practical design for genuine idle-to-zero on Kubernetes using KEDA, KubeElasti, and the activator pattern.