640 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
No More Annotations: Gateway API v1.5 and v1.6 Make PaaS Ingress 100% Portable YAML
Gateway API v1.5 and v1.6 moved the CORS filter, TLSRoute, and TCP/UDP routes into the Standard channel, so a git-push PaaS can express a tenant's whole ingress layer as portable YAML with zero annotations. Includes the GRPCRoute timeline correction and the four-item conformance checklist to run before tenants rely on it.
DRA or HAMi? What Actually Shares Your GPUs in 2026
Kubernetes DRA now handles the scheduling half of GPU sharing, but runtime enforcement still belongs to HAMi. Here is the converged architecture, the concrete migration path, and which layer each fleet shape should standardize on.
Ingress-NGINX Is Dead: Your Per-Route Migration Playbook Before the November 2026 Cliff
Ingress-nginx was archived in March 2026 and Azure ends managed NGINX patches in November 2026. A concrete migration plan: which annotations Traefik's drop-in provider covers, what must be hand-rewritten as HTTPRoute, and how to cut over one host at a time.
Instant Kubernetes Is 5-10 Minutes, Not Sub-Second: The Real Cost Math of Cluster-per-PR Preview Environments
A Show HN promised instant Kubernetes with KVM and gRPC; its own numbers say 5-10 minutes per cluster. A scored comparison of five preview strategies and the fleet-scale math — node-hours, cold caches, control-plane sprawl — that decides cluster-per-PR vs namespace-per-PR.
Karmada for Cluster API Fleets: When One Control Plane Stops Being Enough
Karmada's hub-and-member model promises cross-cluster scheduling, federated quotas, and taint-driven failover for Cluster API fleets — but it doubles your control planes. A verdict-first guide to what it buys, what it costs, and the quarterly ceiling test that says when.
TCPRoute Went Stable, but Somebody Still Has to Own the IP: kube-vip vs Talos BGP vs Hetzner LBaaS
Gateway API 1.6 made TCPRoute portable, but something still has to announce the IP. A worked comparison: kube-vip ARP is free but LAN-bound, Talos BGP is free but needs a peer, and Hetzner LBaaS costs ~€7.49 per TCP service — €37 at five services, €150 at twenty.
One Bad GPU Shouldn't Sink the Node: Kubernetes 1.37's DeviceTaintRule Goes Stable
Kubernetes 1.37 promotes DRA device taints and tolerations to stable: a DeviceTaintRule fences one bad GPU with NoSchedule or NoExecute while the rest of the node keeps serving tenants. The YAML, the dry-run workflow, and what your health-check pipeline must build.
Kubernetes 1.37's Stable Metrics API: What Actually Changes for Metrics Server, HPA, and kubectl top
Kubernetes 1.37 promotes metrics.k8s.io to stable v1 after nine years in beta — a contract graduation, not a feature. What still needs metrics-server, how kubectl top and HPA behave through the transition, and an ordered checklist for self-hosted Cluster API fleets.
Kubernetes 1.37 Made Pod Certificates GA: The 4-Test Signer Harness to Run Before You Kill Static Credentials
Kubernetes 1.37 promotes Pod Certificates and Cluster Trust Bundles to stable, with 24-hour X.509 certs issued via PodCertificateRequest. A four-test harness for signer authorization, trust-bundle selection, lifetime refresh, and reload behavior that a self-hosted PaaS should pass before retiring static service-account tokens.