509 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Cluster API Stops Serving v1beta1 in v1.16: The Seven-Row Migration Audit Every CAPI Platform Owes Itself Before April 2027
Cluster API's v1beta1 API stops being served in v1.16, April 2027 — and CAPD's Docker resources are removed a release earlier. Here's the seven-place audit, what clusterctl convert does and doesn't cover, and how to sequence the upgrade as management-cluster Kubernetes support narrows to v1.33-v1.36.
KEDA v2.20's One-Line RBAC Change Silenced Your Autoscaler's Events for 60 Days
KEDA v2.20 swapped the operator's events RBAC from the core API group to events.k8s.io and dropped the old one — so every KEDA event was forbidden on the default install for 60 days. The exact rule to grant, who actually has to act, and the pre-upgrade checklist for a fleet whose scale-from-zero runs through one controller.
Talos v1.14 Puts a BGP Speaker Inside the OS: What It Actually Deletes (Not MetalLB), and Who Can Actually Use It (Not Hetzner)
Talos v1.14's embedded GoBGP doesn't replace MetalLB — it takes the BGP session your routers hold with a Kubernetes pod and moves it into machine config. A priced comparison of BGP, L2 announcement, and provider load balancers, the two-instance wiring that actually works, and why Hetzner fleets are locked out.
Bring Your Own Hetzner Account: Edka, Cluster API, and the Token With Only Two Permission Levels
A 3-node Hetzner cluster priced three ways — closed PaaS, a BYO-account control plane, and DIY Cluster API — plus the uncomfortable detail underneath all of it: a Hetzner API token has exactly two permission levels and one scope.
Field Is Immutable: Why helm upgrade Dies at the API Server, and Which Escape Hatch Actually Scales
A community Helm chart renames one label and your upgrade dies in the API server's validation path. Here is the full table of immutable Kubernetes fields with their exact error strings, the five ways out priced against each other, and the fleet size where a platform operator finally beats the runbook.
Hetzner Unfroze the 50-Second Load Balancer Idle Timeout — Your Build Logs Will Still Die at 15 Seconds
Hetzner made its 50-second load balancer idle timeout configurable in April 2026, but on a Kubernetes stack it is rarely the rung that kills your log stream. The full timeout ladder — with real defaults, the idle-vs-total distinction, and the heartbeat math that survives all of it.
Hetzner Removed the EC2-Compatible Metadata Routes on August 1 — Every Bootstrap Script Still Curling /latest/ Is Now Broken
On August 1, 2026 Hetzner removed the EC2-compatible /latest/ and /2009-04-04/ metadata routes, breaking every bootstrap script that inherited the AWS curl idiom. The full route-by-route migration table, a repo audit command, and the CAPH preKubeadmCommands diff that fixes it.
Kubernetes Finally Has a Checkpoint/Restore Working Group. Here's What Pausing a Mid-Task Agent Sandbox Actually Saves
A line-by-line cost model for pausing idle AI agent sandboxes on Kubernetes: PVC hibernation already captures 67% of the savings, CRIU checkpoint/restore is worth a further 59%, and today's kubelet checkpoint API can't deliver either.
90% Off Is the Break-Even: Preview-Environment Cost Math on Hardware You Already Bought
Preview-environment guides all say the same thing: put it on spot capacity for up to 90% off. Priced against a Hetzner box you own, 88.9% is exactly the break-even — so here is the real cost table, the duty cycle where renting still wins, and the three knobs that move the number when the meter is gone.