640 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes

Kubernetes 1.36 Made Mutating Webhooks Optional: What Your Admission Layer Can Delete — and What Has to Stay
Kubernetes 1.36 graduates MutatingAdmissionPolicy to stable, so CEL evaluated inside the API server can replace hand-rolled mutating webhooks for tenant defaults, baselines, and sidecars. A concrete migration map, the boundary where webhooks stay, and a fleet-upgrade checklist.

Bring Your Own Cloud, Keep Someone Else's Meter: What Northflank BYOC Really Costs Against Owned Hardware
Northflank's BYOC runs your workloads in your own cloud account, but its per-vCPU-hour meter runs on top of your cloud bill. A worked three-way cost comparison — hosted vs BYOC vs a flat Hetzner box — plus the ownership question no invoice shows: who controls the control plane.

Sessions Live, Sandboxes Die: How Perplexity Cut Agent Sandbox Creation From 185ms to 60ms
Perplexity's SPACE runtime cut agent sandbox creation from 185ms to 60ms median by making the session — not the sandbox — the durable unit. The mechanism, the honest median-vs-tail math, and what it sets as the bar for self-hosted sandboxes.

No Account, 60 Minutes, Zero Trust: The Abuse Controls Behind Anonymous Deploys
Railway's no-account 60-minute deploys show what instant agent-to-preview loops need — and what stops them from becoming free cryptominers. A hostile-user checklist for quotas, network cages, build scanning, and timed teardown on your own Kubernetes fleet.

Render's 75% Faster Python Builds, Deconstructed: What a Self-Hosted PaaS Must Cache to Match It
Render claims buildpacks make Python builds 75% faster than a Dockerfile. The speedup is really warm layer-cache locality, and a self-hosted PaaS can match it with persistent build caches, warm build nodes, and dependency-first layering.

Paying $4,700 for a $1,999 GPU: What the RTX 5090 Street Premium Does to Self-Hosted Inference Math
An RTX 5090 at today's $4,700 street price adds about $75 a month to a self-hosted inference node — while H100 rentals fell roughly 70% from their peak. A worked amortization of both price curves, and where buying still wins.

Replace Is a Disaster on Bare Metal: What Talos Linux's In-Place Philosophy Means for Your Cluster API Fleet
Sidero Labs walked away from Cluster API because replacing a bare-metal machine on every change is a disaster — then CAPI v1.12 learned in-place updates. A runbook-level comparison of both upgrade paths and what a Hetzner-backed fleet should actually do.

Same Cluster API, Different Bill: What Vultr's CAPI Support Proves About the Standard (and the Metal)
Vultr has spoken Cluster API since October 2024 — so why doesn't the standard settle where your fleet lives? Same CAPI shapes, different bills: a sourced cost comparison, what portability really covers, and why owned metal still wins.

Durable Objects Just Escaped Cloudflare Twice: Deno's Celld vs Rivet Actors
Deno's celld runs Workers and Durable Objects on your own machines with per-cell SQLite and S3 compare-and-swap; Rivet Actors offers a broader open-source actor platform on Postgres or FoundationDB. A head-to-head on placement, upgrades, write fencing, and what a Kubernetes PaaS must provide to host either beside stateless services.