Skip to main content

640 posts tagged with "Kubernetes"

Container orchestration, Cluster API, and self-hosted control planes

View all tags

Read the Kubernetes for platform teams guide

Kubernetes 1.36 Made Mutating Webhooks Optional: What Your Admission Layer Can Delete — and What Has to Stay
·Dora Noda·10 min

Kubernetes 1.36 Made Mutating Webhooks Optional: What Your Admission Layer Can Delete — and What Has to Stay

Kubernetes 1.36 graduates MutatingAdmissionPolicy to stable, so CEL evaluated inside the API server can replace hand-rolled mutating webhooks for tenant defaults, baselines, and sidecars. A concrete migration map, the boundary where webhooks stay, and a fleet-upgrade checklist.

Kubernetes
PaaS
self-hosting
infrastructure
Bring Your Own Cloud, Keep Someone Else's Meter: What Northflank BYOC Really Costs Against Owned Hardware
·Dora Noda·10 min

Bring Your Own Cloud, Keep Someone Else's Meter: What Northflank BYOC Really Costs Against Owned Hardware

Northflank's BYOC runs your workloads in your own cloud account, but its per-vCPU-hour meter runs on top of your cloud bill. A worked three-way cost comparison — hosted vs BYOC vs a flat Hetzner box — plus the ownership question no invoice shows: who controls the control plane.

PaaS
self-hosting
cost-optimization
Kubernetes
Sessions Live, Sandboxes Die: How Perplexity Cut Agent Sandbox Creation From 185ms to 60ms
·Dora Noda·9 min

Sessions Live, Sandboxes Die: How Perplexity Cut Agent Sandbox Creation From 185ms to 60ms

Perplexity's SPACE runtime cut agent sandbox creation from 185ms to 60ms median by making the session — not the sandbox — the durable unit. The mechanism, the honest median-vs-tail math, and what it sets as the bar for self-hosted sandboxes.

AI agents
PaaS
self-hosting
Kubernetes
No Account, 60 Minutes, Zero Trust: The Abuse Controls Behind Anonymous Deploys
·Dora Noda·10 min

No Account, 60 Minutes, Zero Trust: The Abuse Controls Behind Anonymous Deploys

Railway's no-account 60-minute deploys show what instant agent-to-preview loops need — and what stops them from becoming free cryptominers. A hostile-user checklist for quotas, network cages, build scanning, and timed teardown on your own Kubernetes fleet.

self-hosting
PaaS
Kubernetes
security
+1
Render's 75% Faster Python Builds, Deconstructed: What a Self-Hosted PaaS Must Cache to Match It
·Dora Noda·10 min

Render's 75% Faster Python Builds, Deconstructed: What a Self-Hosted PaaS Must Cache to Match It

Render claims buildpacks make Python builds 75% faster than a Dockerfile. The speedup is really warm layer-cache locality, and a self-hosted PaaS can match it with persistent build caches, warm build nodes, and dependency-first layering.

self-hosting
PaaS
Kubernetes
engineering
Paying $4,700 for a $1,999 GPU: What the RTX 5090 Street Premium Does to Self-Hosted Inference Math
·Dora Noda·10 min

Paying $4,700 for a $1,999 GPU: What the RTX 5090 Street Premium Does to Self-Hosted Inference Math

An RTX 5090 at today's $4,700 street price adds about $75 a month to a self-hosted inference node — while H100 rentals fell roughly 70% from their peak. A worked amortization of both price curves, and where buying still wins.

self-hosting
PaaS
cost-optimization
AI
+1
Replace Is a Disaster on Bare Metal: What Talos Linux's In-Place Philosophy Means for Your Cluster API Fleet
·Dora Noda·9 min

Replace Is a Disaster on Bare Metal: What Talos Linux's In-Place Philosophy Means for Your Cluster API Fleet

Sidero Labs walked away from Cluster API because replacing a bare-metal machine on every change is a disaster — then CAPI v1.12 learned in-place updates. A runbook-level comparison of both upgrade paths and what a Hetzner-backed fleet should actually do.

self-hosting
PaaS
Kubernetes
infrastructure
Same Cluster API, Different Bill: What Vultr's CAPI Support Proves About the Standard (and the Metal)
·Dora Noda·8 min

Same Cluster API, Different Bill: What Vultr's CAPI Support Proves About the Standard (and the Metal)

Vultr has spoken Cluster API since October 2024 — so why doesn't the standard settle where your fleet lives? Same CAPI shapes, different bills: a sourced cost comparison, what portability really covers, and why owned metal still wins.

Kubernetes
PaaS
self-hosting
infrastructure
Durable Objects Just Escaped Cloudflare Twice: Deno's Celld vs Rivet Actors
·Dora Noda·12 min

Durable Objects Just Escaped Cloudflare Twice: Deno's Celld vs Rivet Actors

Deno's celld runs Workers and Durable Objects on your own machines with per-cell SQLite and S3 compare-and-swap; Rivet Actors offers a broader open-source actor platform on Postgres or FoundationDB. A head-to-head on placement, upgrades, write fencing, and what a Kubernetes PaaS must provide to host either beside stateless services.

self-hosting
PaaS
Kubernetes
infrastructure
+1
Showing 433–441 of 640 posts