640 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Two Hetzner API Changes, One November 2 Deadline: A Fleet Operator's Migration Checklist
Hetzner's September changelog relaxed bucket deletion and set a November 2 removal date for the legacy deprecated field on Images, Server Types, and Load Balancer Types. This checklist maps every old field to its replacement and names the exceptions that still bite.
Your Fleet Is Paying Rent on Disks Nobody Mounts: Reaping Orphaned PVCs With Kubernetes v1.37's Last-Used Timestamp
Kubernetes v1.37's beta PVC Unused condition records exactly when a volume went idle. A seven-stage reaping policy — 30-day discovery, snapshot-before-delete, 14-day review — turns that timestamp into safe, auditable deletion on a self-hosted fleet.
Kairos + k0rdent + bindy: Is This the 2026 Reference IDP a Small Platform Team Should Copy?
k0rdent's first year plus RBC's 50-cluster Kairos build log add up to a credible 2026 reference IDP — adopt the fleet layers (immutable nodes, CAPI lifecycle, OpenCost chargeback) and diverge at the app layer.
Let's Encrypt Ended Free mTLS Client Certs on July 8 — the Last Ones Expire This Week
Let's Encrypt's last clientAuth certificates expire the first week of October 2026. A five-minute audit to find certs that renew into rejection, and a decision table for moving client-auth issuance to SPIRE, a mesh CA, or private PKI.
AWS Now Runs an ACME Server: Why Your Self-Hosted cert-manager Never Needed It
AWS Certificate Manager now speaks ACME, issuing 45-day certificates with IAM governance and per-domain pricing. Here is how it compares to running cert-manager against Let's Encrypt directly, and the renewal-margin checklist short-lived certificates actually demand.
Weaveworks Died. Flux Didn't: The Community-Run GitOps Comeback vs Argo CD's Hub-and-Spoke
Two years after Weaveworks shut down, Flux CD ships v2.9.5 backed by Microsoft, GitLab, and ControlPlane — we audit the comeback evidence and compare its toolkit model against Argo CD's hub-and-spoke for self-hosted platforms.
Stopped Is Not Free: The Fly.io Preview-Environment Bill You Have to Delete
Fly.io bills stopped Machines 15 cents per GB-month for root filesystem plus volumes and snapshots with no auto-expiry — a 30-day model for 10, 50, and 100 dormant previews, and the destroy-path checklist that returns each cohort to zero.
Kubernetes Dashboard Is Dead — Headlamp's Knative and Volcano Plugins Turn It Into a Platform Workbench
Headlamp shipped Knative and Volcano plugins alongside its Cluster API views in June 2026, months after the Kubernetes Dashboard was archived. Here is what each plugin surfaces — traffic-split editing, effective autoscaling, gang-scheduling blockers — and what one RBAC-aware console means for a small team running clusters it owns.
Ingress2Gateway 1.0: A Scripted Migration Path Off the Now-Read-Only Ingress-NGINX
Ingress-NGINX is archived and unpatched — ingress2gateway 1.0 converts existing Ingress objects to Gateway API automatically. What converts cleanly, what needs hand-migration, and the five behaviors that break silently.