640 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
France's Railway Runs Kubernetes on Cluster API: What a National Railway's Declarative Rebuild Teaches a Two-Person Fleet Team
SNCF cut cluster provisioning from a month to 30 minutes and now updates every cluster monthly with Cluster API on its own hardware. Three lessons transfer directly to a two-person team on Hetzner — and four pieces of enterprise ceremony to skip.
Your Build Takes 4 Minutes and Nobody Knows Why: What Cloud Native Buildpacks' RFC 0131 Would Itemize
Deploy-from-git builds report success or failure and nothing else — no per-buildpack timing, no cache-hit signal, no failure attribution. RFC 0131 would fix that with opt-in OpenTelemetry traces per phase and buildpack, and a self-hosted PaaS can turn them into tenant-facing build receipts plus fleet-wide dashboards.
Coolify's Zero-Downtime Asterisk: Why Every Docker Compose Deploy Still Goes Down
Coolify deploys single-container apps with zero downtime but takes Docker Compose stacks offline on every deploy — a 10-to-30-second 502 window. The mechanical reason runners can't do what orchestrators get for free, where Dokploy's Swarm bet fits, and the four questions that cut through any self-hosted PaaS feature matrix.
Headscale at 40,000+ Stars: Mesh Your Multi-Region Fleet Without Anyone Else's Control Plane
Headscale passed 43,000 GitHub stars as the open-source, self-hosted Tailscale control server. A concrete build for meshing a multi-region fleet — embedded DERP, pre-auth keys, per-site subnet routers, ACLs in git — plus the single-instance HA catch and the cost math against Tailscale's 2026 per-user pricing.
Your GPUs Are 60% Idle and Kubernetes Says Everything Is Fine
A July 2026 CNCF case study found Kubeflow GPUs ~60% idle with every pod green — a scheduler-vs-network conflict fixed with topology constraints (40% to 85% utilization). The three families of GPU waste, a DCGM-based instrumentation ladder, and the rule for earning your next GPU node.
Kubernetes 1.37 Will Reject Your Static Pods: the kubeadm Audit to Run Before You Upgrade
Kubernetes 1.37 removes the opt-out and has the kubelet refuse any static pod referencing a Secret or ConfigMap. The one-line audit for every control-plane node, the full list of rejected fields, and the hostPath and extraVolumes patterns that replace them.
Kubernetes 2.0 on HN: Why Rivet's Docker Compose Story Ends at the Second Server
A skeptic on HN asked how Docker Compose could be a more reliable, scalable alternative to Kubernetes for Rivet's actor platform. Rivet's own docs supply the answer: the Postgres-plus-NATS second-machine path, the 1,000-actor ceiling, and where K0s fits instead.
Your Coding Agent Needs a Sandbox, Not a StatefulSet: gVisor vs Kata Under Kubernetes' New Sandbox Controller
Kubernetes SIG Apps shipped an upstream Sandbox controller for running untrusted agent code. A practical decision guide: what it replaces, whether gVisor or Kata fits your tenants, and what warm pools cost in idle capacity.
k3s Now, EKS Later? Pricing Ownkube's Graduation Ladder Against Cluster API on Day One
Ownkube lets teams start on hosted compute and graduate the same app into their own AWS account, from free single-node to metered multi-AZ. A priced run of one steady 2-vCPU team workload across every rung — plus what re-surfaces on migration day — against committing to Cluster API on flat hardware from the first deploy.