640 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
CNCF's 276–327-Patch Maintenance Bill for an Internal Platform
A 14-project Kubernetes platform can face 276–327 patches, 43–52 minor upgrades, and 2–5 major upgrades a year. This worked model turns that queue into 187–1,063 engineer-hours and shows how part-time operators can contain it.
Coolify Critical CVEs: The PaaS Isolation Lesson
Critical Coolify advisories show how authorization failures and deployment input can reach privileged infrastructure—and which layered controls can narrow the blast radius.
Crossplane vs. Cluster API: Draw the Boundary Before AI Draws It for You
Crossplane and Cluster API use Kubernetes reconciliation, but they own different things. Map the boundary between cluster lifecycle, external services, and tenant APIs before exposing infrastructure to AI agents.
CI Runner Pricing in 2026: Depot, Blacksmith, and the Cost of Reserving Your Own Build Capacity
A reproducible CI-runner cost model across 2, 8, and 20 concurrent jobs: current Depot and Blacksmith pricing beside the fixed cost of reserving self-hosted build nodes.
Gateway API 1.6 Gives Agent Sandboxes a Named Egress Target—Not an Egress Policy
Gateway API 1.6's experimental XBackend can make an AI API destination reviewable. Here is the complete control stack required to turn that declaration into safe sandbox egress.
Hetzner DNS Makes `ttl` Mandatory: Audit the One ACME Call That Can Break Renewal
Hetzner Cloud DNS will require an explicit TTL on one RRSet action after September 30, 2026. Identify whether your ACME path uses it, patch the request correctly, and rehearse a safe renewal.
Karpenter on Bare Metal Is Not Magic: The Supply Chain Behind a NodeClaim
A NodeClaim can choose capacity; only an automatable machine supply can deliver it. Follow a realistic burst from pending Pod to Ready bare-metal worker.
CVE-2026-35469: Audit SPDY Exposure in Your Self-Hosted Kubernetes Fleet
CVE-2026-35469 affects a SPDY dependency, not a single Kubernetes version. Use this practical audit to identify reachable parsers, verify vendor fixes, and roll self-hosted nodes safely.
Platform Engineering 2.0 Has Five Good Ideas—and an Implementation Gap
A practical readiness matrix for turning Platform Engineering 2.0’s AI, agent, FinOps, security, and composability pillars into operating designs a Kubernetes PaaS can verify.