640 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Porter's 0.01-vCPU Promise Meets the BYOC Cost Floor
Porter bills requested CPU and RAM inside your cloud account, but a BYOC cluster still has a fixed cost. A three-way example shows where granular requests help, where hosted tiers win, and how ownership changes the bill.
SELinux Volume Labels in Kubernetes 1.36: Audit Your Multi-Tenant Storage Before 1.37
Kubernetes 1.37 makes SELinux context mounts the default for eligible volumes. Audit CSI drivers, shared PVCs, and label conflicts before the upgrade leaves a Pod stuck in ContainerCreating.
SpinKube on an Existing Kubernetes Fleet: One More RuntimeClass, Not a Parallel Platform
Add Spin WebAssembly workloads to an existing Kubernetes fleet with a containerd shim and RuntimeClass—without adding a second scheduler or parallel platform.
Three Stages of Self-Hosting: The Operational Checklist for Moving Beyond One Server
Use four operational signals—downtime ownership, restore drills, deploy concurrency, and node replacement—to decide when a one-server PaaS should grow into a fleet.
Kubernetes v1.36 Deprecated Service ExternalIPs: A Bare-Metal PaaS Migration Plan Before v1.40
Kubernetes v1.36 deprecated Service externalIPs ahead of planned kube-proxy disablement in v1.40. Use this migration plan to replace insecure tenant-selected addresses with MetalLB, Gateway API, controlled routing, and tested rollback.
CAPH v1.1.7 and the 429 That Ate a Healthy Machine: Why a Rate-Limited FindServer Marked 31 HCloudMachines as Gone
CAPH v1.1.7 (June 17, 2026) fixed a rate-limit false negative that marked ready HCloudMachines as not existing — 31 machines across 8 clusters in one reported incident. What the three shipped fixes change, how a 429 can trigger an unnecessary replacement, and the operator checklist a CAPH fleet needs before the next Hetzner throttle.
The Informer Tax: What Every controller-runtime Watch Costs on a 4GB Hetzner Box
Every watched GVK is a full in-memory copy of every object. How much that costs on a cheap Hetzner control-plane node, why naive controllers OOM at 10k Secrets, and the five cache levers that cut it by 25-90%.
Docker's Rate-Limit Reversal: Why Six Months' Notice Is Your Registry Strategy
Docker cancelled per-pull charges and shelved storage billing in early 2025, keeping only the 100/200 per 6-hour pull limits and promising six months' notice before any future enforcement. What that guarantee covers, when a pull-through cache still pays, and three hardening steps that let a self-hosted fleet wait safely.
etcd's fsync Tax: Why Your Kubernetes Control Plane Needs Local NVMe, Not a Cloud Volume
Every etcd write pays an fsync — and the 10 ms p99 budget decides whether your control plane feels fast or flaky. A fio benchmark comparison of Hetzner local NVMe vs Ceph-backed Cloud Volumes, with PromQL alerts that catch a slow disk before the API server does.