640 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Kubernetes 1.36 Schedules Whole Workloads, Not Pods: Bin-Packing Tenant Apps on Fixed Hardware
Kubernetes 1.36's PodGroup scheduling cycle binds whole workload gangs atomically, but tenant Deployments see almost no change yet. A worked 3-node scenario shows what moves, what doesn't, and where Kueue still wins.
The Single-Box Ceiling, Priced: What a Second Server Costs on Coolify, Dokploy, CapRover, and EasyPanel
Coolify, Dokploy, and CapRover charge $0 for a second server — EasyPanel's per-server Business tier adds about $910/year on identical hardware. A priced 12-month comparison of the multi-server ceiling, plus what the same box costs on a Cluster API fleet.
k3s vs Kubernetes vs MicroK8s: the 4x RAM Gap Is Real — and Where a Lightweight Distro Stops Being a Fleet
k3s agents run in 512 MB against a kubeadm worker's 2 GB — a real 4x gap on full upstream Kubernetes. What that buys on a €4 Hetzner box, the one-way doors waiting at machine two, and the on-call moment when Cluster API takes over.
Sealed Secrets vs External Secrets Operator in 2026: What Git-Stored Ciphertext Really Costs a Three-Person Platform Team Against Vault Sync
Sealed Secrets vs External Secrets Operator for tenant secrets on a self-hosted multi-tenant fleet: a grounded cost comparison of vault sync against git-stored ciphertext, with tenant-isolation recipes and the thresholds for switching.
Rootless Kubelet Goes Beta in Kubernetes 1.37: A Hardening Checklist for Self-Hosted Fleets
Kubernetes 1.37 promotes KubeletInUserNamespace to beta, letting the kubelet and node components run as an unprivileged user so container breakouts stop at a UID instead of host root — plus the nine-item cgroup, runtime, CNI, and storage checklist for making rootless your node-image default.
Kubernetes 1.36's Sharded List and Watch: the N× Watch Tax It Kills, and the Ceiling It Doesn't Touch
Kubernetes 1.36's alpha sharded list and watch cuts sharded-controller stream cost from N× to 1× — but it shards controller fan-out, not etcd. The math, the mechanism, and the operator checklist for self-hosted fleets.
Surviving a Full Hetzner Datacenter Outage: What 3-DC k0s HA Really Costs Versus Single-DC
A 3-datacenter k0s cluster on Hetzner survives a full DC outage for about $103/mo in servers and $0 in extra traffic — but every etcd write pays ~25ms and a third of worker capacity must sit idle. Here is the layer-by-layer HA design, the verified cost math, and when single-DC plus backups wins instead.
Open-Weight AI Is Having Its Kubernetes Moment — Here's What Your Fleet Needs to Serve It
Open-weight models are becoming the default infrastructure layer for AI. This post maps the standardized Kubernetes inference stack — OCI weights, DRA, InferencePool, KServe, llm-d — and shows what a self-hosted fleet needs to serve models next to tenant apps.
Oracle Halved Its Free ARM Cloud. Here's the $0-vs-$5 Kubernetes Math Now.
Oracle cut its Always Free Ampere allowance from 4 OCPUs/24GB to 2/12 in June 2026 and started terminating over-limit instances in August. A worked comparison of the most always-on Kubernetes still available for $0 versus a flat ~$5 Hetzner box, with the reclaim, capacity, and grandfathering catches priced in.