505 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Crossplane v2.2 Shipped a Debugger and a kro Bridge: Why a PaaS That Said No to Crossplane Is Still Watching
Crossplane v2.2 added an alpha pipeline debugger and a kro-syntax composition function within 48 hours. Why the debugger is a maturity signal, but the kro bridge is the real news for a Cluster-API PaaS that already said no to Crossplane.
The Agent-Sandbox Market Crystallized Into Three Architectures. Here's the Bar for Building Your Own.
E2B, Modal, and Daytona each lead a different sandbox architecture — Firecracker microVMs, gVisor, hardened containers. A workload-conditional verdict on which wins where, the four-boundary isolation bar none of them ships by default, and the honest starting point for sandboxes on owned hardware.
Hetzner's deprecated Field Dies November 2: A Pre-Flight Audit for CAPH, Terraform, and Homegrown Fleet Tooling
Hetzner removes the deprecated field from its Images, Server Types, and Load Balancer Types API responses on November 2, 2026. This pre-flight audit maps every affected surface to its replacement and shows CAPH, Terraform, and homegrown fleet tooling exactly what to check before the silent zero-values start.
Hetzner's Warsaw PoP and the GEX45: What Changes — and Doesn't — for a CAPH Fleet
Hetzner's Warsaw PoP improves Eastern-European peering but adds no region to target, while the €214/month GEX45 puts Blackwell GPUs on dedicated boxes CAPH can only adopt through Robot inventory. The numbers and the operator playbook for a Hetzner-pinned fleet.
HPA Scales to Zero in Kubernetes v1.37: The End of the Always-On Replica (and the One Piece You Still Have to Build)
Kubernetes 1.37 graduates HPA scale-to-zero to beta, so idle tenant services can drop their last replica with no add-on — but HTTP workloads still need an activator. The worked cost math and a git-push PaaS adoption playbook.
Ingress-NGINX Is Retired — Your Gateway API Migration Can No Longer Wait
Ingress-nginx retired in March 2026 with no more security patches. A concrete migration map from Ingress annotations to Gateway, HTTPRoute, and GatewayClass — what ingress2gateway converts, what it skips, and where Gateway API v1.5 is genuinely better.
kube-hetzner Just Made Leap Micro the Default Node OS: What the Switch Off MicroOS Means for Your Hetzner Cluster
kube-hetzner's v3 line boots Leap Micro on every new nodepool while existing MicroOS nodes stay put. What the switch means, why fixed-point releases beat rolling ones for production nodes, and how Leap Micro compares to Talos.
No Terraform Required: KubeOne 1.13's One-Manifest Hetzner Control Planes vs Cluster API
KubeOne 1.13 provisions Hetzner control-plane VMs and the API load balancer straight from one manifest — no Terraform state, no output plumbing. Here is what the beta removes, what it still lacks next to Cluster API, and which operator each tool fits.
llm-d Is Now a CNCF Sandbox Project: What Kubernetes-Native Distributed Inference Means for Self-Hosting Your AI Agents' Brains
llm-d brings distributed LLM inference — prefix-cache-aware routing and prefill/decode disaggregation — to Kubernetes as a CNCF Sandbox project. What it means for self-hosting AI-agent inference, what it costs versus hosted APIs, and how early the project still is.