640 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
A Full PaaS on One $11 ARM Server: What Real CAX21 Usage Data Says About Tenant Capacity
A measured teardown of a full multi-tenant PaaS on a €10.99 Hetzner CAX21 ARM server: per-component RAM tables, per-tier tenant footprints, and the 10–25 tenant capacity the numbers support — plus the scaling ladder to €33 and ~€200.
Your Scanner Said Clean. The Kubernetes CVE Record Was Wrong.
Kubernetes corrected four CVE records to 'affects all versions' on June 1, 2026 — three were never fixed and never will be. The five-check audit a self-hosted fleet operator should run before trusting the next automated patch decision.
Ship the Agent, Not Just the App: Curie vs Deployah and the Future of the Git-Push Deploy Contract
Curie ships Claude Code agents to Kubernetes via git push while Deployah shrinks the manifest to a short spec with nothing in-cluster: a side-by-side of the two deploy contracts, the six deploy-time concerns agents add, and which end a git-push PaaS should extend first.
SNCF Ships Its Cluster API Providers as OCI Artifacts: What an ORAS-Based Provider Supply Chain Buys a Self-Hosted Fleet
SNCF manages its Cluster API providers as versioned OCI artifacts via ORAS instead of pulling YAML from GitHub releases. How the pattern works mechanically, how it compares to clusterctl's documented air-gap paths, and when a small Hetzner fleet should copy it.
One ClusterProfile vs One Flux per Cluster: What Sveltos v1.13 Changes About Fleet Add-On Delivery
Sveltos delivers fleet add-ons from one management cluster to auto-discovered Cluster API clusters, replacing one Flux installation per workload cluster. A concrete before/after comparison — targeting, rollouts, drift, dry runs — plus what v1.13's Helm-update visibility adds and where Sveltos stops.
That $3,000-to-$200 Kubernetes-to-Fly.io Migration Story, Audited Line by Line
A $3,000 Kubernetes bill becomes $200 on Fly.io — until you price the snapshots, regional markups, and duty-cycle assumptions the headline skips. A line-by-line audit with the owned-hardware row neither side mentions.
The Self-Hosted PaaS Cambrian Explosion: What 55 awesome-paas Entries Say About the Second-Server Problem
The awesome-paas list now tracks 55 self-hosted platforms, and nearly all of them share one ceiling: they manage the server you built by hand. A look at what breaks at server number two — and the declarative alternative.
76% Cheaper, 3.6x the vCPUs: A Line-Item Read of an AWS+DigitalOcean-to-Hetzner Migration Bill
Digital Society cut its cloud bill 76% — $559.36 to $132.96 a month — while tripling capacity by moving from AWS and DigitalOcean to Hetzner ARM servers running Talos Linux. A line-item audit of where the savings came from, what they still rent, and the break-even math for your own team.
Stop Guessing When to Renew: cert-manager 1.21 Lets Let's Encrypt Tell Your Fleet When
cert-manager 1.21 adds experimental support for ACME Renewal Information, letting Let's Encrypt tell each certificate when to renew instead of clients guessing at two-thirds lifetime — plus the safe upgrade order for its breaking RBAC changes.