506 posts tagged with "Kubernetes"
Container orchestration, Cluster API, and self-hosted control planes
Headlamp Ships a Cluster API Plugin: Declarative Cluster Lifecycle Finally Gets the UI Kubernetes Dashboard Never Had
Headlamp's June 2026 Cluster API plugin brings clusters, machines, and rollout state into a maintained browser UI just as the Kubernetes Dashboard goes dark — here is what it ships, how to try it, and where it still stops short.
Hetzner DNS Makes the RRSet TTL Required on September 30: Audit Your DNS Automation Before Updates Start Failing
On September 30, 2026, Hetzner starts rejecting RRSet TTL updates that omit the ttl field. Here is which callers are already safe, which break, and a 20-minute audit to prove your DNS automation is compliant before the cutoff.
KEP-5677: Tell Tenants 'No GPU Left' Up Front Instead of Parking Their Pods in Pending
Kubernetes 1.37's second alpha of KEP-5677 turns GPU availability into a readable API object. Here is how a self-hosted PaaS turns that per-pool snapshot into a tenant-facing capacity page and a fast admission-time refusal instead of pods stuck in Pending.
Your API Server Still Proxies Every kubectl exec in 1.36: What ExtendWebSocketsToKubelet Really Moves and the 4 Checks Before You Upgrade
Kubernetes 1.36 did not cut the API server out of the exec path — it turned it into a pass-through proxy. What really moved to the kubelet, the RBAC change that actually matters, and four checks to run before you upgrade.
Kubernetes Shipped a Sandbox API for AI Agents: What a Declarative Singleton-Workload Primitive Means for a Deploy-From-Chat PaaS
SIG Apps' Agent Sandbox CRD collapses the hand-rolled StatefulSet-plus-Service-plus-PVC stack into one declarative resource for stateful AI agent runtimes. Here is how the four CRDs work, what the gVisor-vs-Kata choice costs, and which parts a self-hosted platform should adopt now.
Northflank vs Owning the Stack: What the 'Cloud-Native Coolify Alternative' Really Costs
Northflank pitches managed CI/CD, hosting, and databases as the cloud-native Coolify alternative. Pricing a typical small stack four ways shows $146 on Northflank Cloud against $33 for an owned Cluster API fleet — plus what the markup genuinely buys.
Six Coding Agents on a Private Network: Threat-Model the Credential Blast Radius Before You Copy Railway's Sandbox
Railway's June 2026 sandboxes preinstall six coding agents with private-network reach to production data. Four Kubernetes controls — per-session identities, default-deny egress, approval-gated mutations, and auditable teardown — keep the convenience without the nine-second-wipe blast radius.
Your Pod Can Now Evict Its Neighbors to Grow: Scheduler Preemption for In-Place Resize Goes Alpha in Kubernetes v1.37
Kubernetes v1.37's alpha resize preemption lets the scheduler evict lower-priority pods so a growing pod completes its in-place scale-up instead of stalling in Deferred. Here is how the lifecycle works, a ten-minute kind reproduction, and the PriorityClass policy a self-hosted PaaS needs before trusting it.
Running Your First StorageVersionMigration: What Kubernetes v1.37's GA Migration API Changes in Your Cluster API Upgrade Runbook
Kubernetes v1.37 turned storage version migration into a stable, always-on API. Here is how to run your first migration — Secrets re-encryption, CRD version collapse, and per-resource status checks — and where it slots into a Cluster API fleet's upgrade runbook.