1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives
Cloudflare R2 Was Down for 17 Hours in July 2026 — Here's What 'Zero Egress' Actually Costs When It Breaks
Cloudflare R2 returned 500 errors across three separate incidents in July 2026, blowing past its own 99.9% SLA by roughly 30x in one month. Here's the SLA math, a worked cost comparison against Hetzner-owned object storage, and the exact egress volume where R2's free-egress pricing actually starts winning.
Cloudflare Tunnel Is Now Fully Free — What Zero-Open-Ports Ingress Means for Your Self-Hosted PaaS
Cloudflare Tunnel is now free with unmetered bandwidth and unlimited tunnels — but an October 5, 2026 API change breaks anything scripted against its old routes. Here's what it buys a self-hosted PaaS's tenants, what it costs, and the migration checklist.
CloudNativePG's First CVE Is a 9.4: How Scraping Metrics Handed Out Postgres Superuser
CloudNativePG's first-ever CVE let a low-privileged database user escalate to PostgreSQL superuser and OS command execution through the default metrics exporter — the exploit chain, the fix, and the unrelated failover bug that shipped in the same release.
CloudNativePG's Snapshot PITR Can Restore a Multi-TB Postgres in Minutes — Hetzner's CSI Driver Still Can't Take the Snapshot
CloudNativePG's snapshot-based backup can restore a multi-terabyte Postgres cluster in minutes, but Hetzner's own CSI driver has never implemented volume snapshots. Here's what actually runs on Hetzner today — the Barman Cloud Plugin path — and when swapping in Piraeus/LINSTOR for snapshot support is worth the operational cost.
Cluster API v1.12: What Chained Upgrades Actually Save a Kubernetes Fleet That Fell Behind
Cluster API v1.12 adds in-place updates and chained upgrades — here's what collapsing three separate Kubernetes minor-version rollouts into one reconciliation pass actually saves a bare-metal Hetzner fleet that fell behind, and where the old drain-and-verify discipline still applies.
CNCF Buildpacks Graduation: What Reaching the Top Maturity Tier Actually Changes
Cloud Native Buildpacks reached CNCF's Graduated maturity level on July 17, 2026. Here's what the governance milestone actually verifies, what it doesn't change technically, and why it matters for a platform team betting its build layer on the spec.
CNCF's Composable-by-Design Rule: What It Actually Costs to Build a Swappable PaaS
CNCF says platforms should be built from swappable, API-first building blocks. Here's what that actually costs on day one versus a hardcoded platform, worked through two real architecture cases — one of them a GPU request a Cluster API-based PaaS wasn't built to handle.
Coinbase's Rollback Tool Broke Along With the Deploy It Was Supposed to Fix
A 50-minute Coinbase outage on July 14, 2026 got worse because the tool engineers needed to roll back the bad deploy was itself unreachable through the gateway the deploy had just broken. Here's the mechanism, and a concrete audit for whether a self-hosted PaaS's own control plane could hit the same trap.
Confidential Containers Reaches CNCF Incubation: What TEE-Attested Secrets Release Actually Costs a Self-Hosted PaaS
Confidential Containers just reached CNCF incubation, promising tenant code even the platform operator can't read. Here's what the TEE hardware, the Trustee attestation service, and the per-pod overhead actually cost to run on a self-hosted Hetzner fleet.