1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives
Hetzner Killed the datacenter Field: Is Your CAPH Fleet's CCM Still Reading It?
Hetzner quietly deprecated the datacenter field on Servers and Primary IPs, and any hcloud-cloud-controller-manager older than v1.30.1 panics once it disappears. Here's the exact check, the exact failure mode, and the upgrade path for a Cluster-API-provider-Hetzner fleet.
Ingress-NGINX Is Retiring: What Migrating a Self-Hosted PaaS's Custom-Domain Routing to Gateway API Actually Involves
Ingress-NGINX retires in March 2026 and Ingress2Gateway hit 1.0 in March too. Here's the concrete before/after — manifests, an annotation-by-annotation translation table, and an ordered checklist — for moving a multi-tenant PaaS's per-tenant custom-domain routing to Gateway API.
Ingress2Gateway 1.0 vs. a Real Ingress-NGINX Annotation Set: What Actually Translates
We ran Ingress2Gateway 1.0 against a realistic ingress-nginx annotation set from a Cluster-API-managed fleet: four annotations translated cleanly, four landed on non-portable extension CRDs, and two had no Gateway API equivalent at all.
Kaniko Is Dead: Google Quietly Archived It in June 2025 — What Rootless BuildKit Means for a Git-Push PaaS's Image-Build Path
Google archived Kaniko in June 2025 with no successor named. Here's why rootless BuildKit is the closest maintained replacement for daemonless, unprivileged Kubernetes image builds — and the caching, security, and kernel details a git-push PaaS has to re-verify before migrating.
KEDA's Scale-to-Zero: What It Actually Buys a Self-Hosted PaaS Billing Tenants for Idle Containers
A dormant tenant app held at a minimum of one replica costs real money — on Railway's metered pricing, about $30/month for a 1 vCPU/1GB container that serves zero requests. Here's what wiring KEDA's true scale-to-zero into a Cluster API fleet actually changes, in dollars and in cold-start seconds.
Kelos Turns Autonomous Coding Agents Into Kubernetes CRDs
Kelos turns an AI coding agent's entire working context into four Kubernetes CRDs you can kubectl get and git-revert. Here's what each primitive actually does, and the concrete case for treating it as a reference architecture rather than a dependency.
Kubernetes 1.36's Declarative Validation Went GA — But Not for the CRDs Your Agent Actually Writes To
Kubernetes 1.36 graduated Declarative Validation to GA — for built-in types only. The CEL rules that actually govern your CRDs have been GA since 1.29. Here's the real timeline, a worked example from Cluster API's own CRDs, and what it means for an agent generating manifests.
OCI VolumeSource Goes Stable in Kubernetes 1.36: Do You Still Need to Bake Large Assets Into Your App Image?
Kubernetes 1.36 made OCI VolumeSource stable, letting a Pod mount any OCI image as a read-only volume. Here's the honest before/after against a well-cached Dockerfile, a worked build-pipeline split, and what a self-hosted platform must verify before offering it to tenants.
Kubernetes Quietly Corrected Three 'Fixed' CVEs That Were Never Patched — What That Means for Your Cluster's Threat Model
Kubernetes just admitted three CVE records carried a fake 'fixed' field for years — a concrete look at what the correction reveals about trusting scanner output, and the version-pinned scanning check a Cluster-API fleet needs instead.