1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives

Argo CD 3.5 Adds Internal mTLS and Commit Signing — Here's the Bar Your Own GitOps Reconciler Should Clear
A July 2026 unpatched Argo CD RCE proved the unauthenticated internal RPC problem was real. Here's what Argo CD 3.5's mutual TLS and commit-signing fix actually close, and why any git-to-cluster reconciler needs the same two guarantees from day one.

Building a Bex Golden Path in Backstage: A Working Software Template, Not a Wiki Page
A hands-on walkthrough of building a real Backstage Software Template — template.yaml, a custom scaffolder action, and the generated manifest — that scaffolds a service straight onto a self-hosted PaaS fleet, no wiki page required.

Broadcom's VMware Price Reset Hits 800-1,500%: What the 72-Core Minimum Actually Costs, by Fleet Size
Broadcom's VMware repricing produces increases from 31% to 2,000% depending on one variable: cores per host. Here's the math across four real fleet sizes, and the honest scope of what moving to bare-metal Kubernetes actually requires.

Buildpack Rebasing: Patching a Base-Image CVE Across Every Running Container in Seconds
A base-image CVE patched at the platform layer takes one command and seconds. The same fix on a Dockerfile-first platform means hundreds of tenants each rebuilding, pushing, and redeploying on their own schedule — here's the actual cost gap, with real numbers.

Buildpacks RFC 0131: What Build Observability Actually Requires Beyond a Streaming Log
RFC 0131 replaces build scrollback with queryable OpenTelemetry spans. Here's exactly what it specifies, where implementation actually stands, and what a Cluster API-managed kpack pipeline would need to expose the same data before the spec ships.

CircleCI Built a Second CI Pipeline Just for AI Agents — A Git-Push PaaS Already Has One
CircleCI built a whole second CI system — a microVM fleet, a CLI, three separate agent hook integrations — just to get test feedback back to an AI agent in under 60 seconds. A platform that already rebuilds on every git push was one exposed entrypoint away from the same thing.

Claude Code's Agents Now Push and Open PRs Unattended — Where Should Your Deploy Trigger Actually Bind?
Claude Code v2.1.198 shipped background agents that commit, push, and open a draft PR with no human in the loop. Here's the concrete trigger-point table for where a deploy pipeline should actually bind when the pusher might be an agent, plus the four-item audit checklist a self-hosted deploy-from-chat MCP server needs first.

Claude Code's Dynamic Workflows Cap Concurrency at 16, Not Hundreds: What a Real Subagent Burst Does to a Deploy MCP Server
Claude Code's Dynamic Workflows can fan out 1,000 subagents per run, but the runtime caps live concurrency at 16. Here's what that actual burst shape requires from an MCP server that exposes deploy and rollback.

Cloud Repatriation Hit 80%: What GEICO and 37signals' Numbers Actually Mean for a 10-Person Team
GEICO and 37signals both cut infrastructure costs 40-60% by repatriating off the cloud — a worked breakdown of whether that math holds up for a team a fraction of their size, not just the enterprise-scale headline.