1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives
Coolify Shipped an MCP Server. It Still Can't Deploy Your App.
Coolify's official MCP server is strictly read-only — the write-capable 'AI deploys your app' story everyone cites comes from a third-party wrapper holding your API token. Here's the concrete tool-by-tool split, why it matters, and where bex's own MCP server stands on the same line.
Coolify's MCP Server Ships Read-Only: Dokploy Beat It to AI-Driven Deploys, and Neither Can Answer 'Is My Fleet Healthy?'
Coolify's new MCP server can't deploy anything yet — it's 10 read-only tools. Dokploy shipped a write-capable one a month earlier. Here's what both still can't tell an AI agent about a multi-node fleet.
Coolify's v5 Rewrite Has No Public Timeline a Year In: What Betting on a Small-Team PaaS's Next-Gen Core Means for Production Users
Coolify's v5 rewrite promises cloud-like multi-server scaling, but its GitHub milestone sits at 0% completion a year after the first commit. Here's what the tracker actually shows and what it means if you're running production on Coolify today.
Crossplane vs Cluster API: What a Self-Hosted PaaS Actually Needs
Crossplane can turn any cloud resource into a Kubernetes API; Cluster API already does that for machines. A concrete comparison of what each buys a self-hosted PaaS, and whether bolting Crossplane onto Cluster API solves a problem that's already solved.
Crossplane vs. Cluster API: Two Bets on 'API-First Infrastructure' (and the One a Git-Push PaaS Should Make)
Crossplane and Cluster API both expose infrastructure as a Kubernetes API, but they bet on opposite things. Here's the concrete test for when a self-hosted PaaS needs Crossplane's generic composition engine, and when a hand-written CRD wins instead.
One DV Certificate Per Tenant Domain vs Wildcard TLS: The Multi-Tenant Pattern a Self-Hosted PaaS Actually Needs
Wildcard TLS stops covering anything the moment a tenant brings their own domain. Here's the concrete cert-manager and acme.sh architecture — bind-time issuance, renewal fan-out, and offboarding revocation — that replaces it, with the Let's Encrypt rate limits and 45-day certificate timeline that make it non-negotiable.
etcd v3.7's RangeStream Fixes a Decade-Old List-Watch Bug — But Not the One That Actually Broke Cluster API at Scale
etcd v3.7 ships RangeStream, a real fix for a decade-old memory-buffering bug in large list-watch reads. But Cluster API's own 300-cluster scale test shows the actual ceiling on a management cluster's etcd comes from somewhere else entirely.
Self-Hosted Kubernetes Installs Don't Stall on Kubernetes — They Stall on Your Registry, Network, and Approval Chain
Fairwinds' CTO named the real reason self-hosted Kubernetes installs drag on for months — and it's rarely Kubernetes. Here's what that means for any Cluster-API PaaS that might one day sell into a customer's own infrastructure.
Fly.io Kills GPUs on August 1, 2026: Where Do Your Agent Sandboxes Go Now?
Fly.io fully deprecates GPU Machines on July 31, 2026. Here's the duty-cycle cost breakdown across RunPod, Modal, and a self-hosted Hetzner GPU box for the teams whose agent sandboxes and fine-tuning jobs have to move.