1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives
Gartner's 80%-by-2026 Platform Team Number Is Real. Here's the Golden-Path Math That Decides If It Was Worth It
Gartner's 80%-of-orgs-by-2026 platform-team prediction is on track, but the number that actually predicts a lead-time win is the golden path underneath it: 80%+ voluntary adoption with one, under 20% without.
Headlamp's Cluster API Plugin: Browser-Native Fleet Management Arrives for Clusters You Actually Own
Headlamp's new Cluster API plugin puts MachineDeployment and MachineSet reconciliation state in a browser tab instead of a kubectl session — a concrete before/after for anyone running a self-hosted fleet on owned hardware.
Hetzner's June 2026 Price Hike Doubled Some Instances — Here's the Recomputed Break-Even Against Render and Railway
Hetzner's June 15, 2026 adjustment raised CPX and CCX instances by up to 209% while CX and CAX barely moved. A line-by-line recompute of a web+worker+Postgres topology on post-hike Hetzner versus Render and Railway — and why picking the wrong instance family now costs as much as picking the wrong vendor.
ingress-nginx's EOL Didn't Stop CVE-2026-3288: What Patching a Dead Project Means for Your Routing Layer
ingress-nginx's official end of life didn't stop three RCE patches from landing in its final weeks and months after — here's the sourced timeline, a fleet-wide audit you can run today, and why the blast radius is worse on a self-hosted PaaS.
JADEPUFFER Ran a Full Ransomware Kill Chain With No Human Involved — What That Means for Agents That Deploy Your App
An AI agent ran an entire ransomware attack end to end with no human directing a single step. Here's what that kill chain means for any platform whose own agent can deploy or restart your infrastructure.
Karpenter's Alpha Cluster API Provider vs. Cluster Autoscaler: What Actually Autoscales an Owned-Hardware Kubernetes Fleet in 2026
A Hetzner-backed Cluster API fleet gets its node-ready time from Cluster API's own machine lifecycle, not from which autoscaler is asking — here's what Cluster Autoscaler, alpha Karpenter-for-CAPI, and vCluster's Auto Nodes each actually deliver today.
Kata Containers vs gVisor: A RuntimeClass Decision Framework for Multi-Tenant Kubernetes
runC's 2025-2026 escape vulnerabilities settled the question of whether untrusted multi-tenant workloads need stronger isolation. This is the decision framework for which one, per workload, actually pays off.
Kubernetes 1.36 Retires the Webhook for Tenant Defaulting — Here's the Before/After
Kubernetes 1.36 graduates MutatingAdmissionPolicy to stable, letting CEL expressions replace the tenant-defaulting webhook most self-hosted PaaS platforms hand-roll. Here's the before/after code, what operationally disappears, and where a hand-written webhook still wins.
Kubernetes Ships an Official Agent Sandbox Primitive: What It Actually Buys a Self-Hosted PaaS
Kubernetes SIG Apps shipped an upstream CRD for running untrusted AI-agent code safely — here's what it gives a Cluster API-based PaaS for free versus E2B, Daytona, and Modal, the real cost math, and what's still missing.