1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives
Render's Flex Plan Bills Background Jobs by the Second: The New Math vs. a Flat Hetzner Box
Render's September 1 flex plan bills Workflows task runs for actual CPU and RAM by the second. Three workload mixes priced both ways show where metered billing beats a €5.49 Hetzner box — and where the flat box wins by 8x.
No More AI API Keys in Env Vars: Reproducing Render's Short-Lived Anthropic and OpenAI Credentials on Your Own Kubernetes
Render's July 2026 Managed OIDC trades long-lived Anthropic and OpenAI API keys for short-lived tokens minted from platform identity — and the same exchange runs on any Kubernetes cluster via projected service-account tokens, issuer registration, and a JWKS upload. The concrete recipe plus what Render still operates for you.
Railway vs Render vs Fly.io vs a Flat Hetzner Box: The Cost Comparison Seenode's PaaS Framework Is Missing
Seenode's 2026 Heroku-alternatives framework maps Railway, Render, and Fly.io to workload shapes — but never prices them against flat owned hardware. Line-by-line math for one typical workload shows a Hetzner box at €8.49-57/month beating all three hosted bills, with the gap widening as egress grows.
Self-Hosted PaaS Showdown 2026: What Coolify, Dokploy, CapRover, and Deploynix Cost When You Need a Second Machine
Adding a second server costs about $12/month on Coolify, Dokploy, or CapRover and $24–$36 on Deploynix Starter — but every panel leaves your database on one disk. A mechanism-by-mechanism walkthrough of each tool's multi-server story and the four problems server two never fixes.
vCluster vs Signadot vs Full-Stack Copy: Which Preview-Environment Model Fits a Self-Hosted Fleet's Fixed Capacity?
Full-stack copy, virtual clusters, or request-level routing: a worked per-PR capacity comparison shows which preview-environment model fits a fixed self-hosted fleet, and why request-level isolation wins on owned hardware.
Vercel Hobby Is Free Until Your Side Project Earns a Dollar
Vercel's Hobby tier stays free only until your project earns its first dollar — then the non-commercial clause pushes you to $20/seat Pro. A worked first-revenue-year comparison against a flat Hetzner box, plus when staying is still the right call.
Gateway API 1.4 Stabilizes BackendTLSPolicy: Encrypting the Gateway-to-Pod Hop Without a Service Mesh
Gateway API 1.4 graduates BackendTLSPolicy to stable, giving shared clusters a portable way to encrypt gateway-to-Pod traffic with fail-closed validation — here is the complete YAML and the rollout checklist for multi-tenant platforms.
Backstage Hits CNCF 'Adopt': What Pairing a Software Catalog With an MCP Server Actually Takes
CNCF's Q1 2026 radar put Backstage in 'Adopt' while its agentic-enterprise commentary demands machine-consumable platform interfaces. The official MCP plugin, read-through sync, and four hard parts — auth, writes, refresh, drift — decide whether the pairing holds.
Buildpacks RFC 0130: Zero-Config OCI Provenance Your SOC 2 Auditor Can Actually Read
Cloud Native Buildpacks approved RFC 0130, stamping buildpack images with source, commit, and version metadata automatically. What that buys a SOC 2 or FedRAMP audit, what unsigned annotations can't prove, and the SBOM plus signed-attestation checklist that closes the gap.