1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives

You Can't Debug What You Can't See: The Agent Audit Trail Your PaaS Needs Before Agents Get Prod Access
CNCF's August 2026 field report says agents don't crash with stack traces — they loop, hallucinate, and burn tokens while dashboards stay green. The three pillars that make agent failures reconstructible, and the six-column audit blueprint to require before any agent touches production.

CAPH Stopped Checking Your Server Type: What Hetzner's Hardware Churn Teaches About Pinning Machine Templates
CAPH v1.0.7 deleted its hardcoded server-type allowlist after Hetzner's October 2025 lineup rework retired types like cx22. A typo'd or retired type now passes kubectl apply and fails later at Hetzner's API — here is the four-part CI discipline that replaces the deleted guardrail.

Cloud Native Buildpacks Just Graduated: Why Your PaaS Build Step Shouldn't Belong to One Vendor
Cloud Native Buildpacks graduated in August 2026 with 535 contributors and 20+ production adopters. Graduation makes CNB the boring, multi-vendor foundation for a fleet's build step — just as Nixpacks' maintenance mode shows what single-vendor builders cost — but build speed still has to be earned with cache locality.

Cloudflare Sandboxes Are GA: Active-CPU Billing vs E2B/Daytona, Repriced Line by Line
Cloudflare's GA Sandbox pricing bills CPU only while it burns and memory while the container stays awake. We run 30,000 bursty agent sessions through the rate card against E2B, Daytona, and Modal, find the break-even near 62% CPU-active, and name what the math can't change: it only runs on Cloudflare.

Your APM Says the Deploy Was Green. The Agent Retried the Migration Three Times
An agent can return HTTP 200 with zero errors while looping, misusing tools, or producing confident nonsense. This is what an OpenTelemetry run trace of an agent-operated deploy actually looks like — and the five telemetry emissions a platform has to produce natively before its first agent-run rollout.

Freeze the Crash: How CRIU Container Checkpoints Turn a Crash-Looping Pod Into a Debuggable Core Dump
One kubelet API call freezes a failing container into a tarball of memory, file descriptors, and process state. What the January 2026 Checkpoint/Restore Working Group means, the exact checkpoint-debug-restore loop, and the four boundaries — TCP sockets, GPUs, sandboxed runtimes, pod-level restore — that still say no.

Your Controller Makes 11 API Calls, Then Goes Quiet: What the controller-runtime Cache Costs a Cluster API Fleet at Scale
A controller-runtime controller's API reads cost almost nothing after startup — one snapshot plus one watch per type. The bill comes due in memory and restart bursts instead: how the Reflector/Indexer pipeline works, the three cache mistakes everyone makes, and a 50/200/500-Machine sizing table for Cluster API fleets.

Daytona Went Closed-Source: What 'Self-Hostable' Means Now That the Control Plane Is Private
Daytona moved its core to a private codebase in June 2026, freezing the public repo at v0.190.0. A before/after accounting of what self-hosting still covers, a five-question checklist for any vendor's claim, and how E2B, Modal, Beam, Microsandbox, and the Nightona fork score.

Daytona's $3.95/hr H100 vs Owning the Card: The Breakeven Math for GPU Agent Sandboxes
Daytona rents H100 sandbox hours for $3.95 while an RTX 5090 costs $4,700 on the street. A worked rent-vs-own comparison across three usage levels pinpoints the ~50-hour monthly breakeven — plus the Docker-default isolation catch.