1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own

Karpenter on Bare Metal Is Not Magic: The Supply Chain Behind a NodeClaim
A NodeClaim can choose capacity; only an automatable machine supply can deliver it. Follow a realistic burst from pending Pod to Ready bare-metal worker.

CVE-2026-35469: Audit SPDY Exposure in Your Self-Hosted Kubernetes Fleet
CVE-2026-35469 affects a SPDY dependency, not a single Kubernetes version. Use this practical audit to identify reachable parsers, verify vendor fixes, and roll self-hosted nodes safely.

MCP Calls the Control Plane; A2A Coordinates the Investigation
A concrete design for using MCP for audited PaaS actions and A2A for agent-to-agent deployment investigations without sharing a blanket infrastructure token.

Porter's 0.01-vCPU Promise Meets the BYOC Cost Floor
Porter bills requested CPU and RAM inside your cloud account, but a BYOC cluster still has a fixed cost. A three-way example shows where granular requests help, where hosted tiers win, and how ownership changes the bill.

SpinKube on an Existing Kubernetes Fleet: One More RuntimeClass, Not a Parallel Platform
Add Spin WebAssembly workloads to an existing Kubernetes fleet with a containerd shim and RuntimeClass—without adding a second scheduler or parallel platform.

Statewave Makes Agent Memory Reproducible: A Self-Hosted Alternative to Mem0 and Zep
Statewave compiles provenance-tagged agent context on Postgres. Here is how its model differs from Mem0 and Zep—and how to deploy it without putting memory in a PaaS control plane.

Three Stages of Self-Hosting: The Operational Checklist for Moving Beyond One Server
Use four operational signals—downtime ownership, restore drills, deploy concurrency, and node replacement—to decide when a one-server PaaS should grow into a fleet.

Kubernetes v1.36 Deprecated Service ExternalIPs: A Bare-Metal PaaS Migration Plan Before v1.40
Kubernetes v1.36 deprecated Service externalIPs ahead of planned kube-proxy disablement in v1.40. Use this migration plan to replace insecure tenant-selected addresses with MetalLB, Gateway API, controlled routing, and tested rollback.

Four npm Compromises in 77 Days: A Build-Sandbox Blueprint for Self-Hosted PaaS
Axios, node-ipc, Red Hat, and Mastra expose why lockfiles alone fail—and how isolated builds, denied egress, script policy, and SBOMs contain poisoned dependencies.