Our Blog & Insights

Three releases a year, 14 months of patches, and a 6x cluster fee when you lapse. How to turn Kubernetes upgrades from a dreaded project into a routine.

Three weeks ago we called CVE scanners a layer-seven answer for teams who skipped the layer-one work. Then we shipped one. Here is why that is not a contradiction, and what a vulnerability finding has to become before it is worth anything.

Kubermatic KKP is an open source factory for manufacturing Kubernetes clusters at density, and you are the one who runs the factory. Ankra is the platform your team does not have to operate. An honest comparison from a fellow European vendor.

A new name, a new engine, and the biggest release we have ever shipped: the Go rewrite, an AI that owns the incident loop, passkey security, European multi-cloud, and Ankra on your phone.

Half of all clusters are running an ingress controller that stopped receiving security patches in March. Meanwhile, teams debate service meshes. The five findings that show up in every real cluster security review, each with the incident that proves it and the fix.

Every GitOps rollout stalls on one question: where do the secrets go? A practical guide to SOPS and AGE encryption in Ankra, so credentials live in Git safely and AI-generated config never leaks a key.

On June 15, Hetzner raised cloud prices, with some instance families more than doubling. A worked-numbers look at what a production Kubernetes cluster costs now, and why the real lesson is portability, not provider loyalty.

Spectro Cloud's Palette is a serious enterprise platform for provisioning Kubernetes estates from the OS up. Ankra is an AI-native platform for running everything that happens on Kubernetes from the app down. The honest comparison, including when Palette is the right call.

New Ankra clusters no longer run ArgoCD. Here is the engineering story of the native deployment engine: why we built it, how the reconcile loop works, what the migration does to your live resources (nothing), and what we have not finished yet.

Prometheus is the right first monitoring stack for almost everyone, and the wrong last one for a growing minority. An honest comparison of the two, the cardinality wall that forces the question, and how to run either (or both) on Ankra.