Authelia
Authelia ships weekly OIDC patches as v4.39 works through a long conformance backlog
Comparison · Infra & APIs
authentik vs Kubernetes
A side-by-side editorial comparison of authentik and Kubernetes — release velocity, themes, recent moves, and the top alternatives to consider.
authentik vs Kubernetes: at a glance
What is authentik?
Authentik 2026.8 ships Actors — programmable event hooks that turn it from a static identity provider into a runtime for auth logic.
Authentik is an open-source identity and access management platform on a monthly calendar-versioned release cycle. The 2026.8.0 release introduced Actors — event-driven code execution hooks in the auth flow, analogous to Auth0 Actions or Okta Hooks — and an authentik Agent for domain join scenarios. Three supported branches (2026.2.x, 2026.5.x, 2026.8.x) are receiving concurrent security and bug fix patches, reflecting an active enterprise user base running different versions.
What is Kubernetes?
Kubernetes v1.37 promotes gang scheduling to Beta, closing the gap with dedicated ML schedulers.
Kubernetes v1.37 is a systematic Beta-graduation release, pushing memory QoS, native histograms, changed block tracking, rootless kubelet, and workload-aware scheduling all out of Alpha in a single cycle. The release is most notable for elevating gang scheduling (PodGroup + Workload APIs) to Beta alongside shared DRA resource claims for PodGroups — directly addressing the fragmented, bolt-on tooling that AI/ML operators have relied on for distributed training jobs. HPA scale-to-zero is also now Beta by default, removing a common reason to reach for Keda or similar add-ons.
authentik vs Kubernetes: editorial side-by-side
authentik
6.3INFRA · APIS
Authentik 2026.8 ships Actors — programmable event hooks that turn it from a static identity provider into a runtime for auth logic.
◆ Current state
Authentik is an open-source identity and access management platform on a monthly calendar-versioned release cycle. The 2026.8.0 release introduced Actors — event-driven code execution hooks in the auth flow, analogous to Auth0 Actions or Okta Hooks — and an authentik Agent for domain join scenarios. Three supported branches (2026.2.x, 2026.5.x, 2026.8.x) are receiving concurrent security and bug fix patches, reflecting an active enterprise user base running different versions.
◆ Where it's heading
Actors is the directional move that matters in 2026.8: it repositions authentik from a configuration-driven identity provider toward a programmable auth runtime. Teams that previously needed custom LDAP flows or complex blueprints can now write Actors that fire on auth events — closer to the Auth0 model. The parallel development of an authentik Agent (documented in 2026.8.0-rc7) suggests the team is also targeting domain-joined enterprise device scenarios, which would expand the addressable market from web app auth into endpoint identity.
◆ Prediction
The next release cycle will likely expand Actor trigger types and add a marketplace or community library for common Actor patterns (e.g., risk-based auth, adaptive MFA). The Agent feature will mature with more domain join scenarios, positioning authentik as a self-hosted alternative to Microsoft Entra ID for organizations that want full sovereignty over their identity stack.
Kubernetes
7.5DEVOPSINFRA · APIS
Kubernetes v1.37 promotes gang scheduling to Beta, closing the gap with dedicated ML schedulers.
◆ Current state
Kubernetes v1.37 is a systematic Beta-graduation release, pushing memory QoS, native histograms, changed block tracking, rootless kubelet, and workload-aware scheduling all out of Alpha in a single cycle. The release is most notable for elevating gang scheduling (PodGroup + Workload APIs) to Beta alongside shared DRA resource claims for PodGroups — directly addressing the fragmented, bolt-on tooling that AI/ML operators have relied on for distributed training jobs. HPA scale-to-zero is also now Beta by default, removing a common reason to reach for Keda or similar add-ons.
◆ Where it's heading
v1.37 continues a deliberate Arc toward native AI/ML infrastructure. DRA Extended Resource support reached GA, gang scheduling Beta, and in-place pod resize acquired a preemption alpha — together they form a coherent stack for multi-tenant GPU clusters. The pattern is Beta-now, GA-next: workload-aware scheduling and CSI changed block tracking are positioned to reach GA in v1.38 or v1.39. Kubernetes is methodically absorbing capabilities that previously required third-party schedulers (Volcano, Ray) and backup tooling.
◆ Prediction
The next release will likely promote Workload-Aware Scheduling and DRA shared-resource claims to GA, given the two-release Beta pattern and the obvious demand signal from the AI infra space. Rootless kubelet reaching GA is also a near-term candidate.
authentik alternatives
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with authentik.
Redocly
Redocly ships full MCP server infrastructure—API docs are now directly AI-queryable
Jackett
Jackett ships daily indexer maintenance at a consistent one-release-per-day cadence.
Resend
Resend ships SSO and enters the enterprise conversation as its product surface broadens.
CircleCI
CircleCI ships an MCP server and auto-rollback deployments, moving well past pure CI.
GitHub
GitHub Copilot splits into cost tiers and deepens agentic automation across the dev stack
Kubernetes alternatives
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Kubernetes.
containerd
containerd 2.4.0-rc.0 removes checkpoint-restore-via-CreateContainer and flips user-namespace networking on by default
Z-Wave JS UI
Z-Wave JS UI tracks library updates steadily while adding Window Covering MQTT discovery
Sanity
Sanity ships daily MCP server patches while Studio 6.13 stabilizes post-feature-push
Rivet
Rivet positions its Actors runtime as the infrastructure layer for enterprise-ready, AI-native application deployment.
Manticore Search
Manticore 29.9 ships chunked multi-vector embeddings and mmap column access, closing gaps with dedicated vector DBs.
CodeRabbit
CodeRabbit adds team-level override permissions and a review metrics API, tightening its enterprise governance layer.
Recent activity from authentik and Kubernetes
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 21h agoKubernetesKubernetes Changed Block Tracking API - Beta Differences
- 21h agoKubernetesKubernetes v1.37: Memory QoS Graduates to Beta
- 3d agoKubernetesKubernetes v1.37: Native Histograms Graduates to Beta
- 4d agoKubernetesKubernetes v1.37: Scheduler Preemption for In-Place Pod Resize (Alpha)
- 5d agoauthentikauthentik 2026.8.2 patch release
- 5d agoauthentikauthentik 2026.5.7 backport patch
- 5d agoauthentikauthentik 2026.2.7: container image hardening backport
- 5d agoKubernetesKubernetes v1.37: Introducing Node Lifecycle Conditions
- 6d agoKubernetesKubernetes v1.37: Advancing Workload-Aware Scheduling ⚡
- 14d agoauthentikauthentik 2026.8.1 patch release
- 27d agoauthentikRelease 2026.8.0 ⚡
- 1mo agoauthentikauthentik 2026.8.0-rc7 pre-release
Frequently asked questions
What is the difference between authentik and Kubernetes?
They serve adjacent needs but don't currently overlap on shipped themes. Kubernetes is currently shipping more aggressively (velocity 7.5 vs 6.3), with 1 editorial sparks in the last 30 days against 1. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is authentik better than Kubernetes?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Kubernetes is currently shipping more aggressively (velocity 7.5 vs 6.3), with 1 editorial sparks in the last 30 days against 1. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to authentik?
Top authentik alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "authentik alternatives" section above for the current picks, or visit /alternatives/authentik for the full list with editorial commentary on each.
What are the best alternatives to Kubernetes?
Top Kubernetes alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Kubernetes alternatives" section above for the current picks, or visit /alternatives/kubernetes for the full list with editorial commentary on each.