authentik
The first patch on 2026.8 is twenty-odd fixes and no new surface.
A side-by-side editorial comparison of ClouDNS and Kubernetes — release velocity, themes, recent moves, and the top alternatives to consider.
ClouDNS is grinding through direct registry accreditations one TLD batch at a time
Most of ClouDNS's feed is registry accreditation: .KYOTO, .OKINAWA, .IM and .ID in August, Google Registry's .APP/.DEV/.PAGE family in June, .TW and .ME, ten regional extensions in May. The stated benefit is consistent — working directly with a registry instead of through an intermediary yields better registration, renewal and transfer pricing. Between those, occasional platform work lands: HSTS management for FreeSSL, HTTPS and SVCB record support, sub-user 2FA.
Kubernetes v1.37 is closing the gaps operators used to patch with out-of-tree tools.
The v1.37 cycle is dominated by graduations that move work out of add-ons and into the control plane. Pod Certificates and ClusterTrustBundles put X.509 issuance in core, the Metrics API reached stable, and storage version migration is now GA and on by default in every cluster. The release announcement itself counted 67 enhancements, with scale-to-zero autoscaling as the other change with reach beyond the usual graduation churn. Alongside the release posts, the feed carries occasional explainers such as the KYAML pretty-printing guide.
Most of ClouDNS's feed is registry accreditation: .KYOTO, .OKINAWA, .IM and .ID in August, Google Registry's .APP/.DEV/.PAGE family in June, .TW and .ME, ten regional extensions in May. The stated benefit is consistent — working directly with a registry instead of through an intermediary yields better registration, renewal and transfer pricing. Between those, occasional platform work lands: HSTS management for FreeSSL, HTTPS and SVCB record support, sub-user 2FA.
The strategy is margin and coverage rather than capability — owning the registrar relationship for as many extensions as possible. The DNS platform itself changes slowly, with security-adjacent additions arriving every month or two.
Expect the accreditation run to continue through remaining regional and geographic TLDs, with platform releases staying incremental alongside it.
The v1.37 cycle is dominated by graduations that move work out of add-ons and into the control plane. Pod Certificates and ClusterTrustBundles put X.509 issuance in core, the Metrics API reached stable, and storage version migration is now GA and on by default in every cluster. The release announcement itself counted 67 enhancements, with scale-to-zero autoscaling as the other change with reach beyond the usual graduation churn. Alongside the release posts, the feed carries occasional explainers such as the KYAML pretty-printing guide.
The consistent direction is absorption: capabilities that clusters previously got from a sidecar, an operator or a shell script are becoming declarative APIs the control plane owns. Certificates, metrics and now storage migration all followed that path in a single cycle. The consequence for operators is fewer moving parts to install and more behaviour that is on by default, which shifts the risk from adoption to upgrade.
With three long-running components absorbed in one release, the next cycle should be about the defaults themselves — the graduated features arriving enabled rather than opt-in, as storage version migration just did.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with ClouDNS.
The first patch on 2026.8 is twenty-odd fixes and no new surface.
Alert rate limits stop being per-source and start being per-tenant, by query.
The essay series keeps running ahead of the products it describes.
Both lines patch on the same day, and the reverted JSONata upgrade finally sticks.
The 3.x line finally ships function: authenticated secret writes and render patches.
Folder-level RBAC lands, and approvals finally get a webhook to talk to.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Kubernetes.
Weaviate is chasing retrieval quality past the vector, into documents people actually store
arrow-rs backports correctness fixes to a maintenance branch, not just the next minor
ActiveMQ's first 6.3-only release ends the all-branches-at-once pattern and makes 6.3 the live line.
Z-Wave JS UI turns window coverings into first-class Home Assistant entities
Exoscale keeps SKS on the upstream release train while the platform play sits elsewhere
Aiven gives admins a kill switch for the AI clients now reading its control plane
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Kubernetes is currently shipping more aggressively (velocity 8.8 vs 5.0), with 2 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Kubernetes is currently shipping more aggressively (velocity 8.8 vs 5.0), with 2 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top ClouDNS alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "ClouDNS alternatives" section above for the current picks, or visit /alternatives/cloudns for the full list with editorial commentary on each.
Top Kubernetes alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Kubernetes alternatives" section above for the current picks, or visit /alternatives/kubernetes for the full list with editorial commentary on each.