authentik
The first patch on 2026.8 is twenty-odd fixes and no new surface.
A side-by-side editorial comparison of Doppler and Kubernetes — release velocity, themes, recent moves, and the top alternatives to consider.
Doppler shipped an on-prem build — the secrets manager that only ran as SaaS now runs in your datacenter.
Monthly digests, each one a list, and the captured bodies cut off partway so only the opening items are legible. June leads with Doppler On-prem, alongside role filters on the dashboard, warnings that show downstream impact before deleting inherited or referenced data, and fuzzy matching in secret search. The months before it are steady platform work: Integration Access Scoping via API and Terraform, the ability to redact every historical version of a secret so deleted history is genuinely gone, Azure Service Principal rotated and dynamic secrets, activity-log forwarding to multiple destinations per service type including AWS SQS, and CLI token creation from the MCP server.
Kubernetes v1.37 is closing the gaps operators used to patch with out-of-tree tools.
The v1.37 cycle is dominated by graduations that move work out of add-ons and into the control plane. Pod Certificates and ClusterTrustBundles put X.509 issuance in core, the Metrics API reached stable, and storage version migration is now GA and on by default in every cluster. The release announcement itself counted 67 enhancements, with scale-to-zero autoscaling as the other change with reach beyond the usual graduation churn. Alongside the release posts, the feed carries occasional explainers such as the KYAML pretty-printing guide.
Monthly digests, each one a list, and the captured bodies cut off partway so only the opening items are legible. June leads with Doppler On-prem, alongside role filters on the dashboard, warnings that show downstream impact before deleting inherited or referenced data, and fuzzy matching in secret search. The months before it are steady platform work: Integration Access Scoping via API and Terraform, the ability to redact every historical version of a secret so deleted history is genuinely gone, Azure Service Principal rotated and dynamic secrets, activity-log forwarding to multiple destinations per service type including AWS SQS, and CLI token creation from the MCP server.
Two commitments run through this window. The first is that everything must be reachable programmatically — API and Terraform coverage for access scoping, Change Requests endpoints in the v3 API, service account identity management, MCP-driven CLI authentication. The second is control over the secret's whole lifecycle rather than its current value: rotation, dynamic generation, history redaction, and delete-time impact warnings all treat a secret as something with a past and dependents. On-prem is what those two make sellable to the customers who could not use Doppler at all.
Expect the on-prem build to drive the next stretch of work — parity gaps, upgrade paths, and air-gapped handling of the integrations that currently assume outbound access. The truncated digests make anything finer than that unreadable from the feed.
The v1.37 cycle is dominated by graduations that move work out of add-ons and into the control plane. Pod Certificates and ClusterTrustBundles put X.509 issuance in core, the Metrics API reached stable, and storage version migration is now GA and on by default in every cluster. The release announcement itself counted 67 enhancements, with scale-to-zero autoscaling as the other change with reach beyond the usual graduation churn. Alongside the release posts, the feed carries occasional explainers such as the KYAML pretty-printing guide.
The consistent direction is absorption: capabilities that clusters previously got from a sidecar, an operator or a shell script are becoming declarative APIs the control plane owns. Certificates, metrics and now storage migration all followed that path in a single cycle. The consequence for operators is fewer moving parts to install and more behaviour that is on by default, which shifts the risk from adoption to upgrade.
With three long-running components absorbed in one release, the next cycle should be about the defaults themselves — the graduated features arriving enabled rather than opt-in, as storage version migration just did.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Doppler.
The first patch on 2026.8 is twenty-odd fixes and no new surface.
Alert rate limits stop being per-source and start being per-tenant, by query.
The essay series keeps running ahead of the products it describes.
Both lines patch on the same day, and the reverted JSONata upgrade finally sticks.
The 3.x line finally ships function: authenticated secret writes and render patches.
Folder-level RBAC lands, and approvals finally get a webhook to talk to.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Tap any card for the full editorial trajectory or compare directly with Kubernetes.
Weaviate is chasing retrieval quality past the vector, into documents people actually store
arrow-rs backports correctness fixes to a maintenance branch, not just the next minor
ActiveMQ's first 6.3-only release ends the all-branches-at-once pattern and makes 6.3 the live line.
Z-Wave JS UI turns window coverings into first-class Home Assistant entities
Exoscale keeps SKS on the upstream release train while the platform play sits elsewhere
Aiven gives admins a kill switch for the AI clients now reading its control plane
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Kubernetes is currently shipping more aggressively (velocity 8.8 vs 0.0), with 2 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Kubernetes is currently shipping more aggressively (velocity 8.8 vs 0.0), with 2 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Doppler alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Doppler alternatives" section above for the current picks, or visit /alternatives/doppler for the full list with editorial commentary on each.
Top Kubernetes alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Kubernetes alternatives" section above for the current picks, or visit /alternatives/kubernetes for the full list with editorial commentary on each.