Articles by Sylvain
ExplanationOpenstackOperations
OpenStack Hibiscus (2026.2): What Changes for Production
A technical analysis of OpenStack Hibiscus (2026.2), covering confidential computing, compute, networking, storage, bare metal, security defaults, API compatibility, and production upgrade considerations.
ExplanationOpenstackOperations
Modern OpenStack Architecture: Why Day-2 Ops Changed
Still think OpenStack is an operational nightmare? Discover how containerized control planes, OVN, and Kubernetes operators made private clouds low-touch.
Company News
From Munich to Provence: Supporting the First Kubernetes Community Days Provence
A chance meeting with organizer Henrik Rexed at Cloud Native Summit Munich 2026 led to a new community partnership. ape factory is proud to sponsor the inaugural Kubernetes Community Days Aix-en-Provence.
ExplanationKubernetesOperations
Kubernetes 1.37 (Garhwal): Production-Focused Reliability, Scheduling, and Resource Management
Explore Kubernetes 1.37: key features, deprecations and operational changes, with practical considerations for your next cluster upgrade.
ExplanationAIAI Security
The Agentic Security Myth: Exploits, OWASP, and Open-Source Defense
How agentic AI systems reopen classic security failure modes through prompt injection, tool poisoning, RAG poisoning, and excessive agency—and how deterministic open-source controls can contain them.
Company News
Cloud Native Summit Munich 2026: Technology, Community, and What Comes Next
Our look back at Cloud Native Summit Munich 2026: cloud-native engineering, AI infrastructure, platform engineering, digital sovereignty, and the people who make the community thrive.
ExplanationKubernetesGateway API
Linkerd’s Gateway API Paradox: Mesh Control Without an Ingress Gateway
Discover how Linkerd implements Kubernetes Gateway API for internal L7 mesh routing without shipping a heavy edge ingress controller.
How-to GuideKubernetesGateway API
Istio Gateway API: Deleting Legacy VirtualService Debt
Stop building custom tech debt with legacy Istio routing. Learn how to configure decoupled cross-namespace ingress using the standard Gateway API.
ExplanationKubernetesGateway API
Cilium Gateway API: The eBPF and Envoy Reality Pass
Stop falling for the marketing hype. Learn how Cilium Gateway API handles L7 routing via Envoy and why your ingress network policies might be broken.
ExplanationKubernetesGateway API
The Ultimate Gateway API Provider Comparison: Cutting Through the Marketing Fluff
Stop digging through vendor marketing fluff. We break down the real architectural tradeoffs, licensing, and conformance of Envoy Gateway, Traefik, NGINX Fabric, Istio, Linkerd, Cilium, and kgateway.
ExplanationKubernetesGateway API
The Post-Ingress Era: Why the Kubernetes Gateway API is Taking Over
With ingress-nginx officially retired, platform engineers are migrating to the Kubernetes Gateway API. Discover why the legacy Ingress model broke and how role-oriented routing eliminates annotation hell.
ExplanationAIAI Gateways
The Next Frontier: Elevating Gateway API to Handle LLMs, MCP, and AI Agents
Discover how the Kubernetes Gateway API standard extends to govern AI workloads. Learn to secure Model Context Protocol (MCP) tool calls using agentgateway and Cedar policies.