Engineering
How Radar works under the hood - Kubernetes internals, informers, topology, and the engineering behind the product.

Finding PHP2Shell in Kubernetes, Including the PHP Trivy Can't See
PHP2Shell is fixed in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12. How to find the Pods still running an older PHP with Radar, including images built on the official php image, where Trivy reports no PHP at all.

New in Radar: Complete CloudNativePG Operations
Radar now runs CloudNativePG day-2 work: which Postgres cluster needs attention, whether you could restore it, and switchover, fencing and restore that you review first.

Kubernetes Rightsizing: Which Requests to Change, and When Not To
How to right-size Kubernetes CPU and memory requests with Prometheus, and when HPA, OOMKills, bursty usage or throttling should stop a reduction.

Give Your Agent Context Before You Buy an AI SRE
We ran the same agent and model on 50 live Kubernetes faults. With read-only cluster context it reached the answer about three times faster, and was slightly more accurate. Here's what it did without that context, and how to run the same test before you buy an AI SRE.

Kubernetes 1.34 End of Life: What Actually Happens on EKS, GKE, and AKS
Kubernetes 1.34 reaches end of life on October 27, 2026. What that date and the EKS, GKE, and AKS deadlines around it actually do to your clusters, and what to check.

Karpenter Troubleshooting: Pending Pods, Failed Launches, and Nodes That Never Join
A field guide to Karpenter failures: pending pods, LaunchFailed, VCPULimitExceeded, NodeRegistrationHealthy, and DisruptionBlocked - what each one means and where the evidence lives.

Kubernetes 1.37 Breaking Changes: What to Check Before You Upgrade
Kubernetes 1.37 removes 25 feature gates, an alpha scheduling API, and 18 kubelet flags, and starts the nftables transition. What breaks, and how to check your cluster.

Everything Is Green and Nothing Works: Network Reachability in Radar
Pods Ready, Service green, curl times out. Radar's Reachability tab traces the declared network path and live-probes it, naming the first hop that breaks.

Kubernetes Events Expire in an Hour. Your Incidents Don't.
Kubernetes events expire after one hour by default, and many of the changes that cause incidents never become events at all. How to keep history that survives.

Read-Only Is Not a Safety Boundary
Two sentences get said in every meeting where a team wires an AI agent into a cluster: it's read-only, and just use the service account. Both are wrong later.

Radar MCP vs kubectl: A Kubernetes Agent Benchmark on 50 Faults
The same model diagnosed 50 live Kubernetes faults 3x faster on average through Radar's MCP server than through raw kubectl, with slightly higher accuracy. What we measured, why it happens, and where Radar still loses.

MCP for Kubernetes: Live Cluster Context for AI Tools
Pointing an AI at raw kubectl works, badly. Radar's built-in MCP server gives Claude, Cursor, and friends a token-optimized, RBAC-aware view of your cluster.

Why Radar Cloud Doesn't Cache Your Cluster State
Most multi-cluster dashboards copy your cluster state into a backend cache. Radar Cloud doesn't. Here's why the reverse-proxy model is the right call.

Radar's In-Cluster Architecture: Outbound-Only, Scoped, Live by Default
How Radar's in-cluster install works: outbound-only TLS, read-only RBAC by default, ~32MB RSS. The five questions every platform team asks, answered.

Five Questions You Can't Answer With kubectl
kubectl hands you one object at a time, as raw YAML. Here are five questions - relationships, isolation, image contents, history, posture - where that runs out of road.

Cluster Audit: The 31 Checks That Catch What You Forgot
Most clusters fail the same checks. Radar's built-in audit runs 31 of them inline against your live state. Inspired by Polaris and the NSA / CISA hardening guide.
Bring your first cluster online in 60 seconds.
Install the Helm chart, paste a token, and Radar Cloud starts watching. No credit card required.
Apache 2.0 OSS · Unlimited clusters with Radar OSS · Hosted free tier for up to 3 clusters