Radar blog

Engineering

How Radar works under the hood - Kubernetes internals, informers, topology, and the engineering behind the product.

Finding PHP2Shell in Kubernetes, Including the PHP Trivy Can't See
EngineeringOctober 22, 2026

Finding PHP2Shell in Kubernetes, Including the PHP Trivy Can't See

PHP2Shell is fixed in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12. How to find the Pods still running an older PHP with Radar, including images built on the official php image, where Trivy reports no PHP at all.

Roy Libman 10 min read
New in Radar: Complete CloudNativePG Operations
EngineeringOctober 21, 2026

New in Radar: Complete CloudNativePG Operations

Radar now runs CloudNativePG day-2 work: which Postgres cluster needs attention, whether you could restore it, and switchover, fencing and restore that you review first.

Nadav Erell 8 min read
Kubernetes Rightsizing: Which Requests to Change, and When Not To
EngineeringOctober 14, 2026

Kubernetes Rightsizing: Which Requests to Change, and When Not To

How to right-size Kubernetes CPU and memory requests with Prometheus, and when HPA, OOMKills, bursty usage or throttling should stop a reduction.

Eyal Dulberg 13 min read
Give Your Agent Context Before You Buy an AI SRE
EngineeringOctober 6, 2026

Give Your Agent Context Before You Buy an AI SRE

We ran the same agent and model on 50 live Kubernetes faults. With read-only cluster context it reached the answer about three times faster, and was slightly more accurate. Here's what it did without that context, and how to run the same test before you buy an AI SRE.

Roy Libman 9 min read
Kubernetes 1.34 End of Life: What Actually Happens on EKS, GKE, and AKS
EngineeringSeptember 29, 2026

Kubernetes 1.34 End of Life: What Actually Happens on EKS, GKE, and AKS

Kubernetes 1.34 reaches end of life on October 27, 2026. What that date and the EKS, GKE, and AKS deadlines around it actually do to your clusters, and what to check.

Nadav Erell 12 min read
Karpenter Troubleshooting: Pending Pods, Failed Launches, and Nodes That Never Join
EngineeringSeptember 5, 2026

Karpenter Troubleshooting: Pending Pods, Failed Launches, and Nodes That Never Join

A field guide to Karpenter failures: pending pods, LaunchFailed, VCPULimitExceeded, NodeRegistrationHealthy, and DisruptionBlocked - what each one means and where the evidence lives.

Eyal Dulberg 12 min read
Kubernetes 1.37 Breaking Changes: What to Check Before You Upgrade
EngineeringAugust 26, 2026

Kubernetes 1.37 Breaking Changes: What to Check Before You Upgrade

Kubernetes 1.37 removes 25 feature gates, an alpha scheduling API, and 18 kubelet flags, and starts the nftables transition. What breaks, and how to check your cluster.

Eyal Dulberg 12 min read
Everything Is Green and Nothing Works: Network Reachability in Radar
EngineeringAugust 12, 2026

Everything Is Green and Nothing Works: Network Reachability in Radar

Pods Ready, Service green, curl times out. Radar's Reachability tab traces the declared network path and live-probes it, naming the first hop that breaks.

Eyal Dulberg 9 min read
Kubernetes Events Expire in an Hour. Your Incidents Don't.
EngineeringAugust 1, 2026

Kubernetes Events Expire in an Hour. Your Incidents Don't.

Kubernetes events expire after one hour by default, and many of the changes that cause incidents never become events at all. How to keep history that survives.

Eyal Dulberg 12 min read
Read-Only Is Not a Safety Boundary
EngineeringJuly 28, 2026

Read-Only Is Not a Safety Boundary

Two sentences get said in every meeting where a team wires an AI agent into a cluster: it's read-only, and just use the service account. Both are wrong later.

Eyal Dulberg 11 min read
Radar MCP vs kubectl: A Kubernetes Agent Benchmark on 50 Faults
EngineeringJuly 20, 2026

Radar MCP vs kubectl: A Kubernetes Agent Benchmark on 50 Faults

The same model diagnosed 50 live Kubernetes faults 3x faster on average through Radar's MCP server than through raw kubectl, with slightly higher accuracy. What we measured, why it happens, and where Radar still loses.

Nadav Erell 9 min read
MCP for Kubernetes: Live Cluster Context for AI Tools
EngineeringJuly 10, 2026

MCP for Kubernetes: Live Cluster Context for AI Tools

Pointing an AI at raw kubectl works, badly. Radar's built-in MCP server gives Claude, Cursor, and friends a token-optimized, RBAC-aware view of your cluster.

Roy Libman 7 min read
Why Radar Cloud Doesn't Cache Your Cluster State
EngineeringJune 6, 2026

Why Radar Cloud Doesn't Cache Your Cluster State

Most multi-cluster dashboards copy your cluster state into a backend cache. Radar Cloud doesn't. Here's why the reverse-proxy model is the right call.

Eyal Dulberg 6 min read
Radar's In-Cluster Architecture: Outbound-Only, Scoped, Live by Default
EngineeringJune 4, 2026

Radar's In-Cluster Architecture: Outbound-Only, Scoped, Live by Default

How Radar's in-cluster install works: outbound-only TLS, read-only RBAC by default, ~32MB RSS. The five questions every platform team asks, answered.

Eyal Dulberg 10 min read
Five Questions You Can't Answer With kubectl
EngineeringMay 1, 2026

Five Questions You Can't Answer With kubectl

kubectl hands you one object at a time, as raw YAML. Here are five questions - relationships, isolation, image contents, history, posture - where that runs out of road.

Nadav Erell 9 min read
Cluster Audit: The 31 Checks That Catch What You Forgot
EngineeringApril 23, 2026

Cluster Audit: The 31 Checks That Catch What You Forgot

Most clusters fail the same checks. Radar's built-in audit runs 31 of them inline against your live state. Inspired by Polaris and the NSA / CISA hardening guide.

Eyal Dulberg 6 min read

Bring your first cluster online in 60 seconds.

Install the Helm chart, paste a token, and Radar Cloud starts watching. No credit card required.

Apache 2.0 OSS · Unlimited clusters with Radar OSS · Hosted free tier for up to 3 clusters