Kubernetes vs HashiCorp
Side-by-side trajectory, velocity, and editorial themes.
etcd 3.7 lands RangeStream and drops the last of v2store as Headlamp becomes the cluster's UI
The Kubernetes ecosystem is advancing on two fronts at once: the core datastore and the operator-facing UI. etcd 3.7.0 shipped GA with RangeStream, a full switch to v3store-only bootstrap, and a protobuf overhaul that cuts control-plane CPU. In parallel, Headlamp — the sanctioned successor to the now-archived Kubernetes Dashboard — is accumulating a plugin layer (Cluster API, Volcano, Knative) that pulls specialized workflows into one visual interface.
The center of gravity is efficiency in the control plane and consolidation in tooling. etcd's removal of legacy v2store and its feature-gate lifecycle signal a deliberate cleanup that Kubernetes 1.37 will draw on via the EtcdRangeStream gate. Around it, the project is standardizing operator experience on Headlamp rather than a proliferation of one-off dashboards, and formalizing how AI-assisted contributions enter the codebase. This is maintenance-era maturity, not new surface area.
Expect Kubernetes 1.37 to expose RangeStream behind its feature gate and more SIG projects to ship Headlamp plugins as the default visual entry point. The v3.8 line will likely complete the v2store removal by dropping v2 snapshot generation and the --snapshot-count flag.
HashiCorp pushes an infrastructure graph and Boundary 1.0 while reorienting around AI-agent access
HashiCorp is layering two moves on top of its IaC and secrets core: a graph-based source of truth for sprawling multi-cloud estates, and a steady buildout of access control for AI agents. Boundary reached 1.0 with session recording, Vault and Boundary both shipped agent-security previews, and HCP gained SCIM provisioning. The through-line is governing who — and increasingly what — can touch infrastructure.
Terraform is being repositioned from provisioning tool to system-of-record via Infragraph, while Boundary and Vault extend privileged access from humans to autonomous agents. The AI-agent framing recurs across nearly every release, suggesting HashiCorp sees agent access as the next control-plane contest. Expect the graph and the access layer to knit into a single governance story.
Likely next: Infragraph moving from limited to general availability, and more concrete Vault and Boundary primitives for scoping and recording AI-agent sessions.
See more alternatives to Kubernetes →
See more alternatives to HashiCorp →