Hosted control planes are presented as a cost optimization strategy. They are also a risk consolidation strategy. The industry treats these as separate conversations. One belongs to FinOps reports. The other belongs to architecture reviews. ...
Multi-cluster Kubernetes is often introduced as a solution to failure. In practice, it does something more subtle. It changes the shape of failure. Failures do not disappear. They stop being local, predictable, and contained. They become distributed, indirect, and delayed. The most dangerous part is not the failure itself. These failure modes share a pattern: they rarely appear in architecture diagrams, do not violate best practices, and only become visible under specific lifecycle events. ...
Observation: Multi-cluster architectures often assume isolation by design. In practice, shared platform layers, like identity, pipelines, registries and network, reintroduce coupling that cluster boundaries alone cannot contain (FN-0002). Implication: The effective topology is not the one in the architecture diagram. It is the one formed by accumulated dependencies around the platform. Part of the Field Notes series documenting operational patterns observed in real-world platform architectures.
Governance in multi-cluster Kubernetes is treated as a set of policies. Policies are not governance. The control system that propagates, enforces, and reports them is. Policies that are defined but not propagated, propagated but not enforced, or enforced but not reported back are documentation. The system has many ways to fail silently, and each silence accumulates as risk that becomes visible only during audits or incidents. Where Governance Fails Quietly Organizations operating multi-cluster Kubernetes fleets face a structural risk that is rarely discussed in architectural reviews: governance gaps that remain invisible until an audit fails or an incident escalates. ...