Blog

The Open Source Technology Improvement Fund is proud to share the results of our security audit of CRI-O. CRI-O is an implementation of the Kubernetes Container Runtime Interface (CRI) that is OCI-compliant (-O) that provides the...

2025 brought significant developments in the cloud native landscape, with a strong focus on AI but new projects and end user reports in many other areas. As always, KubeCon is one of the key places we...

This Ambassador Blog was originally published on the writer’s blog and is republished here with permission. In the ever-evolving world of technology, few pairings have sparked as much innovation as the intersection of artificial intelligence (AI)...

If you’ve ever debugged a production incident, you know that the hardest part often isn’t the fix, it’s finding where to begin. Most on-call engineers end up spending hours piecing together clues, fighting time pressure, and...

At STCLab, we operate high-traffic SaaS platforms that require real-time traffic control and bot mitigation. . Handling millions of concurrent connections and identifying malicious bots in real-time requires exceptional infrastructure stability. To achieve this, we rely...

Harbor is an indispensable open-source container image registry, offering robust features like policy-driven security, role-based access control, vulnerability scanning, image signing, image replication and distribution. Deploying Harbor is a common and critical step for organizations looking...

Remote sensing in agriculture requires complex systems that are able to communicate with various external devices like GPS and cameras, and use machine learning and AI inference to provide insights to the grower regarding their orchard,...

It’s time to recap the key Kubernetes security highlights from 2025 and outline features likely to graduate to stable in early 2026. From a DevSecOps perspective, 2025 brought several meaningful security improvements that directly influenced day-2...

Recent industry developments, such as Amazon’s announcement of the new EKS capabilities, highlight a trend toward supporting platforms with managed GitOps, cloud resource operators, and composition tooling. In particular, the involvement of Kube Resource Orchestrator (kro)—a...

Ambassador post originally published on Medium by Dotan Horovits Microservices have been with us for nearly two decades, but it’s still far from easy to develop at scale, in a polyglot environment. The Dapr project, the...

Attending OpenSearchCon, OpenSSF Day, and the Open Source Summit in Seoul was a truly memorable experience, especially because this was the first-ever Open Source Summit hosted in South Korea.  I have previously attended two KubeCons in...

In the evolving landscape of application deployment, containerization with Kubernetes (K8s) has become the new standard. As organizations adopt Kubernetes at scale, public image registries often bring new challenges, from rate limits and escalating costs to...

KubeCon + CloudNativeCon North America 2025 lit up Atlanta from November 10–13, bringing together one of the largest gatherings of open-source practitioners, platform engineers, and maintainers across the cloud native ecosystem. For the Istio community, the...

This Member Blog was originally published on the Middleware blog and is republished here with permission. kubectl is the command-line interface for managing Kubernetes clusters. It allows you to manage pods, deployments, and other resources from...

A set of high-severity vulnerabilities in runc were publicly disclosed in November 2025, allowing for full container breakouts. Runc is the cornerstone of containerization on Linux, serving as the default low-level container runtime for industry-standard tools...

Building and running modern applications begins with selecting Kubernetes distribution as a baseline. Once a platform team has selected its orchestration layer, one of the next architectural choices involves the deployment architecture where that cluster will...

Kubernetes has transformed how modern organizations deploy and operate scalable infrastructure, and the hype around automated cloud native orchestration has made its adoption nearly ubiquitous over the past 10+ years. Yet behind the scenes, most teams...

Ambassador post originally published on Medium by Dotan Horovits “Cloud Native Computing Foundation (CNCF) is a new open standardization initiative recently formed under the Linux Foundation with the mission of providing standard reference architecture for cloud native applications...

Network policy changes are among the most frequent operations in a Kubernetes cluster. They are also among the most delicate, as even a small mistake can lead to widespread traffic disruption. This tutorial walks through several...

When people talk about cloud-native observability, the conversation usually revolves around applications, containers, and microservices. However, under those layers lies an equally critical foundation: The physical data center. Servers, storage systems, and networks ultimately host every...