Staff Post
2024 year in review of CNCF and top 30 open source project velocity
By Chris Aniszczyk By consistently tracking open source project velocity, we are able to see the trends and technologies resonating with developers and end users. We have been tracking these trends since 2017; all previous blogs...
January 29, 2025
Found 2272 posts
Understanding Kubernetes Gateway API: A Modern Approach to Traffic Management
Traffic management in Kubernetes can be complex, especially with modern applications composed of multiple services like frontends, APIs, and backends spread across hybrid and multi-cloud environments. As these environments grow, ensuring secure, efficient, and reliable communication...
May 2, 2025
Staff Post
Protecting NATS and the integrity of open source: CNCF’s commitment to the community
Updated May 1, 2025: CNCF and Synadia have come to an agreement to ensure that NATS continues to thrive as a healthy open source project within CNCF, with Synadia’s continued support and involvement. Please see our...
May 1, 2025
CNCF and Synadia align on securing the future of the NATS.io project
CNCF and Synadia have come to an agreement to ensure that NATS continues to thrive as a healthy open source project within CNCF, with Synadia’s continued support and involvement. Please see our joint announcement for more...
May 1, 2025
Member Post
Enforcing Artifact Security with Trivy and OPA
In cloud-native development, ensuring the integrity and security of software artifacts (such as Docker images, Python wheels, and Helm charts) is a fundamental challenge. With the growing adoption of continuous integration and delivery pipelines, there’s a...
May 1, 2025 | Nigel Douglas, Cloudsmith
Kubestronaut Post
Kubestronaut in Orbit: Jana Vonšák
Get to know Jana We’re thrilled to recognize Jana Vonšák from Slovakia as our first-ever female Golden Kubestronaut. A dedicated DevOps Security Engineer with a background in software development, Jana brings a rare blend of development...
April 29, 2025
Announcing Vitess 22
The Vitess maintainers are happy to announce the release of version 22.0.0, along with version 2.15.0 of the Vitess Kubernetes Operator. This release is the first to benefit from a 6-month-long development cycle, after our recent...
April 29, 2025
Project Post
Open Source PaaS Cozystack Becomes a CNCF Sandbox Project
On February 28, members of the CNCF Technical Oversight Committee completed their voting and unanimously accepted Cozystack, a platform for building private clouds and PaaS, into the CNCF Sandbox. The project is currently undergoing the onboarding...
April 28, 2025
Project Post
Fluent Bit v4.0: Celebrating new features and 10th anniversary
The Fluent Bit maintainers have exciting news to share! Fluent Bit version 4 is out and just in time to celebrate the project’s 10-year anniversary. The journey: From embedded logging to multi-Signal observability With over 15...
April 25, 2025 | Paige Cruz, principal developer advocate, Chronosphere
Project Post
Building trust with OpenID Federation trust chain on Keycloak
OpenID Federation 1.0 provides a framework to build trust between a Relying Party and an OpenID Provider that have no direct relationship so that the Relying Party can send OIDC/OAuth requests to the OpenID Provider without being previously...
April 25, 2025 | Yutaka Obuchi, Hitachi, Ltd.
Project Post
LitmusChaos at KubeCon + CloudNativeCon Europe 2025: A Recap
The cloud native community recently converged in London from April 1 – 4, 2025, for an incredible edition of KubeCon + CloudNativeCon Europe. From our perspective at LitmusChaos, it was a week filled with inspiring sessions,...
April 25, 2025 | Sayan Mondal, Community Manager, LitmusChaos
Prepare your application landscape for zero trust with Keycloak 26.2
Strong identity and access management is a key component of a zero trust architecture for cloud native applications. Keycloak is well-known for its single-sign-on capabilities based on open standards. It provides you all the building blocks...
April 24, 2025 | Alexander Schwartz, Keycloak Maintainer
Istio publishes results of ztunnel security audit
Passes with flying colors Istio’s ambient mode splits the service mesh into two distinct layers: Layer 7 processing (the “waypoint proxy”), which remains powered by the traditional Envoy proxy; and a secure overlay (the “zero-trust tunnel”...
April 23, 2025 | Craig Box - Solo.io, for the Istio Product Security Working Group
Member Post
Building AuthZed with the power of cloud native: A CNCF success story
At the Cloud Native Computing Foundation (CNCF), we celebrate organizations that turn cloud native technologies into real-world impact. AuthZed, a CNCF Silver member, is one such story—a company built from the ground up on open source,...
April 22, 2025 | Jimmy Zelinskie, Cofounder at AuthZed
These Kubernetes mistakes will make you an easy target for hackers
Kubernetes is exceedingly powerful for orchestrating containerized applications at scale. But without proper monitoring and observability—especially in self-managed infrastructure—it can quickly become a security disaster waiting to happen. This is not due to inherent flaws in...
April 22, 2025 | Saqib Jan
Deep Dive into the Gateway API Inference Extension
Running AI inference workloads on Kubernetes has some unique characteristics and challenges, and the Gateway API Inference Extension project aims to solve some of those challenges. I recently wrote about these new capabilities in the kgateway...
April 21, 2025 | Christian Posta, Solo.io
Creating a ClickHouse Cluster on Raspberry Pis
Want a hands-on way to explore Kubernetes and ClickHouse®—without spinning up cloud VMs? In this post, we’ll build a home-lab cluster of Raspberry Pi 5 boards that mimics a high-availability setup. Whether you’re a cloud-native developer...
April 18, 2025
Ambassador Post
The CNCF TOC @ KubeCon + CloudNativeCon Europe 2025
The Technical Oversight Committee (TOC) provides technical leadership to the cloud native community. Strong TOC participation at this year’s KubeCon + CloudNativeCon Europe in London enabled in-person discussions and strategic planning for CNCF project technical priorities...
April 16, 2025 | Faseela K
Project Post
Kagent: Bringing Agentic AI to Cloud Native
Solving Cloud Native Operation Challenges with AI Agents Oh no! Your application is unreachable, buried under multiple connection hops—how do you pinpoint the broken link? How do you generate an alert or bug report from Prometheus...
April 15, 2025
Community Post
What LLMs can do for SREs in Cloud Native Infrastructure
Cloud native infrastructure continues to scale, and with it, so does operational overhead. Kubernetes has become the backbone of modern platforms, but as cluster sizes grow past 100 nodes and thousands of workloads, the operational load...
April 14, 2025 | Hwansoo Kim
Community Post
Five critical shifts for Cloud Native at a Crossroads
As enterprises run ever-more-complex workloads on Kubernetes, they’re facing a new set of challenges: how to ensure security requirements are met, budgets are deployed efficiently and operational complexity is, well, not as complex. Many are finding...
April 14, 2025 | Kim McMahon, Sidero Labs