Being a Linux Foundation’s CNCF mentee — My journey with Kyverno
Mentorship spotlight guest post originally published on Medium by Yashvardhan Kukreja Hi folks! Recently, I completed the LFX CNCF Mentorship Programme which is an Open source programme where I worked on a cool project which goes…
Auto-labeling Kubernetes resources with Kyverno
Guest post originally published on Nirmata’s blog by Anubhav Sharma, VP, Business Development & Customer Success at Nirmata Introduction As Kubernetes has become the foundational building block for enterprises to go cloud-native, the last couple of…
Guest post originally published on Nirmata’s blog by Jim Bugwadia, founder and CEO at Nirmata In their recent report Container Adoption in the Enterprise, Forrester found that 86% of IT leaders are prioritizing increasing container usage for…
The New Stack: “Kyverno, a New CNCF Sandbox Project, Offers Kubernetes-Native Policy Management”
Kyverno, the open source Kubernetes-native policy engine built by Nirmata, has joined the Cloud Native Computing Foundation (CNCF) this week at the sandbox level. The development team hopes the software will help adoption of Kubernetes policies, by providing a…
CNCF Welcomes New Silver Members as Enterprises Scale AI From Training to Inference
New members including SoftBank Corp. and Crusoe join the cloud native community to help build cost-efficient, sovereign infrastructure SHANGHAI, China – KubeCon + CloudNativeCon + OpenInfra Summit + PyTorch Conference China 2026 – September 8, 2026…
Building an AI factory on Kubernetes
An AI factory is not just a model or a cluster. It is a pool of GPUs that many teams draw from at once: one team fine-tuning, another serving inference, a third running evaluations, all on…
Eleven minutes, zero humans: Building a self-healing Kubernetes upgrade pipeline on Kairos
Once upon a time, upgrading a Kubernetes control plane meant staying awake for it. SSH into every node. Run the upgrade by hand. Watch etcd health the whole time, hoping quorum holds through every reboot. This…
Good apps aren’t born, they’re guided: Building observable policy as code
As parents in tech, we’ve learned that neither children nor applications thrive without clear boundaries. There are no “good” or “bad” kids, just as there are no inherently “good” or “bad” applications, only behaviors shaped by…
Shadow AI in CI/CD: Threat-modeling the path from developer laptop to Kubernetes
Artificial intelligence is becoming part of daily software delivery, often before it becomes part of the security architecture. That gap has a name: Shadow AI. It is any AI tool, model, agent, extension, or integration used…
Runtime Supply Chain Verification using the Node Resource Interface (NRI)
The widely used container supply chain verification tools today operate at the Kubernetes API layer as admission webhooks (such as Kyverno, OPA Gatekeeper, and Sigstore Policy Controller). They intercept pod creation, check signatures and attestations, and…