Security Slam North America 2022
Security Slam North America 2022 Published: February 1, 2023 The Cloud Native Computing Foundation (CNCF), in partnership with Sonatype, completed its 2022 Security Slam virtual event on November 21, 2022. The inaugural event featured the participation…
Kubernetes Operators: what are they? Some examples
Guest post originally published on the SparkFabrik blog Kubernetes offers limited initial functionality to ensure flexibility and scalability. K8s Operators are software extensions that make use of Kubernetes APIs to extend behavior. What do we need…
Helm Chart Repository Deprecation Update
Cross-post from Helm’s blog Back in 2019, when the Helm v2 support timeline and end of life plan was announced, the deprecation of the helm/charts GitHub repository was announced, as well. The primary reason for the deprecation is the significant…
Helm Project Update: New Location For Stable and Incubator Charts
Post originally published on Helm’s blog by Matt Farina As previously announced, the stable and incubator repositories have moved to a new location. This post will update you on the new locations and provide directions to…
Please join us in wishing Helm and its community a very happy 5th birthday! Helm is a popular package manager that provides an easy way to find, share, and use software built for Kubernetes. Our most…
The CNCF Data Storage in Cloud Native AI White Paper
Deploying Artificial Intelligence (AI) and Machine Learning (ML) workloads at scale has become a primary objective for modern enterprises. However, moving these data-heavy, stateful workloads into cloud native infrastructure introduces massive data bottlenecks. To help organizations…
OTel and mesh-derived metrics: A 2026 reference
If you already run an OpenTelemetry pipeline, you have good visibility into what your applications are doing. This blog post is about what you don’t see yet: the east-west traffic between your services, measured at the…
Security Profiles Operator v1: Stable APIs, Security Hardened, and Shaping Upstream Kubernetes
Linux provides powerful kernel-level security mechanisms, seccomp, SELinux, and AppArmor, that restrict what containerized workloads can do. Each uses profiles that define permitted behavior, but writing, distributing, and maintaining those profiles by hand is tedious and…
Securing CI/CD for an open source project, part 3: Credentials, verification, and what’s next
This is the third and final post in a series on how Cilium hardens its CI/CD pipeline. Part 1 covered access control and Part 2 covered dependency hardening. This post covers the last layer: keeping CI…
Modern software delivery is no longer constrained by application code — it is constrained by the platform that runs it. This article presents the design of a cloud-native Internal Developer Platform (IDP) built on Kubernetes and…