Lima v2.1: macOS guests and enhanced AI agent safety
Following our expansion into AI workflows in v2.0, Lima v2.1 introduces highly anticipated experimental support for macOS and FreeBSD guests and further hardens local environments against unpredictable AI agents. What is Lima ? Lima (Linux Machines)…
The great migration: Why every AI platform is converging on Kubernetes
When Kubernetes launched a decade ago, its promise was clear: make deploying microservices as simple as running a container. Fast forward to 2026, and Kubernetes is no longer “just” for stateless web services. In the CNCF…
Kyverno 1.17 is a landmark release that marks the stabilization of our next-generation Common Expression Language (CEL) policy engine. While 1.16 introduced the “CEL-first” vision in beta, 1.17 promotes these capabilities to v1, offering a high-performance,…
k0s in 2025: A year of community growth, governance, and Kubernetes innovation
As we begin 2026, it’s worth reflecting on the remarkable progress we made with k0s as a project and as a community during 2025. Last year brought exciting advancements, adoption, and stronger community engagement. k0s is…
CNCF On-Demand: One API to Rule Them All – Building a Unified Platform with Kubernetes Aggregation
How do you build a unified product from a stack of open-source tools? In this talk, a Cozystack core maintainer walks through the engineering journey of integrating Helm, Operators, and the Kubernetes Aggregation Layer to build…
Securing the Node: A Primer on Cilium’s Host Firewall
When discussing Kubernetes network security, much of the attention focuses on pod-to-pod traffic, ingress controllers, and service meshes. But what about the underlying nodes themselves, the very foundation on which our workloads run? The attack surface…
Smart Uses of imagePullSecrets in Kubernetes Cluster with ServiceAccounts
Kubernetes is everywhere nowadays, so are the container images and fetching the images from a private registry is a norm because of N number of reasons including security, that being the topmost. Recap Just to give…
Announcing Kyverno Release 1.14!
TL;DR We are excited to announce the release of Kyverno 1.14.0, marking a significant milestone in our journey to make policy management in Kubernetes more modular, streamlined, and powerful. This release introduces two new policy types…
Announcing OpenReports: Standardized Kubernetes Reporting
The Kubernetes ecosystem, while powerful, is a sprawling landscape of tools. As organizations scale their deployments, ensuring compliance and security becomes paramount. But how do you effectively track and report on your Kubernetes policies and scanners…
CNCF On demand webinar: What’s new in the land of k0s
This webinar highlights the latest updates to k0s, the minimalist Kubernetes distribution, including its CNCF sandbox acceptance and new features like the control plane load balancer, kubelet root directory flag, and declarative etcd management.