Optimizing Kyverno CLI performance: My LFX mentorship journey
Why Open Source? While exploring CNCF Projects in early 2025, I stumbled upon Kyverno and its community impressed me. The mentors and community members encouraged me to become a part of LFX Mentorship and motivated me…
The New Stack: “Why the CNCF’s New Executive Director Is Obsessed With Inference”
Why inference will dominate the next decade of computing and what the CNCF’s new Kubernetes AI conformance program means for enterprises.
University of Wisconsin–Madison
Solution: Turning compliance challenges Into a secure, scalable network As regulatory requirements tightened, UW–Madison needed a network layer that could deliver fine-grained control without sacrificing performance. The team migrated from Calico to Cilium, gaining an eBPF-powered…
Building microservices the easy way with Dapr
Ambassador post originally published on Medium by Dotan Horovits Microservices have been with us for nearly two decades, but it’s still far from easy to develop at scale, in a polyglot environment. The Dapr project, the…
Cloud Native Live: Kyverno 1.16 — Advancing Policy as Code with CEL and SDK
Kyverno 1.16 delivers major advancements in policy-as-code for Kubernetes, centered on a new generation of CEL-based policies now available in beta, with a clear path to GA. This release introduces partial support for namespaced CEL policies…
Harbor: Enterprise-grade container registry for modern private cloud
In the evolving landscape of application deployment, containerization with Kubernetes (K8s) has become the new standard. As organizations adopt Kubernetes at scale, public image registries often bring new challenges, from rate limits and escalating costs to…
Istio at KubeCon + CloudNativeCon North America 2025: Community highlights and project progress
KubeCon + CloudNativeCon North America 2025 lit up Atlanta from November 10–13, bringing together one of the largest gatherings of open-source practitioners, platform engineers, and maintainers across the cloud native ecosystem. For the Istio community, the…
CNCF On-Demand: Simplifying Cluster and Application Lifecycle (CAPI, CAREN and Gitops)
Managing the lifecycle of Kubernetes clusters and applications at scale often leads to operational complexity, fragmented tooling, and inconsistent environments. This session explores a unified, declarative approach to simplify and automate these processes using Cluster API…
Solution DaoCloud adopted HAMi, a CNCF Sandbox project, for heterogeneous AI computing virtualization, as the unified GPU layer across both D.run and DCE. HAMi provides device virtualization, vGPU partitioning, and scheduling for heterogeneous accelerators in Kubernetes…
runc container breakout vulnerabilities: A technical overview
A set of high-severity vulnerabilities in runc were publicly disclosed in November 2025, allowing for full container breakouts. Runc is the cornerstone of containerization on Linux, serving as the default low-level container runtime for industry-standard tools…