How data sovereignty is changing cloud native infrastructure design
The core issue isn’t where your server sits. It’s who can be compelled to hand over what’s on it. For years, cloud providers treated sovereignty as a geography problem. Pick a region. Choose a country. Keep…
Slam26 Spring Transparency Report
Setting the stage for the Spring 2026 Security Slam The CNCF Security Slam has continuously evolved to meet the community’s need for robust software supply chain security. In 2022 and 2023, the event functioned as highly…
Challenge As an authorized Payment Aggregator, Razorpay operates under the strict oversight of the Reserve Bank of India (RBI). The RBI PA Master Directions mandate absolute operating resilience, which introduces several highly specific, non-negotiable security requirements:…
In March, I gave a talk at KubeCon + CloudNativeCon Europe 2026 in Amsterdam. After the session, the same questions kept coming up on the CNCF Slack and in person: why build agentic AI on cloud…
From data residency to digital sovereignty: Architectural patterns for cloud native platforms
Over the past two years, digital sovereignty has evolved from a policy discussion into a practical platform engineering concern. The EU Data Act has been fully applicable since January 11, 2025. NIS-2 and DORA already shape…
Challenge A transformative business vision demanded an equally future-ready technology foundation. The program required carefully balancing large-scale transformation with operational continuity—supporting the organization’s immediate business priorities while establishing a scalable, cloud-native foundation for the “Next Generation…
Modern software delivery is no longer constrained by application code — it is constrained by the platform that runs it. This article presents the design of a cloud-native Internal Developer Platform (IDP) built on Kubernetes and…
The Kubernetes integration tax: Prometheus, Cilium and production reality
I still remember the first time we lost sleep over something that wasn’t a bug. It was a Tuesday. Grafana dashboards showed blank panels for Cilium network metrics. Hubble was working fine — DNS visibility, TCP…
Why Kubernetes policy enforcement happens too late—and what to do about it
Kubernetes has become the backbone of modern cloud-native infrastructure. Its flexibility lets teams move fast, compose complex systems from modular components, and deploy across environments with relative ease. But that flexibility comes with a well-known cost:…
Challenges The aim was to reduce dependency on vendor-specific implementations, improve scalability, and ensure data sovereignty and regulatory compliance, while competing with public cloud providers. Technical challenges included building a platform capable of handling 600+ clusters…