Search results for: security audit


Cloud Native Computing Foundation announces Prometheus graduation

Posted on August 9, 2018

Widely-adopted open source monitoring and alerting tool used by cloud native leaders like DigitalOcean, Red Hat, SUSE, and Weaveworks SAN FRANCISCO, Calif., August 9, 2018 – The Cloud Native Computing Foundation® (CNCF®), which sustains open source…


GitOps policy-as-code: Securing Kubernetes with Argo CD and Kyverno

Posted on April 2, 2026 | Albena Galabova, Igtix

A hands-on guide to deploying Kyverno with Argo CD and enforcing custom policies As Kubernetes environments develop, GitOps with Argo CD has become the standard for declarative, self-healing infrastructure. Yet without guardrails for your deployments, misconfigured,…


LLMs on Kubernetes Part 1: Understanding the threat model

Posted on March 30, 2026 | Nigel Douglas, CloudSmith

Let’s say you’ve got an LLM running on Kubernetes. Pods are healthy, logs are clean, users are chatting. Everything looks fine. But here’s the thing: Kubernetes is great at scheduling workloads and keeping them isolated. It…


The weight of AI models: Why infrastructure always arrives slowly

Posted on March 27, 2026 | Wenbo Qi (Dragonfly/ModelPack Maintainer), Chenyu Zhang (Harbor/ModelPack Maintainer) and Feynman Zhou (ORAS Maintainer and CNCF Ambassador)

As AI adoption accelerates across industries, organizations face a critical bottleneck that is often overlooked until it becomes a serious obstacle: reliably managing and distributing large model weight files at scale. A model’s weights serve as…


Announcing Kubescape 4.0 Enterprise Stability Meets the AI Era

Posted on March 26, 2026 | Ben Hirschberg, Kubescape Core Maintainer, ARMO CTO

We are happy to announce the release of Kubescape 4.0, a milestone bringing enterprise-grade stability and advanced threat detection to open source Kubernetes security. This version focuses on making security more proactive and scalable. It also…


Saxo Bank

Posted on March 25, 2026

Managing dependencies beyond Kubernetes Kubernetes orchestrates containerized workloads, but it cannot operate in isolation. In enterprise environments, containerized services depend on systems that live outside the Kubernetes ecosystem. At Saxo Bank these dependencies include a material…


CNCF Welcomes 21 New Silver Members As Global Demand Surges for Observability, AI, and Secure Cloud Native Infrastructure

Posted on March 25, 2026

New global members join CNCF reflecting the rise of enterprise demand for scalable, cost-efficient cloud native technologies KUBECON + CLOUDNATIVECON EUROPE, AMSTERDAM—25 MARCH, 2025—The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native…


Cloud native agentic standards

Posted on March 23, 2026 | CNCF AI TCG

An application, composed of one or more containers as dictated by system architecture, that operates either independently or as part of a distributed collaboration—interacting with at least one other entity (container) or achieving quorum-based consensus. It…


Policy-as-Code: Flexible Kubernetes governance with Kyverno

Posted on March 19, 2026 | Dahu Kuang, Lei Hou, and Shuting Zhao, Kyverno Project Maintainers

Overview Kubernetes has fundamentally transformed how enterprises deploy and manage business workloads. As organizations build production applications at scale on Kubernetes, cluster size and complexity continue to grow—creating unprecedented challenges in ensuring cluster security, compliance, and…


Registry mirror authentication with Kubernetes secrets

Posted on March 9, 2026 | Sascha Grunert, Red Hat

Part I: Architecture and Implementation In production Kubernetes clusters, pulling container images from private registries happens thousands of times per day. Kubernetes distributions from major cloud vendors provide credential providers for their respective registries like AWS…