Search results for: security audit


KeycloakCon Japan 2026: Navigating cloud native identity and the AI frontier

Posted on July 14, 2026 | KeycloakCon Organizers

The countdown is officially on. In just a few weeks, the cloud-native ecosystem meets in Yokohama for KubeCon + CloudNativeCon Japan 2026. Taking place on Tuesday, July 28 from 09:00 – 12:30, KeycloakCon Japan brings together…


Is a Pod the right deployment unit for an AI agent?

Posted on July 14, 2026 | Lin Sun, Solo.io | CNCF Ambassador

When we first started building kagent, we didn’t run every agent in its own Kubernetes Pod, Service, and ServiceAccount. Instead, agents were simply executed inside the kagent runtime. It was the simplest architecture possible: one runtime…


Where should AI workloads run? A sovereign and sensible approach

Posted on July 10, 2026 | Johannes Hemminger and Martin Hafner, KubeOps

Opinions on AI range from transformative optimism to deep skepticism, but one thing is clear: AI is becoming an increasingly important part of enterprise technology strategies. Feel free to pick whichever you like. But whatever you…


Navigating the ingress-NGINX retirement

Posted on July 9, 2026 | Sunny Chan, TCC Consulting

1. The Post-March 2026 landscape ⚠ The CatalystAcknowledge the March 2026 retirement of the Kubernetes SIG Network ingress-nginx controller. Staying on this controller introduces severe operational risks, including unpatched CVEs and a complete halt of feature…


Network boundary for AI agents using NGINX and OpenTelemetry

Posted on July 8, 2026 | Marko Sluga, F5

I recently had an interesting conversation at a KCD about OpenClaw with one of the attendees, and they remarked that they wouldn’t put an agent in their network, because “we don’t know what that thing really…


Evolving platform engineering for AI-native workloads

Posted on July 6, 2026 | Pankaj Gupta, Senior Director of Private Cloud Solutions for VMware by Broadcom

Platform Engineering 1.0 delivered real value. Golden paths accelerated deployment. Internal Developer Platforms (IDPs) reduced cognitive load for developers. Self-service infrastructure gave developers back hours they had been spending filing tickets. Pipelines provided a standard vehicle to…


How data sovereignty is changing cloud native infrastructure design

Posted on July 3, 2026 | Dana Cazacu, Marketing Manager, VEXXHOST

The core issue isn’t where your server sits. It’s who can be compelled to hand over what’s on it. For years, cloud providers treated sovereignty as a geography problem. Pick a region. Choose a country. Keep…


Razorpay

Posted on June 18, 2026

Challenge As an authorized Payment Aggregator, Razorpay operates under the strict oversight of the Reserve Bank of India (RBI). The RBI PA Master Directions mandate absolute operating resilience, which introduces several highly specific, non-negotiable security requirements:…


Securing CI/CD for an open source project: Locking down dependencies

Posted on June 12, 2026 | André Martins (Cilium maintainer and Software Engineer, Isovalent at Cisco) and Feroz Salam (Cilium Security Team and Security Engineer, Isovalent at Cisco)

Part two This is the second post in a three-part series on how Cilium hardens its CI/CD pipeline. Part 1 covered access control: who can trigger builds and what code CI is allowed to execute. This…


Introducing Verifiable Execution in Dapr 1.18

Posted on June 11, 2026 | epower

Bringing attestation, provenance, and tamper-evident execution history to workflows and AI agents For years, the cloud native ecosystem has focused on making distributed systems resilient. Applications recover from failures. Services retry requests. Workflows survive crashes and…