Blog

To continue efforts to improve the security of our graduated and incubating projects, we recently worked with Chainguard to assess the software supply chain security practices of two of our graduated projects, Argo and Prometheus. These...

Today we’re thrilled to announce 155 new Cloud Native Ambassadors for the Spring 2023 term! The new diverse group of Ambassadors represents 124 companies across 37 countries – meet all the new Ambassadors here. The new...

By Chris Aniszczyk (@cra) and Rey Lejano In 2018, the Cloud Native Computing Foundation (CNCF) started performing and open sourcing third-party security audits with the goal of improving the overall security practices of our ecosystem. Since...

Project post originally published on the Buildpack’s blog by Juan Bustamante Our adopters and contributors have grown substantially over the last several years, but until now the Cloud Native Buildpacks project has not had a structure...

By Chris Aniszczyk, Adam Korczynski, David Korczynski Introduction In this blog post we will present an overview of the state of fuzzing CNCF projects. We published a blog post on this in June 2022 titled Improving...

By Jonathan Berkhahn, Operator Framework Steering Committee We are pleased to announce Java Operator SDK (JOSDK) is joining Operator Framework as an official subproject. Java Operator SDK JOSDK consists of a high-level framework for implementing operators...

Project post also on the Nirmata blog by the Kyverno maintainers Kyverno is a policy engine built for Kubernetes that helps secure and automate Kubernetes configurations. In Kubernetes policies are configurations that govern the configuration and...

Project post originally published on the Istio blog by Bernard Van De Walle, Splunk + Mitch Connors, Aviatrix With dozens of tools for securing your network available, it is easy to find tutorials and demonstrations illustrating...

By the Cloud Native Explorers Building on the success of “Bob and Jeefy’s Guide to Detroit”, we are pleased to announce Cloud Native Explorers! Cloud Native Explorers is a new blog series where we bring together...

In modern tech stacks, CI/CD enables GitOps. With so many organizations using CD and GitOps practices and technologies to build new features quickly, reliably, and securely, it was a natural evolution for the CNCF and CD...

Project post originally published on the Flux blog by Daniel Holbach As the Flux family of projects and its communities are growing, we strive to inform you each month about what has already landed, new possibilities...

Project post by Gaius, Dragonfly Maintainer Terms and definitions Term Definition OCI The Open Container Initiative is a Linux Foundation project launched by Docker in June 2015 to design open standards for operating system-level virtualization (and...

Guest post by Da Yin, infra engineer at Alibaba Cloud and KubeVela maintainer Background With the release of v1.8, KubeVela, the OAM-based application delivery project, has been continuously evolving for over 3 years. It is now...

By the CNCF Marketing Committee + CNCF Staff KubeCon + CloudNativeCon Europe 2023 is just days away, and with more than 10,000 folks attending, this event is the Cloud Native community’s largest in Europe to date....

The CNCF Technical Oversight Committee (TOC) has voted to accept Keycloak as a CNCF incubating project.  Keycloak is an Identity and Access Management (IAM) solution providing centralized authentication and authorization to applications and APIs. It provides...

Community post by Josh Gavant and Abby Bangser, CNCF’s Platforms WG CNCF’s Platforms working group (WG) is pleased to announce the first release of a whitepaper to provide guidance and clarity on the nature and benefits...

Guest post by Alessandro Vozza, Andy Repton, Andrea Giardini, Ayodeji Ogundare, Marcel Kerker, Meg Stefouli, Pablo Musa, and William Rizzo This is a story about community, resilience, grit, and friendship. The Netherlands is a small country...

Community post by Ragashree M C, CNCF Security Technical Advisory Group CNCF Security Technical Advisory Group is excited to announce the release of the audio version of our flagship whitepaper, Cloud Native Security Whitepaper v2. As...

Project post by Prithvi Raj, Community Leader, LitmusChaos KubeCon + CloudNativeCon EU 2023 kicks off in Amsterdam a couple of weeks from now from April 18-21.  After a fantastic couple of days at Chaos Carnival 2023,...

After announcing the KubeDay series last year with KubeDay Japan, which happened in December of last year, we are thrilled to announce KubeDay Israel on 19 June in Tel Aviv.  Join us in Tel Aviv for...