Enforcing image trust on Docker containers using Notary
Guest post originally posted on the Infracloud blog by Frederick Fernando Why worry about software supply chain security? In the past few years, we have seen attacks such as NotPetya and Sunburst, which has shifted the industry’s focus to secure their…
emissary-ingress (formerly Ambassador) is now a CNCF incubating project
The CNCF Technical Oversight Committee (TOC) has voted to accept emissary-ingress as a CNCF incubating project. Emissary-ingress, formerly known as Ambassador, is an open source ingress controller and API Gateway for Kubernetes. It is built on Envoy Proxy…
TechGenix: “Top Open-Source CNCF Security Projects and Why They Matter – Part 2”
Welcome to part 2 of a two-part series on security for cloud-native applications. In part 1, we highlighted three CNCF security projects — Falco, SPIRE, and Notary, which are CNCF incubating projects. In this article, we look at…
TOC Approves KubeEdge as Incubating Project
Today, the CNCF Technical Oversight Committee (TOC) voted to accept KubeEdge as an incubation-level hosted project. KubeEdge is an open source system for extending containerized application orchestration capabilities to hosts at the edge. It is built on top…
TOC welcomes Cortex as an incubating project
Today, the CNCF Technical Oversight Committee (TOC) voted to accept Cortex as an incubation-level hosted project. Cortex provides horizontally scalable, highly available, multi-tenant, long term storage for Prometheus. “Cortex is an excellent addition to the CNCF landscape, and…
TOC approves Operator Framework as Incubating Project
Today, the CNCF Technical Oversight Committee (TOC) voted to accept the Operator Framework, which is made up of two main components Operator SDK and Operator Lifecycle Manager (OLM) as an incubation-level hosted project. The Operator Framework is an…
TOC accepts Contour as Incubating project
Today, the CNCF Technical Oversight Committee (TOC) voted to accept Contour as an incubation-level hosted project. Contour is a high-performance ingress controller for Kubernetes that provides a control plane for Envoy. “One of the most important steps for…
CNCF to host the Rook project to further cloud-native storage capabilities
Today, the Cloud Native Computing Foundation (CNCF) Technical Oversight Committee (TOC) voted to accept Rook as the 15th hosted project alongside Kubernetes, Prometheus, OpenTracing, Fluentd, Linkerd, gRPC, CoreDNS, containerd, rkt, CNI, Envoy, Jaeger, Notary and TUF. Rook has…
SiliconANGLE: "Cloud Native Computing Foundation adds two open-source security projects"
The Cloud Native Computing Foundation, a prominent industry body backed by a who’s who of technology firms, is joining the cybersecurity fray. The group this morning announced that it has taken charge of two open-source projects designed to…
eWeek: "CNCF brings In Notary, The Update Framework to boost container security"
The Cloud Native Computing Foundation on Oct. 24 announced that it is expanding its project roster with the addition of the Notary container trust project and The Update Framework security effort.