Tag

#cncf

Tagged “cncf”

8 articles

Cloud Native Buildpacks reaches CNCF graduation, and the no-Dockerfile path gets its stamp

The CNCF graduated Cloud Native Buildpacks on August 11, formalising a build primitive that turns source code into OCI images without a hand-written Dockerfile. For teams tired of maintaining base-image drift across every service, the endorsement lands at a useful moment.

Aug 12, 2026 · Priya Nair Security & supply chain

CNCF's shadow-AI post makes the case for treating agents as identities

A new CNCF community post from Matteo Bisi at ReeVo argues for treating AI tools in the CI/CD pipeline as privileged identities, and maps the threat model plus available open-source controls stage by stage. The gap it names: no CNCF graduated project owns end-to-end AI governance yet.

Aug 9, 2026 · Tomás Vega Platform engineering

OpenCost 1.121.0 pins a dollar figure to every model and token on Kubernetes

OpenCost 1.121.0, announced on the CNCF blog on August 5, adds per-model and per-token cost attribution for AI inference workloads. The release aims at platform teams that have been reading GPU bills and token counters in separate windows with no way to connect them.

Aug 6, 2026 · Maya Okonkwo Platform engineering

Kyverno's CLI learns to fake production so offline policy tests stop lying

A CNCF blog post walks through how the Kyverno CLI now stands up an in-memory fake of the Kubernetes API cache, so policies that lean on GlobalContextEntry lookups can be exercised offline instead of silently skipping. The workflow that used to say 'all pass' when it really meant 'never ran' has finally closed.

Jul 29, 2026 · Priya Nair Security & supply chain

Confidential Containers hits CNCF incubation, and every pipeline is on notice

The CNCF Technical Oversight Committee voted Confidential Containers into incubation on July 22, moving TEE-backed pods one step closer to being a normal part of the Kubernetes stack. If your pipeline already signs and attests images, the runtime side is about to demand the same discipline.

Jul 25, 2026 · Tomás Vega Platform engineering

Sandboxing your agent isn't the hard part, keeping it cheap is

A CNCF post from Solo.io's Lin Sun argues Kubernetes' agent-sandbox project delivers the isolation piece of hosting AI agents, while a sibling project, agent-substrate, is aimed at the resource-efficiency gap a per-agent pod leaves behind.

Jul 7, 2026 · Tomás Vega Runners & infrastructure

Dynamic Resource Allocation hits GA in Kubernetes 1.35, and GPU CI jobs finally get a real API

DRA reached general availability in Kubernetes v1.35, and the NVIDIA DRA driver has dropped its Beta label. For teams running GPU workloads through Kubernetes-backed pipelines, it replaces a decade of nodeSelector gymnastics with a first-class request primitive.

Jul 2, 2026 · Priya Nair Image distribution

Dragonfly 2.5 ships Kubernetes webhook injection, drops V1 preheat

The CNCF P2P file distribution project adds an admission webhook that wires pods into the mesh without rebuilding images, plus a download blocklist, an hf:// scheme for model repositories, and a new dfctl CLI. The V1 preheat endpoints are removed.

Jun 30, 2026 · Maya Okonkwo