Cozystack became a CNCF Incubating project

The CNCF TOC has just voted to promote Cozystack to the Incubating level. Cozystack is a platform and framework for building clouds offering Kubernetes and various managed services, including virtual machines, databases, and more, all based on well-known Open Source solutions. The project originated in Ænix and was accepted into the CNCF Sandbox in March 2025.

#news #cncfprojects

KubeVirt and NATS became CNCF Graduated projects

A few days ago, the CNCF Technical Oversight Committee (TOC) voted to graduate KubeVirt and NATS.

KubeVirt, a virtual machine management add-on for Kubernetes, was accepted to the CNCF in 2019 and incubated in 2022. Its adopters today include ARM, Civo, Cloudflare, Microsoft, Nebius, NVIDIA, Oracle, Red Hat, SUSE, and Swisscom.

NATS, a high-performance cloud- and edge-native messaging system, was accepted to CNCF in 2018 as an Incubating project. Last year, this project went through a drama involving its original owner (Synadia) trying to reclaim ownership from the CNCF, but it ended well, and the project was left with the CNCF. Today, NATS's notable adopters include Alibaba, Baidu, Ericsson, Hewlett Packard Enterprise, Mastercard, PayPal, Siemens, and Walmart.

#news #cncfprojects

Excited to present our newest Cloud Native software digest after a while. Here are the significant updates we'd like to highlight:

1. RustFS, an S3-compatible high-performance object storage that originally emerged in February 2024, has reached general availability for production usage with its 1.0.0 release. Currently, it works on Linux, macOS, and Windows and offers full bucket and object lifecycle management, multipart upload for large objects, erasure coding, data tiering, S3 Tables, distributed deployment, pool expansion, data rebalancing, self-healing nodes, event notifications, and multi-tenancy support.

2. Envoy (a CNCF Graduated project) released its v1.40.0, making HTTP/3 and QUIC extensions stable, adding custom post-processing for the matched routes and a new policy to decouple per-worker pool size from cluster size, enabling container-aware CPU detection by default, and adding support for RFC 10008 QUERY method and Redis RESP3 protocol.

3. OpenSearch (a project of The Linux Foundation) made its Kubernetes Operator 3.0 generally available. Its alpha version brought quorum-safe rolling restarts and SmartScaler enabled by default, multi-namespace support, namespace-scoped RBAC, TLS hot reload, init containers and sidecars, and PVC-backed bootstrap Pods. The recent GA release added shard allocation awareness driven by Kubernetes node labels, per-node-pool image overrides, a PVC retention policy, support for running with the security plugin disabled, and host network and hostPath support.

4. Dex, an OpenID Connect identity and OAuth 2.0 provider (a CNCF Sandbox project), was updated to v2.46.0, introducing support for two-factor authentication (TOTP), WebAuthn, and Kerberos, SSO sharing policy, and CEL language expressions.

5. Headlamp, a Kubernetes web UI developed by the Kubernetes SIG, released 0.46.0, introducing alpha support for Kubernetes DRA (Dynamic Resource Allocation). It also got Suspend and Resume actions for Jobs, CompositePodGroup views for hierarchical gang scheduling, and a Copy to Clipboard action in LogViewer.

6. Freelens, an IDE for Kubernetes originated as a community-driven fork of Lens, announced its v2.0.0 as a full internal rewrite, featuring a single electron-vite pipeline (instead of webpack), a UI based on React 19, and a new extension API. New features include a standalone terminal page with its own tabs, relying on the cluster's API discovery to list custom resources, and faster connection to large clusters.

7. Argo CD (a CNCF Graduated project) released v3.6.0 with lots of Web UI improvements, including a new Resources Explorer view, a new Advanced Settings page, better controls in Settings list pages, regex search in Application/ApplicationSet Lists, and enhanced performance. Other updates include a new OCI generator, a new rollback RBAC action for Applications, improved Progressive Sync (no acting on stale data, new metrics, and new conditions), tpl function in ApplicationSet's Go templates, label-based resource filtering, and support for custom deletion messages.

#news #releases

Bitnami engineers are laid off

As Carlos Rodríguez Hernández puts it on LinkedIn, "After 20+ years, the engineering team behind Bitnami has been laid off. We're looking for our next chapter." Carlos has been an engineer at Bitnami since 2016 and later an Engineering Manager at VMware and Broadcom following the related acquisitions.

This team was quite small, but very well known in the DevOps and Cloud Native community, thanks to the hundreds of public container images and Helm charts it produced and maintained. When Broadcom acquired VMware, the Bitnami public catalogue became initially limited and later was removed.

Now, the team behind it was "affected by a corporate restructuring and geographic consolidation." Its members are looking for new roles, and a potential team lift-out to another company is being considered.

#news

Two new AI-related Kubernetes certifications: KAIA & CKIE

KubeCon + CloudNativeCon NA 2026 has already started, and the first announcements are coming in. One of them is related to the certification programs offered by the Linux Foundation Education. Two new certifications are currently being developed: Kubernetes AI Associate (KAIA) and Certified Kubernetes Inference Engineer (CKIE).

At the moment, you can subscribe to updates related to these certifications or join the group of subject matter experts contributing to their content.

In other news, the Certified Kubernetes Network Engineer Certification (CKNE), announced a year ago, is now generally available. Find all the details here.

#news #career #aiml

KubeRay and OpenShell are donated to CNCF

Two new AI-related CNCF Sandbox projects were announced during KubeCon + CloudNativeCon NA 2026.

1. KubeRay, a toolkit and Kubernetes operator to run distributed AI, machine learning, and Python workloads powered by Ray seamlessly on Kubernetes, was donated by the Ray project. Open Source contributors across multiple organisations, including Anyscale, AWS, ByteDance, Google, and Microsoft, created and maintained KubeRay. Now, it's a CNCF Sandbox project.

2. OpenShell, a runtime for securing and governing autonomous AI agents, was donated by NVIDIA. OpenShell was created to manage and monitor agent behaviour, and to provide and enforce policy-based boundaries for what it can do. It is currently adopting Cedar as its policy language. As part of the transition to the CNCF, the project's repos are moving to a separate GitHub organisation.

#news #cncfprojects #aiml #tools

CloudNativePG became a CNCF Incubating project

Earlier this month, the CNCF TOC voted to promote CloudNativePG to the Incubating level. Yesterday, a formal announcement followed.

CloudNativePG is a well-known Kubernetes operator to manage the full lifecycle of highly available PostgreSQL clusters. It originated in EDB and was accepted into the CNCF Sandbox in January 2025. Today, there are more than 50 public adopters of CNPG in production, including Akamai, Ericsson, Google Cloud, IBM, Microsoft Azure, Novo Nordisk, REWE International, and Tesla.

#news #cncfprojects #databases

NVIDIA released its Kubernetes Engine as Open Source

NVIDIA’s DSX AI Factory on GitHub just got new prominent repos. First of all, it’s NVKE (NVIDIA Kubernetes Engine), a management plane that allows you to create and operate a managed Kubernetes service on bare-metal (NVIDIA GPU) infrastructure.

NVKE creates independent workload clusters with their own Kubernetes control plane, etcd, and node pools. Then, it can manage the node pools, replace nodes, and upgrade K8s. These managed K8s clusters are available for end users through the Kubernetes API and kubectl.

Another project, called NVKR (NVIDIA Kubernetes Recipes), lets you build node images and NVKE components, which NVKE then deploys.

Both projects are written in Go and available under the Apache 2.0 license. More details are revealed in yesterday’s blog post from NVIDIA.

P.S. A bit earlier, NVIDIA also released Run:ai as its "Open Source AI workload and GPU orchestration platform for managing shared AI infrastructure on Kubernetes."

#news #aiml #tools

The documentary on Linkerd is available

Yesterday, the latest documentary about a CNCF project, “The Linkerd Story: The People Behind the Service Mesh”, premiered during KubeCon NA 2026. Now, it is available for everyone on YouTube as well.

It tells the story of Linkerd, which started in 2010, and features interviews with Chris Aniszczyk, William Morgan, Christian Hüning, William Rizzo, and Alex Leong.

P.S. Previously, the following documentaries were released:

- “Kubernetes: The Documentary”: Part 1 (24:54) and Part 2 (31:18)
- “Prometheus: The Documentary” (27:00)
- “Inside Envoy: The Proxy for the Future” (31:49)
- “Inside Argo: Automating the Future” (32:15)
- “The Making of Flux”: The Origin (22:21), The Rewrite (44:57), The Scale (23:09), The Future (26:52)
- “Backstage: From Spreadsheet to Standard” (16:40)

#video #cncfprojects

Free Claude Ultra access for CNCF projects

Anthropic has provided CNCF with 3,000 codes for free access to Claude Ultra. Each code gives one person six months of Claude Ultra at no cost. They are available to maintainers of all CNCF projects at the Sandbox, Incubating, and Graduated levels.

#news #cncfprojects

AWS introduced microVMs for its EKS Pods

So-called AWS Nitro Sandboxes became available on Amazon EKS, ECS, and EC2. Now, a single configuration setting (runtimeClassName: isolated-sandbox) brings a Firecracker-based microVM with its own guest kernel into a sandboxed Pod. A common use case for this additional level of isolation is running AI agents.

#news #aws #virtualisation